🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | CRITICAL | ????? | ????? | SA | 11 minutes ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | MEDIUM | ????? | ????? | SA | 3 days ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | UNKNOWN | ????? | ????? | SA | 4 days ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | CRITICAL | ????? | ????? | SA | 4 days ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | HIGH | ????? | ????? | SA | 4 days ago |
| CVE-2026-104080 Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API /valid_token/ route that allow... | HIGH | ????? | ????? | NVD | 37 minutes ago |
| CVE-2026-77881 Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an unauthenticated loopback API route that connec... | MEDIUM | ????? | ????? | NVD | 38 minutes ago |
| CVE-2026-77880 Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password change route /newpass... | HIGH | ????? | ????? | NVD | 39 minutes ago |
| CVE-2026-77879 Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API authentication gate access_token(), wh... | HIGH | ????? | ????? | NVD | 39 minutes ago |
| CVE-2026-77878 Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API database restore route /v1/res... | HIGH | ????? | ????? | NVD | 40 minutes ago |
| CVE-2026-77877 Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows attackers able to reach the loopback ... | HIGH | ????? | ????? | NVD | 40 minutes ago |
| CVE-2026-77876 Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel module that ... | CRITICAL | ????? | ????? | NVD | 41 minutes ago |
| CVE-2025-62819 Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration Authority) U... | UNKNOWN | ????? | ????? | NVD | 43 minutes ago |
| CVE-2026-115654 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-... | MEDIUM | ????? | ????? | NVD | 44 minutes ago |
| CVE-2026-115653 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module thread'... | HIGH | ????? | ????? | NVD | 49 minutes ago |
| CVE-2026-114408 In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses th... | HIGH | ????? | ????? | NVD | 55 minutes ago |
| CVE-2026-118052 In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex... | MEDIUM | ????? | ????? | NVD | 1 hour ago |
| CVE-2026-73697 Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in the phpini_editor user... | HIGH | ????? | ????? | NVD | 1 hour ago |
| CVE-2026-73696 Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication flow (CWPUser... | CRITICAL | ????? | ????? | NVD | 1 hour ago |
| CVE-2026-73695 Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that allows attackers to incl... | HIGH | ????? | ????? | NVD | 1 hour ago |
| CVE-2026-120492 Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowed_urls entr... | MEDIUM | ????? | ????? | NVD | 1 hour ago |
| CVE-2026-120491 Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to inject script by sendi... | MEDIUM | ????? | ????? | NVD | 1 hour ago |
| CVE-2026-120489 Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows authenticated members to publish doc... | MEDIUM | ????? | ????? | NVD | 1 hour ago |
| CVE-2026-120488 LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with post.create or post.edit permissi... | MEDIUM | ????? | ????? | NVD | 1 hour ago |