[ Matters most · 30 CVEs ]
Act on these first.
Exploited in the wild, likely to be exploited, or flagged as urgent by a national CERT, with activity in the last 30 days. Newer activity ranks higher. How we rank
Unauthenticated command execution in NetScaler ADC and Gateway
An input validation flaw in Citrix NetScaler ADC and NetScaler Gateway lets an attacker run commands on the appliance without logging in. Versions…
Flagged by CERT-EU · CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 9.8 Fix available 02CVE-2026-88772Memory flaw in NetScaler ADC and Gateway allows remote code execution
A memory buffer flaw in Citrix NetScaler ADC and NetScaler Gateway can lead to remote code execution or a denial of service. It affects the same…
Flagged by CERT-EU · CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 8.1 Fix available 03CVE-2026-76519Crafted email attachment gives root on Cisco Secure Email Gateway
A path traversal flaw in the Advanced Malware Protection feature of Cisco Secure Email Gateway lets an attacker write files and run commands as root…
Flagged by CERT-EU · CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 9.8 Fix available 04CVE-2026-104935Ivanti Connect Secure authentication bypass allows remote commands
An authentication bypass by spoofing in Ivanti Connect Secure lets a remote attacker run commands without logging in. Versions before 25.1.3.0 are…
Flagged by CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 8.6 EPSS 26%Fix available 05CVE-2026-21589Unauthenticated file read in Atlassian Data Center products
An arbitrary file access flaw in Bitbucket, Confluence, Jira Software, Jira Service Management, Bamboo and Crowd Data Center, Crucible and Fisheye…
Flagged by CERT-EU · CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 7.5 EPSS 13%Fix available 06CVE-2026-102764Authentication bypass in BeyondTrust Remote Support
Internal components of BeyondTrust Remote Support do not properly check where messages come from, which can let an attacker perform file operations…
Flagged by NCSC-NL · BSI CERT-Bund ExploitedCVSS 9.8 07CVE-2015-3306ProFTPD mod_copy lets anyone copy files on the server
The mod_copy module in ProFTPD 1.3.5 lets remote attackers read and write arbitrary files using the SITE CPFR and SITE CPTO commands, without logging…
ExploitedCVSS 10.0 EPSS 99% 08CVE-2026-102489Session hijack leads to code execution in Zammad
A session fixation flaw in the Zammad helpdesk system lets an attacker hijack a session and run code as the zammad user. Versions 6.3.0 to 6.5.4 are…
Flagged by NCSC-NL · BSI CERT-Bund ExploitedCVSS 9.8 09CVE-2026-71362Privilege escalation in Adobe Commerce and Magento
An incorrect authorisation flaw in Adobe Commerce, Adobe Commerce B2B and Magento Open Source lets an attacker gain elevated access to sensitive…
ExploitedCVSS 9.1 EPSS 88% 10CVE-2026-105134Command injection in AhsayCBS backup server
An OS command injection flaw in the Replication Receiver of the AhsayCBS backup server lets a remote attacker run commands without logging in…
Flagged by NCSC-NL ExploitedCVSS 10.0 EPSS 38% 11CVE-2026-109618Out-of-memory handling flaw in PHP can lead to remote code execution
PHP does not always clean up request memory correctly after an out-of-memory error, and the cleanup step can then act on uninitialised memory…
Flagged by CERT-EU · CERT-FR · NCSC-NL · NCSC-UK · BSI CERT-Bund CVSS 9.8 Fix available 12CVE-2026-88779Exploited denial of service flaw in NetScaler ADC and Gateway
A memory buffer flaw in NetScaler ADC and NetScaler Gateway lets a remote attacker crash the appliance. It is fixed in 14.1-73.41 and 13.1-64.28 (and…
Flagged by CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 7.5 Fix available 13CVE-2026-102490Local privilege escalation to root in Zammad DEB and RPM packages
In Zammad installed from the DEB or RPM packages, service processes start as root and run files that the zammad service account can change. An…
Flagged by NCSC-NL · BSI CERT-Bund ExploitedCVSS 7.8 14CVE-2015-5477Crafted TKEY queries crash ISC BIND DNS servers
A flaw in how ISC BIND handles TKEY queries makes the named DNS server stop with an assertion failure. BIND 9.x before 9.9.7-P2 and 9.10.x before…
ExploitedCVSS 7.5 EPSS 99%Fix available 15CVE-2016-3081Remote code execution in Apache Struts with Dynamic Method Invocation
