VULNpocalypse

Most exploited technologies in 2026

Which kinds of software attackers are using, how fast, and whether you can detect it. Firewalls and VPNs lead 2026 with 58 bugs confirmed under attack.

Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.

Exploited technologies scoreboard, 2022 to 2026

Bugs CISA confirmed under attack, by technology and year, with how those attacks behave.

Technology20222023202420252026*2026 vs 2025 Zero-dayMedian time to exploitRansomware VEDAS rules
Firewalls and VPNsFirewalls, VPN gateways, load balancers and other network edge appliances.7425283958 +49% so far38%4 days 1628 of 90
Operating systemsWindows, Linux, macOS and iOS components, including the kernel and system services.14645415043 −14% so far40%2 days 63 of 40
Developer, AI and data platformsCode hosting, CI, frameworks, app servers, data tools and AI platforms.30892243 +95% so far6%46 days 643 of 65
Email, chat and collaborationMail servers, webmail, collaboration suites and phone systems.2214112031 +55% so far6%34 days 1024 of 49
Remote access and IT toolsRemote support, device management, monitoring and security tools that IT teams run.1410142227 +23% so far12%26 days 732 of 48
Websites, CMS and pluginsWordPress, Drupal, Joomla, e-commerce platforms and their plugins.815719 +171% so far0%8 days 117 of 26
Business applicationsERP, CRM, analytics and other line-of-business software.3311101711 −35% so far0%33 days 715 of 27
Desktop apps and documentsOffice suites, PDF readers, archivers and other desktop software.3972411 +175% so far13%171 days 10 of 9
Routers, cameras and storageHome and small-office routers, IP cameras, NAS boxes and other embedded devices.446152110 −52% so far0%395 days 011 of 30
BrowsersChrome, Edge, Firefox, Safari and the engines inside them.89915109 −10% so far21%2 days 00 of 19
File transfer and backupManaged file transfer, file sharing and backup software.384117 −36% so far6%8 days 211 of 17
Virtualisation and serversHypervisors, virtualisation management and core server software.103577 0% so far21%20 days 23 of 9
Phones and chipsAndroid, iOS device components, and mobile chipsets and GPUs.11191094 −56% so far46%1 days 02 of 6
Industrial and OTIndustrial controllers, building automation and SCADA.3122 0% so far0%1634 days 01 of 4
OtherSoftware that fits none of the groups above.2920174 −100% so far0%410 days 02 of 3

Year columns: bugs added to CISA’s exploited list (darker is more). *2026 is the year so far. Zero-day, time to exploit, ransomware and VEDAS rules cover 2025 and 2026: zero-day means CISA listed the bug on or before the day its CVE was published; time to exploit is days from CVE publication to CISA listing; VEDAS rules counts remotely exploitable bugs that have a free detection rule.

Source: CISA KEV · CVE.org · vedas-signaturesVULNPOCALYPSE.DEV

Most exploited products in 2026

Products with the most bugs added to CISA’s exploited list this year.

Microsoft Windows (Operating systems)Microsoft Windows (Operating systems): 1414Linux Kernel (Operating systems)Linux Kernel (Operating systems): 99Apple Multiple Products (Operating systems)Apple Multiple Products (Operating systems): 77Citrix NetScaler (Firewalls and VPNs)Citrix NetScaler (Firewalls and VPNs): 55Cisco Catalyst SD-WAN Manager (Firewalls and VPNs)Cisco Catalyst SD-WAN Manager (Firewalls and VPNs): 55Microsoft SharePoint (Email, chat and collaboration)Microsoft SharePoint (Email, chat and collaboration): 55SonicWall SMA1000 Appliances (Firewalls and VPNs)SonicWall SMA1000 Appliances (Firewalls and VPNs): 44JFrog Artifactory (Developer, AI and data platforms)JFrog Artifactory (Developer, AI and data platforms): 44Langflow Langflow (Developer, AI and data platforms)Langflow Langflow (Developer, AI and data platforms): 44Synacor Zimbra Collaboration Suite (… (Email, chat and c…Synacor Zimbra Collaboration Suite (… (Email, chat and collaboration): 44Plex Media Server (Business applications)Plex Media Server (Business applications): 44Microsoft Office (Desktop apps and documents)Microsoft Office (Desktop apps and documents): 44Google Chromium V8 (Browsers)Google Chromium V8 (Browsers): 44Ivanti Connect Secure (Firewalls and VPNs)Ivanti Connect Secure (Firewalls and VPNs): 33Arista VeloCloud Orchestrator (Firewalls and VPNs)Arista VeloCloud Orchestrator (Firewalls and VPNs): 33
Source: CISA KEVVULNPOCALYPSE.DEV

