MariaDB

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code

MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026

TL;DR Researchers at V12 Security published a MariaDB remote code execution chain. It runs commands as the...

MariaDB Server Vulnerabilities Allow CVSS 10 Attacks

MariaDB server vulnerabilities diagram showing shell command execution risks

MariaDB Server Vulnerabilities Allow CVSS 10 Attacks

Do Son June 23, 2026

TL;DR Three serious MariaDB server vulnerabilities threaten database environments. The most severe flaw carries a maximum CVSS...

Millions of Servers At Risk: Crucial MariaDB Flaw Carries Maximum 10.0 CVSS Score MariaDB security flaw community server releases

MariaDB security flaw community server releases

Millions of Servers At Risk: Crucial MariaDB Flaw Carries Maximum 10.0 CVSS Score

Do Son June 7, 2026

Three Fresh Security Defects Impact Open Source Database Deployments An urgent threat notice has been issued for...

High-Severity JSON Schema Flaw Threatens MariaDB Database Stability MariaDB Vulnerability JSON Schema Overflow

MariaDB Vulnerability JSON Schema Overflow

High-Severity JSON Schema Flaw Threatens MariaDB Database Stability

Do Son March 24, 2026

MariaDB, the widely used open-source relational database and community-developed fork of MySQL, has released critical updates to...

CVE-2024-27295: Directus Flaw Opens Door to Account Takeovers

CVE-2024-27295

CVE-2024-27295: Directus Flaw Opens Door to Account Takeovers

Do Son March 7, 2024

A flaw (CVE-2024-27295) was found in Directus, a versatile open-source content management platform favored by developers for...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-72898CVSS 10.0
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-20349CVSS 8.6
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-68820CVSS 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-63077CVSS 9.8
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CISA KEV📅 Added to KEV: Aug 5, 2026
CVE-2026-34486CVSS 7.5
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-9198CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-18556
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-18577
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
Admin intelCISA KEV📅 Added to KEV: Aug 3, 2026📅 Updated: Aug 3, 2026