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1 and 2.3.25 to 2.3.28 let remote attackers run code through the method: prefix when Dynamic…
ExploitedCVSS 8.1 EPSS 96%Fix available 16CVE-2021-3199Path traversal in ONLYOFFICE Document Server leads to code execution
A directory traversal flaw in the /upload endpoint of ONLYOFFICE Document Server before 5.6.3 allows remote code execution when JWT is in use. The…
ExploitedCVSS 9.8 EPSS 20% 17CVE-2026-87902Local file inclusion in WordPress core can lead to code execution
WordPress page-template resolution can be made to include a chosen local .php file outside the active theme directories, without logging in. If…
Flagged by CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 8.1 EPSS 40%Fix available 18CVE-2026-104286Unauthenticated file write in Fortinet FortiMail
A path traversal flaw in Fortinet FortiMail lets an attacker write arbitrary files on the system through crafted HTTP or HTTPS requests, without…
Flagged by CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 9.8 Fix available 19CVE-2026-76504Authentication bypass gives admin access to Cisco SD-WAN Manager
Cisco Catalyst SD-WAN Manager mishandles URI encoding in HTTP requests, which lets an attacker bypass authentication and use the API as the admin…
Flagged by CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 9.8 Fix available 20CVE-2026-93616Unauthenticated script upload in Check Point Management Server
A directory traversal and file upload flaw lets an attacker upload and run scripts on Check Point Quantum Security Management Server without logging…
Flagged by CERT-FR · NCSC-NL ExploitedCVSS 9.8 EPSS 76%Fix available 21CVE-2026-109619Stale memory references in PHP can lead to remote code execution
Some of PHP's global state can keep pointing at request memory after it has been freed, and later requests may act on that stale state. Several ways…
Flagged by CERT-EU · CERT-FR · NCSC-NL · NCSC-UK · BSI CERT-Bund CVSS 8.1 Fix available 22CVE-2026-106931Command injection in SiteGuard Server Edition gives root or SYSTEM
SiteGuard Server Edition, a web application firewall module for Apache httpd, Nginx and IIS, contains an OS command injection flaw that lets an…
ExploitedCVSS 8.5 23CVE-2026-85706Unauthenticated file read in GitLab through the commits API
Missing authentication and improper path confinement in the GitLab repository commits API let an unauthenticated user read arbitrary files from the…
Flagged by CERT-FR ExploitedCVSS 10.0 EPSS 92%Fix available 24CVE-2026-96656Plex Media Server admin setting allows code execution
Plex Media Server before 1.43.3.10861 lets an admin user write files that are run when the server loads, because a transcoder setting is passed on…
ExploitedCVSS 7.2 25CVE-2026-86950Exploited out-of-bounds write in Apple iOS, iPadOS and macOS
An out-of-bounds write flaw in Apple's software lets a maliciously crafted file run code when it is processed. It is fixed in iOS and iPadOS 26.7.1…
Flagged by CERT-FR · NCSC-NL · BSI CERT-Bund ExploitedCVSS 8.8 Fix available 26CVE-2026-96652Server-side request forgery in Plex Media Server timeline endpoint
Plex Media Server before 1.43.3.10861 lets anyone with an X-Plex-Token value make the server send POST requests to an address of their choosing…
ExploitedCVSS 4.3 27CVE-2026-96654URL handling flaw exposes Plex Media Server plugin functions
Plex Media Server before 1.43.3.10861 does not correctly handle URL values in searchOne, which lets an attacker call other plugins' functions with…
ExploitedCVSS 6.5 28CVE-2026-96655Server-side request forgery in Plex Media Server transcoder
Plex Media Server before 1.43.3.10861 lets an authenticated user make the server request arbitrary internal or external addresses through the…
ExploitedCVSS 4.3 29CVE-2026-110936DLL search path flaw in Siemens Software Center
Siemens Software Center before V4.0.9.8 loads DLLs from an uncontrolled search path. An authenticated local attacker can place a crafted DLL where…
ExploitedCVSS 6.7 Fix available 30CVE-2026-0322Code injection in PAN-OS management interface gives root on firewalls
A code injection flaw in the management interface of Palo Alto Networks PAN-OS lets an authenticated administrator with network access run code as…
Flagged by BSI CERT-Bund ExploitedCVSS 7.2