Technology by technology

Firewalls and VPNs

Firewalls, VPN gateways, load balancers and other network edge appliances.

Bugs added to CISA’s exploited list per year

02550752022: 7420222023: 2520232024: 2820242025: 3920252026: 58202658

Exploited in 2026

58

Change vs 2025

+49%

Zero-day share

38%

Median time to exploit

4 days

Ransomware-linked

16

VEDAS rules (remote)

28 of 90

Most exploited products since 2022

  1. Cisco IOS and IOS XE Software14
  2. Palo Alto Networks PAN-OS13
  3. Fortinet Multiple Products7
  4. Juniper Junos OS7
  5. Citrix NetScaler6
  6. Cisco IOS software6

Latest exploited CVEs

  • CVE-2026-118527 2026-10-30
    Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
  • CVE-2026-111357 2026-10-30
    Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
  • CVE-2026-76418 2026-10-29
    Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
  • CVE-2026-114625 2026-10-23
    Arista VeloCloud Orchestrator SQL Injection Vulnerability
  • CVE-2025-61624 2026-10-16
    Fortinet Multiple Products Path Traversal Vulnerability
  • CVE-2026-76519 2026-10-14
    Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Operating systems

Windows, Linux, macOS and iOS components, including the kernel and system services.

Bugs added to CISA’s exploited list per year

02550751001251502022: 14620222023: 4520232024: 4120242025: 5020252026: 43202643

Exploited in 2026

43

Change vs 2025

−14%

Zero-day share

40%

Median time to exploit

2 days

Ransomware-linked

6

VEDAS rules (remote)

3 of 40

Most exploited products since 2022

  1. Microsoft Windows147
  2. Apple Multiple Products44
  3. Linux Kernel31
  4. Microsoft Win32k16
  5. Apple iOS, iPadOS, and macOS7
  6. Apple iOS and iPadOS5

Latest exploited CVEs

  • CVE-2026-46300 2026-10-28
    Linux Kernel Missing Initialization of a Variable Vulnerability
  • CVE-2026-96951 2026-10-13
    Microsoft Windows Command Injection Vulnerability
  • CVE-2026-86950 2026-09-29
    Apple Multiple Products Out-of-Bounds Write Vulnerability
  • CVE-2025-39964 2026-09-18
    Linux Kernel Race Condition Vulnerability
  • CVE-2026-53266 2026-09-18
    Linux Kernel Out-of-Bounds Write Vulnerability
  • CVE-2025-39682 2026-09-18
    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

Developer, AI and data platforms

Code hosting, CI, frameworks, app servers, data tools and AI platforms.

