| CVE ID | Exploitable | Vendor | Product | Vulnerability | Date added |
|---|---|---|---|---|---|
| CVE-2026-21589 | True | Atlassian | Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 2026-10-15 00:00:00 |
| CVE-2026-0322 | True | Palo Alto Networks | PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | 2026-10-14 00:00:00 |
| CVE-2026-105133 | True | Ahsay | AhsayCBS | Ahsay AhsayCBS Improper Authentication Vulnerability | 2026-10-14 00:00:00 |
| CVE-2026-76519 | True | Cisco | Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 2026-10-14 00:00:00 |
| CVE-2026-105134 | True | Ahsay | AhsayCBS | Ahsay AhsayCBS Command Injection Vulnerability | 2026-10-14 00:00:00 |
| CVE-2026-96951 | True | Microsoft | Windows | Microsoft Windows Command Injection Vulnerability | 2026-10-13 00:00:00 |
| CVE-2026-104935 | True | Ivanti | Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 2026-10-13 00:00:00 |
| CVE-2015-3306 | True | ProFTPD | ProFTPD | ProFTPD Improper Access Control Vulnerability | 2026-10-08 00:00:00 |
| CVE-2021-3199 | True | ONLYOFFICE | Docs | ONLYOFFICE Docs Server Path Traversal Vulnerability | 2026-10-08 00:00:00 |
| CVE-2023-22894 | True | Strapi | Strapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | 2026-10-08 00:00:00 |
| CVE-2016-3081 | True | Apache | Struts | Apache Struts Command Injection Vulnerability | 2026-10-08 00:00:00 |
| CVE-2015-5477 | True | ISC | BIND | ISC BIND Data Processing Errors Vulnerability | 2026-10-08 00:00:00 |
| CVE-2026-88779 | True | Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-10-04 00:00:00 |
| CVE-2026-102489 | True | Zammad GmbH | Zammad | Zammad GmbH Zammad Session Fixation Vulnerability | 2026-10-02 00:00:00 |
| CVE-2026-102490 | True | Zammad GmbH | Zammad | Zammad GmbH Zammad Improper Privilege Management Vulnerability | 2026-10-02 00:00:00 |
| CVE-2026-104286 | True | Fortinet | FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 2026-10-01 00:00:00 |
| CVE-2026-76504 | True | Cisco | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 2026-09-30 00:00:00 |
| CVE-2026-86950 | True | Apple | Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | 2026-09-29 00:00:00 |
| CVE-2026-88771 | True | Citrix | NetScaler | Citrix NetScaler Improper Input Validation Vulnerability | 2026-09-27 00:00:00 |
| CVE-2026-88772 | True | Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-09-27 00:00:00 |
| CWE | Name | CVEs |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 51 |
| CWE-20 | Improper Input Validation | 43 |
| CWE-502 | Deserialization of Untrusted Data | 38 |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | 38 |
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 32 |
| CWE-416 | Use After Free | 27 |
| CWE-306 | Missing Authentication for Critical Function | 24 |
| CWE-284 | Improper Access Control | 22 |
| CWE-287 | Improper Authentication | 21 |
| CWE-288 | Authentication Bypass Using an Alternate Path or Channel | 19 |
AVET INS is an owner of VULNDBASE brand and website. This product uses data from the NVD API but is not endorsed or certified by the NVD. See NVD page for more information. CVE is a registered trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE site. CWE is a registered trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE page. KEV (Known Exploited Vulnerabilities) is a catalog maintained by CISA. EUVD is the official EU repository for timely, curated cybersecurity vulnerability intelligence and remediation guidance run by ENISA. DORA (Digital Operational Resilience Act) is and EU directive.
Copyright AVET INS 1997 - 2026