97 results
CVE-2024-54085
CVE-2024-54085: AMI MegaRAC SPx Redfish Authentication Bypass (KEV)
AMI MegaRAC SP-x BMC firmware
CVE-2024-6047
CVE-2024-6047: GeoVision EOL Device OS Command Injection (KEV, Mirai Botnet)
GeoVision end-of-life IP cameras, DVRs, video servers and LPR units (multiple models, incl. GV-BX130, GV-BX1500, GV-CB220, GV-EBL1100, GV-EFD1100, GV-FD2410, GV-FD3400, GV-FE3401, GV-FE420, GV-VS03/04A/04H/14/2410/28XX/216XX, GV-DSP_LPR, GVLX 4 V2/V3)
CVE-2025-0282
CVE-2025-0282: Ivanti Connect Secure Stack-Based Buffer Overflow RCE
Ivanti Connect Secure
CVE-2025-14733
CVE-2025-14733: WatchGuard Firebox iked IKEv2 RCE (KEV, Known Ransomware Use)
WatchGuard Fireware OS (Firebox T15/T35/T-series, M-series, FireboxV, FireboxCloud appliances)
CVE-2025-14849
CVE-2025-14849: Advantech WebAccess/SCADA Unrestricted File Upload RCE
Advantech WebAccess/SCADA
CVE-2025-25249
CVE-2025-25249: Fortinet FortiOS/FortiSwitchManager/FortiSASE Heap Overflow RCE
Fortinet FortiOS
CVE-2025-29635
CVE-2025-29635: D-Link DIR-823X Command Injection, Active Mirai Exploitation (KEV)
D-Link DIR-823X (firmware)
CVE-2025-32433
CVE-2025-32433: Erlang/OTP SSH Server Unauthenticated RCE, CVSS 10.0 (KEV)
Erlang/OTP (ssh application)
CVE-2025-32975
CVE-2025-32975: Quest KACE SMA SSO Authentication Bypass to Admin Takeover (KEV)
Quest KACE Systems Management Appliance (SMA)
CVE-2025-37164
CVE-2025-37164: HPE OneView Unauthenticated Code Injection RCE
HPE OneView
CVE-2025-39682
CVE-2025-39682: Linux Kernel TLS Zero-Length Record Handling Flaw (KEV)
Linux Kernel
CVE-2025-5086
CVE-2025-5086: Dassault DELMIA Apriso RCE (KEV)
Dassault Systemes DELMIA Apriso
CVE-2025-53521
CVE-2025-53521: F5 BIG-IP APM Stack Buffer Overflow RCE (KEV, Reclassified from DoS)
F5 BIG-IP Access Policy Manager (APM)
CVE-2025-59689
CVE-2025-59689: Libraesva Email Security Gateway Compressed-Attachment Command Injection (KEV)
Libraesva Email Security Gateway (ESG)
CVE-2025-61624
CVE-2025-61624: Fortinet FortiOS/FortiProxy/FortiPAM CLI Path Traversal (KEV)
Fortinet FortiOS
CVE-2025-66644
CVE-2025-66644: Array Networks ArrayOS AG DesktopDirect Command Injection (KEV, Exploited)
Array Networks ArrayOS AG (AG1000, AG1000T, AG1000v5, AG1100, AG1100v5, AG1150, AG1200, AG1200v5, AG1500, AG1500FIPS, AG1500v5, AG1600, AG1600v5, VxAG)
CVE-2025-6965
CVE-2025-6965: SQLite Aggregate-Term Truncation Reaches Siemens RUGGEDCOM CROSSBOW SAC
SQLite
CVE-2026-0322
CVE-2026-0322: Palo Alto Networks PAN-OS management-interface RCE (KEV)
Palo Alto Networks PAN-OS management interface (PA-Series, VM-Series firewalls, Panorama)
CVE-2026-102764
CVE-2026-102764: BeyondTrust Remote Support Bypass (KEV)
BeyondTrust Remote Support
CVE-2026-104286
CVE-2026-104286: Fortinet FortiMail Path Traversal RCE (KEV)
Fortinet FortiMail
CVE-2026-104935
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass RCE (KEV)
Ivanti Connect Secure
CVE-2026-10520
CVE-2026-10520: Ivanti Sentry OS Command Injection RCE (KEV)
Ivanti Sentry (Standalone Sentry)
CVE-2026-114625
CVE-2026-114625: Arista VeloCloud Orchestrator SQLi (KEV)
Arista VeloCloud Orchestrator (VCO), on-premises deployments
CVE-2026-15409
CVE-2026-15409: SonicWall SMA1000 SSRF (KEV, CVSS 10.0)
SonicWall SMA1000 Series (SMA 6210, SMA 7210, SMA 8200v)
Questions about this page?