Bugs added to CISA’s exploited list per year

010203040502022: 3020222023: 820232024: 920242025: 2220252026: 43202643

Exploited in 2026

43

Change vs 2025

+95%

Zero-day share

6%

Median time to exploit

46 days

Ransomware-linked

6

VEDAS rules (remote)

43 of 65

Most exploited products since 2022

  1. Apache Tomcat6
  2. Langflow Langflow5
  3. JFrog Artifactory4
  4. JetBrains TeamCity4
  5. Craft CMS Craft CMS4
  6. PHP Group PHP3

Latest exploited CVEs

  • CVE-2026-97229 2026-10-29
    GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
  • CVE-2026-111497 2026-10-27
    Google Brotli Unchecked Return Value Vulnerability
  • CVE-2026-109618 2026-10-26
    PHP Memory Corruption Vulnerability
  • CVE-2026-109619 2026-10-26
    PHP Stale Internal Request-State Vulnerability
  • CVE-2016-3081 2026-10-08
    Apache Struts Command Injection Vulnerability
  • CVE-2023-22894 2026-10-08
    Strapi Cleartext Storage of Sensitive Information Vulnerability

Email, chat and collaboration

Mail servers, webmail, collaboration suites and phone systems.

Bugs added to CISA’s exploited list per year

0102030402022: 2220222023: 1420232024: 1120242025: 2020252026: 31202631

Exploited in 2026

31

Change vs 2025

+55%

Zero-day share

6%

Median time to exploit

34 days

Ransomware-linked

10

VEDAS rules (remote)

24 of 49

Most exploited products since 2022

  1. Synacor Zimbra Collaboration Suite (ZCS)17
  2. Microsoft SharePoint9
  3. Microsoft Exchange Server8
  4. Roundcube Webmail7
  5. Microsoft SharePoint Server5
  6. SmarterTools SmarterMail3

Latest exploited CVEs

  • CVE-2026-110447 2026-10-23
    Collabora Online, Built-in CODE Server OS Command Injection Vulnerability
  • CVE-2026-21589 2026-10-15
    Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
  • CVE-2026-102490 2026-10-02
    Zammad GmbH Zammad Improper Privilege Management Vulnerability
  • CVE-2026-102489 2026-10-02
    Zammad GmbH Zammad Session Fixation Vulnerability
  • CVE-2026-65660 2026-09-25
    Microsoft SharePoint Code Injection Vulnerability
  • CVE-2026-9586 2026-09-02
    Sangoma Switchvox SQL Injection Vulnerability

Remote access and IT tools

Remote support, device management, monitoring and security tools that IT teams run.

Bugs added to CISA’s exploited list per year

0510152025302022: 1420222023: 1020232024: 1420242025: 2220252026: 27202627

Exploited in 2026

27

Change vs 2025

+23%

Zero-day share

12%

Median time to exploit

26 days

Ransomware-linked

7

VEDAS rules (remote)

32 of 48

Most exploited products since 2022

  1. Ivanti Endpoint Manager Mobile (EPMM)7
  2. SolarWinds Web Help Desk5
  3. Ivanti Endpoint Manager (EPM)5
  4. ConnectWise ScreenConnect4
  5. PaperCut NG/MF4
  6. SimpleHelp SimpleHelp4

Latest exploited CVEs

  • CVE-2026-102764 2026-10-16
    BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
  • CVE-2026-84869 2026-09-11
    ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
  • CVE-2026-86218 2026-09-08
    N-able N-central Static Code Injection Vulnerability
  • CVE-2026-82078 2026-08-31
    PaperCut NG/MF Unsafe Reflection Vulnerability
  • CVE-2026-81578 2026-08-31
    PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
  • CVE-2026-18556 2026-08-04
    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Websites, CMS and plugins

WordPress, Drupal, Joomla, e-commerce platforms and their plugins.

Bugs added to CISA’s exploited list per year

051015202022: 820222023: 120232024: 520242025: 720252026: 19202619

Exploited in 2026

19

Change vs 2025

+171%

Zero-day share

0%

Median time to exploit

8 days

Ransomware-linked

1

VEDAS rules (remote)

17 of 26

Most exploited products since 2022

  1. Adobe Commerce and Magento3
  2. WordPress Core3
  3. Drupal Core3
  4. Metabase Metabase2
  5. LiteSpeed cPanel Plugin2
  6. CWP Control Web Panel2

Latest exploited CVEs

  • CVE-2026-48356 2026-10-27
    Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
  • CVE-2026-106931 2026-10-20
    EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
  • CVE-2026-87902 2026-09-25
    WordPress Core Remote File Inclusion Vulnerability
  • CVE-2026-71362 2026-09-24
    Adobe Commerce and Magento Incorrect Authorization Vulnerability
  • CVE-2026-75650 2026-09-08
    Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
  • CVE-2026-72898 2026-08-11
    Metabase SQL Injection Vulnerability

Business applications

ERP, CRM, analytics and other line-of-business software.

