Analisi CVE & Catalogo Vulnerabilità Sfruttate (CISA KEV)

Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScal

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler A

Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and

Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and C

A security flaw has been discovered in Linksys EA8100 1.0.3.216940.

Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler

Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

Rucio: Unauthenticated administrator impersonation through SSH challenge tokens

A vulnerability was determined in Linksys EA8100 1.0.3.216940.

Active Storage: Possible arbitrary file write and read in image analysis

Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gat

XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary commands

XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows unauthenticated remote attackers to gain full adminis

XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerability that allows unauthenticated re

Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions

Dixell/Copeland XWEB EVO Hardcoded Administrator Daily Password Authentication Bypass

Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Password Field

Dixell/Copeland XWEB EVO Predictable Root Password Generation

Dixell/Copeland XWEB EVO Predictable Administrator Password Generation

Algernon: Case-insensitive filesystem lets unauthenticated requests bypass /admin,/repo,/data permission-prefix gate

Joomla Extension - jdownloads.com - RCE through file upload in jDownloads < 4.1.8

Microsoft Security Advisory CVE-2026-118740 - Aspire Security Feature Bypass Vulnerability

An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) be

NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthenticated attackers to forge admi

Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Pa

WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user v

React: Unauthenticated Remote Code Execution in React Server Components

The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18.

Mongoose: sanitizeFilter not applied on countDocuments

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a netwo

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list

GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability

Barracuda Networks Multiple Products OS Command Injection Vulnerability

WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin

Laravel TokenGuard authentication bypass through non-string API credentials

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote attackers to modify the syste

Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`

Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access

MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules

Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution

MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

Authlib: empty signatures validation in JWS JSON deserialization

better-auth: OAuth state can be used as a Magic Link to sign in as another user

Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing

Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Google Chromium Use-After-Free Vulnerability

OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability

SignalWire FreeSwitch Code Injection Vulnerability

IBM Aspera Faspex Incorrect Authorization Vulnerability

SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability

Apple Multiple Products Improper Authentication Vulnerability

Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability

Broadcom VMWare ESX Insufficient Logging Vulnerability

Linux Kernel Missing Initialization of a Variable Vulnerability

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Google Brotli Unchecked Return Value Vulnerability

PHP Memory Corruption Vulnerability

PHP Stale Internal Request-State Vulnerability

Arista VeloCloud Orchestrator SQL Injection Vulnerability

Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

Plex Media Server External Control of File Name or Path Vulnerability

Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

Siemens Software Center Uncontrolled Search Path Element Vulnerability

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

Fortinet Multiple Products Path Traversal Vulnerability

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Ahsay AhsayCBS Command Injection Vulnerability

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Ahsay AhsayCBS Improper Authentication Vulnerability

Palo Alto Networks PAN-OS Code Injection Vulnerability

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

Microsoft Windows Command Injection Vulnerability