Search vulnerabilities

Expected end of text, found '/' (at char 32), (line:1, col:33)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,850

CVE-2026-9777

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the restoreDB method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28578.

CVSS 3.0 · 7.2 High EPSS 2.2% KEV · Not listed
Vendors
Aten
Products
Unizon
CVE-2026-9778

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the ImportDeviceList method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28579.

CVSS 3.0 · 7.2 High EPSS 2.2% KEV · Not listed
Vendors
Aten
Products
Unizon
CVE-2026-9779

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590.

CVSS 3.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Aten
Products
Unizon
CVE-2026-8663

OS Command Injection in Rapid7 InsightConnect RPM Plugin

OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction.

CVSS 3.1 · 6 Medium EPSS 1.3% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Rpm Insightconnect Rpm Plugin
CVE-2026-8659

OS Command Injection in Rapid7 InsightConnect SQLmap Plugin

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api_host or api_port parameters during connection configuration due to insufficient input validation.

CVSS 3.1 · 6 Medium EPSS 1.3% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Sqlmap Insightconnect Sqlmap Plugin
CVE-2026-9155

OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due to insufficient input validation.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Gnu Linux Rapid7
Products
Sed Linux Kernel Insightconnect Sed Plugin
CVE-2026-9154

Arbitrary File Write in Rapid7 InsightConnect Sed Plugin

Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrary file paths via the expression parameter.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Gnu Linux Rapid7
Products
Sed Linux Kernel Insightconnect Sed Plugin
CVE-2026-9153

Arbitrary File Read in Rapid7 InsightConnect Sed Plugin

Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parameter due to insufficient input validation.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu Linux Rapid7
Products
Sed Linux Kernel Insightconnect Sed Plugin
CVE-2026-8660

OS Command Injection in Rapid7 InsightConnect Ping Plugin

OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands.

CVSS 3.1 · 7.7 High EPSS 1.2% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Ping Insightconnect Ping Plugin
CVE-2026-8665

OS Command Injection in Rapid7 InsightConnect Translate Plugin

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command construction.

CVSS 3.1 · 7.7 High EPSS 1.2% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Tr Plugin Insightconnect Translate
CVE-2026-8664

OS Command Injection in Rapid7 InsightConnect Finger Plugin

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.

CVSS 3.1 · 6 Medium EPSS 1.3% KEV · Not listed
Vendors
Rapid7
Products
Insightconnect Finger Insightconnect Finger Plugin
CVE-2026-8592

OS Command Injection in Rapid7 InsightConnect AWK Plugin

OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to unsafe shell command construction in the processing pipeline.

CVSS 3.1 · 7.7 High EPSS 1.2% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Awk Insightconnect Awk Plugin
CVE-2026-8666

OS Command Injection in Rapid7 InsightConnect Traceroute Plugin

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.

CVSS 3.1 · 7.7 High EPSS 1.2% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Traceroute Insightconnect Traceroute Plugin
CVE-2026-8662

Path Traversal in Rapid7 InsightConnect Compression Plugin

Path Traversal vulnerability in the create_archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Compression Insightconnect Compression Plugin
CVE-2026-8658

OS Command Injection in Rapid7 InsightConnect Tcpdump Plugin

OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction.

CVSS 3.1 · 6 Medium EPSS 1.3% KEV · Not listed
Vendors
Linux Rapid7
Products
Linux Kernel Insightconnect Tcpdump Insightconnect Tcpdump Plugin
CVE-2026-5305

Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS

The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin before 0.3.12 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Email Encoder Simple Mail Address Encoder Project Wordpress
Products
Email Encoder Simple Mail Address Encoder Wordpress
CVE-2026-9702

InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking

The InPost PL WordPress plugin before 1.9.1 does not verify that the request originates from the legitimate buyer before allowing the WooCommerce order parcel-locker destination to be updated, allowing unauthenticated attackers to silently redirect the shipping destination of any pending or processing order on the site.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Inpost Pl Wordpress
Products
Inpost Pl Wordpress
CVE-2026-12937

Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin plugin for WordPress is vulnerable to generic SQL Injection via the 'post_id' parameter in all versions up to, and including, 2.22.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The AJAX handler is registered for unauthenticated users via wp_ajax_nopriv_tf_room_availability, and the required nonce is emitted on the public single-hotel page template, allowing unauthenticated attackers to freely obtain a valid nonce and reach the vulnerable code path.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Themefic Wordpress
Products
Tourfic – Ai Powered Travel Booking, Hotel Booking & Car Rental Wordpress Plugin Wordpress
CVE-2026-56129

Insufficient IOCTL Access Control Exposes Physical Memory to Non-Admin Users

Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Dynabook Toshiba Corporation
Products
Generic Io & Memory Access Driver Generic Io & Memory Access Driver
CVE-2026-56130

Apache Shiro: Remember-me cookie isn't checked for expiry on the server

"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled. Upgrade to version 3.0.0 or later, which fixes the issue.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Apache
Products
Shiro