Bugs added to CISA’s exploited list per year

0102030402022: 3320222023: 1120232024: 1020242025: 1720252026: 11202611

Exploited in 2026

11

Change vs 2025

−35%

Zero-day share

0%

Median time to exploit

33 days

Ransomware-linked

7

VEDAS rules (remote)

15 of 27

Most exploited products since 2022

  1. Adobe ColdFusion14
  2. Oracle WebLogic Server8
  3. Oracle Java SE7
  4. SAP NetWeaver6
  5. Plex Media Server5
  6. Oracle Fusion Middleware5

Latest exploited CVEs

  • CVE-2026-96656 2026-10-20
    Plex Media Server External Control of File Name or Path Vulnerability
  • CVE-2026-96655 2026-10-20
    Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
  • CVE-2026-96654 2026-10-20
    Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
  • CVE-2026-96652 2026-10-20
    Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
  • CVE-2026-110936 2026-10-20
    Siemens Software Center Uncontrolled Search Path Element Vulnerability
  • CVE-2026-21962 2026-08-24
    Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Desktop apps and documents

Office suites, PDF readers, archivers and other desktop software.

Bugs added to CISA’s exploited list per year

0102030402022: 3920222023: 720232024: 220242025: 420252026: 11202611

Exploited in 2026

11

Change vs 2025

+175%

Zero-day share

13%

Median time to exploit

171 days

Ransomware-linked

1

VEDAS rules (remote)

0 of 9

Most exploited products since 2022

  1. Microsoft Office21
  2. Adobe Acrobat and Reader11
  3. Adobe Reader and Acrobat8
  4. RARLAB WinRAR4
  5. Microsoft Word4
  6. Microsoft Excel3

Latest exploited CVEs

  • CVE-2021-3199 2026-10-08
    ONLYOFFICE Docs Server Path Traversal Vulnerability
  • CVE-2026-8398 2026-05-27
    Daemon Tools Lite Embedded Malicious Code Vulnerability
  • CVE-2009-3459 2026-05-20
    Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
  • CVE-2009-0238 2026-04-14
    Microsoft Office Remote Code Execution
  • CVE-2012-1854 2026-04-13
    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
  • CVE-2020-9715 2026-04-13
    Adobe Acrobat Use-After-Free Vulnerability

Routers, cameras and storage

Home and small-office routers, IP cameras, NAS boxes and other embedded devices.

Bugs added to CISA’s exploited list per year

010203040502022: 4420222023: 620232024: 1520242025: 2120252026: 10202610

Exploited in 2026

10

Change vs 2025

−52%

Zero-day share

0%

Median time to exploit

395 days

Ransomware-linked

0

VEDAS rules (remote)

11 of 30

Most exploited products since 2022

  1. Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers5
  2. MikroTik RouterOS4
  3. QNAP Photo Station4
  4. QNAP Network Attached Storage (NAS)4
  5. Ubiquiti UniFi OS3
  6. D-Link Multiple Routers3

Latest exploited CVEs

  • CVE-2026-67279 2026-09-25
    Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
  • CVE-2026-86060 2026-09-10
    MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
  • CVE-2026-67277 2026-09-10
    MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
  • CVE-2021-27137 2026-07-21
    DD-WRT Stack-Based Buffer Overflow Vulnerability
  • CVE-2025-67038 2026-06-23
    Lantronix EDS5000 Code Injection Vulnerability
  • CVE-2026-34910 2026-06-23
    Ubiquiti UniFi OS Improper Input Validation Vulnerability

Browsers

Chrome, Edge, Firefox, Safari and the engines inside them.

