Skip to content

Threat feed

Security alerts

Notable vulnerabilities from public sources: new CISA KEV additions, critical CVEs (CVSS 9 or higher) and newly published public exploits. Updated continuously, newest first.

Search a CVE Atom feed

2,031 alerts · page 18 of 102

  1. Critical (CVSS 9+) Published · updated

    CVE-2026-121932 Linksys E5350 apply.cgi system os command injection

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: linksys e5350

    A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi. Performing a manipulation of the argument ping_ip/traceroute_ip results in os command injection. The attack may be initiated remotely. The exploit is now publ...

  2. Critical (CVSS 9+) Published · updated

    CVE-2026-121931 Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: linksys wrt54gl

    A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument traceroute_ip leads to os command injection. The attack can...

  3. Critical (CVSS 9+) Published · updated

    CVE-2026-121930 Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection

    CriticalCVSS 9.4

    Exploit status: No public exploit known

    Affects: linksys wrt54gl

    A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of the component Ping Diagnostic. This manipulation of the argument ping_ip causes os command injection. The attack can be initiated remotely. The exploit...

  4. Critical (CVSS 9+) Published · updated

    CVE-2026-122120 In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

    CriticalCVSS 9.0

    Exploit status: No public exploit known

    Affects: yealink Plug-in Softwares

    In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthorized file write vulnerability under specific scenarios, which may be exploited by attackers to achieve remote code execution.

  5. Critical (CVSS 9+) Published

    CVE-2026-121952 FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: FreeRDP, redhat/freerdp

    FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_bitmap_cache_v2_capability_set rejects only numCellCaches values above 5, yet the bitmap cache v2 cell array is later accessed at fixed indices 0 through 4. A client connecting to the proxy can declare...

  6. Critical (CVSS 9+) Published

    CVE-2026-121953 FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close

    CriticalCVSS 9.3

    Exploit status: No public exploit known

    Affects: FreeRDP, redhat/freerdp

    FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dynamic virtual channel: a duplicate-name channel with a new ChannelId overwrites the listener's single callback slot, which rdpgfx_on_close frees without clearing. A malicious RDP server can open and close such a...

  7. Critical (CVSS 9+) Published

    CVE-2026-121639 WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service

    CriticalCVSS 9.2

    Exploit status: No public exploit known

    Affects: WatchGuard AuthPoint Authentication Gateway

    A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote unauthenticated attacker with network access to the AuthPoint Gateway host to disrupt authentication services and delete the local directory synchronization configuration.

  8. Critical (CVSS 9+) Published

    CVE-2026-121638 WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: WatchGuard AuthPoint Authentication Gateway

    An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers.

  9. Critical (CVSS 9+) Published

    CVE-2026-121640 WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: WatchGuard AuthPoint Authentication Gateway

    An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has observed a legitimate request between AuthPoint Gateway components to replay it and perform unauthorized administrative actions, including disrupting authentication...

  10. Critical (CVSS 9+) Published · updated

    CVE-2026-122006 activestorage: activestorage: arbitrary file read and write via ImageMagick attachment analysis

    CriticalCVSS 9.8

    Exploit status: No public exploit known

    Affects: redhat/3scale-amp2/system-rhel8, redhat/3scale-amp2/system-rhel9, redhat/3scale-amp2/zync-rhel9 and 2 more

    The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations (e.g., reading secret_key_base) because the ImageMagick analyzer runs when a file is attached, and there is not an ImageMagick securit...

  11. Critical (CVSS 9+) Published

    CVE-2026-121939 Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking

    CriticalCVSS 9.2

    Exploit status: No public exploit known

    Affects: David-Crty Databasement

    Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that links OIDC identities to local users by email without checking email_verified. Attackers can register an identity provider account with a victim's unverified e...

  14. Critical (CVSS 9+) Published · updated

    CVE-2026-114425 Forged LFT metadata permits arbitrary file read and deletion

    CriticalCVSS 9.2 EPSS 0.33%

    Exploit status: No public exploit known

    Affects: SEPPmail AG SEPPmail Secure Email Gateway (SEG)

    SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enable...

  15. Critical (CVSS 9+) Published · updated

    CVE-2026-114424 Code execution through double evaluation in address replacement rules

    CriticalCVSS 9.2 EPSS 0.26%

    Exploit status: No public exploit known

    Affects: SEPPmail AG SEPPmail Secure Email Gateway (SEG)

    SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule us...

  16. Critical (CVSS 9+) Published · updated

    CVE-2026-121802 @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a caller-supplied state value without checking...

    CriticalCVSS 9.1

    Exploit status: No public exploit known

    Affects: better-auth @better-auth/expo

    @better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a caller-supplied state value without checking whether that value had been issued by the server. NOTE: the application secret...

  17. Critical (CVSS 9+) Published · updated

    CVE-2026-121615 Linksys E5600 Login mesh_login.cgi improper authentication

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: linksys e5600 firmware

    A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/mesh_login.cgi of the component Login Handler. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been pu...

  18. Critical (CVSS 9+) Published · updated

    CVE-2026-121609 Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: qihoo 360 whole home router m5

    A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to hard-coded credentials. Remote exploitation of the attack is possible. The exploi...

  19. Critical (CVSS 9+) Published · updated

    CVE-2026-121607 Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: qihoo 360 d603-2, qihoo 360 d600-2, qihoo 360 d606-6 and 1 more

    A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeed_command of the file /fs2/bin/iscm. Performing a manipulation of the argument host results in os command injection. The attack may be initiated remotely. The exp...

  20. Critical (CVSS 9+) Published · updated

    CVE-2026-121606 Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification

    CriticalCVSS 10.0

    Exploit status: No public exploit known

    Affects: qihoo 360 d621-2, qihoo 360 d603-2, qihoo 360 d600-2 and 3 more

    A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to imp...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).