Bugs added to CISA’s exploited list per year

0204060801002022: 8920222023: 920232024: 1520242025: 1020252026: 920269

Exploited in 2026

9

Change vs 2025

−10%

Zero-day share

21%

Median time to exploit

2 days

Ransomware-linked

0

VEDAS rules (remote)

0 of 19

Most exploited products since 2022

  1. Adobe Flash Player32
  2. Google Chromium V829
  3. Microsoft Internet Explorer28
  4. Mozilla Firefox5
  5. Google Chromium4
  6. Microsoft Silverlight3

Latest exploited CVEs

  • CVE-2026-87491 2026-09-09
    Google Chromium V8 Out of Bounds Write Vulnerability
  • CVE-2026-85046 2026-09-04
    Google Chromium V8 Type Confusion Vulnerability
  • CVE-2026-11645 2026-06-09
    Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
  • CVE-2010-0249 2026-05-20
    Microsoft Internet Explorer Use-After-Free Vulnerability
  • CVE-2010-0806 2026-05-20
    Microsoft Internet Explorer Use-After-Free Vulnerability
  • CVE-2026-5281 2026-04-01
    Google Dawn Use-After-Free Vulnerability

File transfer and backup

Managed file transfer, file sharing and backup software.

Bugs added to CISA’s exploited list per year

0246810122022: 320222023: 820232024: 420242025: 1120252026: 720267

Exploited in 2026

7

Change vs 2025

−36%

Zero-day share

6%

Median time to exploit

8 days

Ransomware-linked

2

VEDAS rules (remote)

11 of 17

Most exploited products since 2022

  1. Veeam Backup & Replication4
  2. CrushFTP CrushFTP3
  3. Veritas Backup Exec Agent3
  4. Ahsay AhsayCBS2
  5. Wing FTP Server Wing FTP Server2
  6. Gladinet CentreStack and Triofox2

Latest exploited CVEs

  • CVE-2026-105134 2026-10-14
    Ahsay AhsayCBS Command Injection Vulnerability
  • CVE-2026-105133 2026-10-14
    Ahsay AhsayCBS Improper Authentication Vulnerability
  • CVE-2015-3306 2026-10-08
    ProFTPD Improper Access Control Vulnerability
  • CVE-2026-87886 2026-09-16
    Acronis Backup Incorrect Default Permissions Vulnerability
  • CVE-2025-47813 2026-03-16
    Wing FTP Server Information Disclosure Vulnerability
  • CVE-2026-25108 2026-02-24
    Soliton Systems K.K FileZen OS Command Injection Vulnerability

Virtualisation and servers

Hypervisors, virtualisation management and core server software.

Bugs added to CISA’s exploited list per year

02468102022: 1020222023: 320232024: 520242025: 720252026: 720267

Exploited in 2026

7

Change vs 2025

0%

Zero-day share

21%

Median time to exploit

20 days

Ransomware-linked

2

VEDAS rules (remote)

3 of 9

Most exploited products since 2022

  1. VMware vCenter Server5
  2. VMware ESXi2
  3. Broadcom VMware ESX1
  4. ISC BIND1
  5. Broadcom VMware vCenter1
  6. Broadcom VMware Aria Operations1

Latest exploited CVEs

  • CVE-2026-41709 2026-10-28
    Broadcom VMWare ESX Insufficient Logging Vulnerability
  • CVE-2015-5477 2026-10-08
    ISC BIND Data Processing Errors Vulnerability
  • CVE-2026-59310 2026-08-18
    Broadcom VMware vCenter Path Traversal Vulnerability
  • CVE-2026-22719 2026-03-03
    Broadcom VMware Aria Operations Command Injection Vulnerability
  • CVE-2026-24061 2026-01-26
    GNU InetUtils Argument Injection Vulnerability
  • CVE-2024-37079 2026-01-23
    Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

Phones and chips

Android, iOS device components, and mobile chipsets and GPUs.

Bugs added to CISA’s exploited list per year

051015202022: 1120222023: 1920232024: 1020242025: 920252026: 420264

Exploited in 2026

4

Change vs 2025

−56%

Zero-day share

46%

Median time to exploit

1 days

Ransomware-linked

0

VEDAS rules (remote)

2 of 6

Most exploited products since 2022

  1. Samsung Mobile Devices13
  2. Qualcomm Multiple Chipsets9
  3. Android Framework6
  4. Android Pixel4
  5. Arm Mali Graphics Processing Unit (GPU)4
  6. GIGABYTE Multiple Products4

Latest exploited CVEs

  • CVE-2026-58704 2026-09-16
    Google Pixel Improper Authorization Vulnerability
  • CVE-2025-48595 2026-06-02
    Android Framework Integer Overflow Vulnerability
  • CVE-2024-7399 2026-04-24
    Samsung MagicINFO 9 Server Path Traversal Vulnerability
  • CVE-2026-21385 2026-03-03
    Qualcomm Multiple Chipsets Memory Corruption Vulnerability
  • CVE-2025-48633 2025-12-02
    Android Framework Information Disclosure Vulnerability
  • CVE-2025-48572 2025-12-02
    Android Framework Privilege Escalation Vulnerability

Industrial and OT

Industrial controllers, building automation and SCADA.

Bugs added to CISA’s exploited list per year

00.511.522.532022: 320222023: 120232024: 020242025: 220252026: 220262

Exploited in 2026

2

Change vs 2025

0%

Zero-day share

0%

Median time to exploit

1634 days

Ransomware-linked

0

VEDAS rules (remote)

1 of 4

Most exploited products since 2022

  1. OpenPLC ScadaBR2
  2. KNX Association KNX Protocol Connection Authorization Option 11
  3. Rockwell Multiple Products1
  4. Unitronics Vision PLC and HMI1
  5. Schneider Electric U.motion Builder1
  6. Trihedral VTScada (formerly VTS)1

Latest exploited CVEs

  • CVE-2023-4346 2026-07-15
    KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
  • CVE-2021-22681 2026-03-05
    Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
  • CVE-2021-26828 2025-12-03
    OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
  • CVE-2021-26829 2025-11-28
    OpenPLC ScadaBR Cross-site Scripting Vulnerability
  • CVE-2023-6448 2023-12-11
    Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
  • CVE-2018-7841 2022-04-15
    Schneider Electric U.motion Builder SQL Injection Vulnerability

Other

Software that fits none of the groups above.

Bugs added to CISA’s exploited list per year

0510152025302022: 2920222023: 2020232024: 1720242025: 420252026: 020260

Exploited in 2026

0

Change vs 2025

−100%

Zero-day share

0%

Median time to exploit

410 days

Ransomware-linked

0

VEDAS rules (remote)

2 of 3

Most exploited products since 2022

  1. Trimble Cityworks1
  2. Audinate Dante Discovery1
  3. JQuery JQuery1
  4. Aviatrix Controllers1
  5. Acclaim Systems USAHERDS1
  6. ProjectSend ProjectSend1

Latest exploited CVEs

  • CVE-2025-0994 2025-02-07
    Trimble Cityworks Deserialization Vulnerability
  • CVE-2022-23748 2025-02-06
    Dante Discovery Process Control Vulnerability
  • CVE-2020-11023 2025-01-23
    JQuery Cross-Site Scripting (XSS) Vulnerability
  • CVE-2024-50603 2025-01-16
    Aviatrix Controllers OS Command Injection Vulnerability
  • CVE-2021-44207 2024-12-23
    Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
  • CVE-2024-11680 2024-12-03
    ProjectSend Improper Authentication Vulnerability