<h3>CVE-2026-48908</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-06 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-06</p> <p><strong>Asserted:</strong> 2026-07-06</p> <p><strong>Scope Notes:</strong> Affected: JoomShaper / SP Page Builder extension for Joomla | Description: Critical vulnerability that allows unauthenticated users to upload arbitrary files. | CWEs…

<h3>CVE-2026-48907</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-06 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-07-06</p> <p><strong>Asserted:</strong> 2026-07-06</p> <p><strong>Scope Notes:</strong> Affected: Widget Factory (Pty) Ltd / Joomla Content Editor (JCE) | Description: Critical vulnerability in JCE editor extension. | CWEs: CWE-284 | Origin source: CERT…

<h3>CVE-2026-1731</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-06-04</p> <p><strong>Asserted:</strong> 2026-06-04</p> <p><strong>Scope Notes:</strong> Affected: BeyondTrust / Remote Support (RS), Privileged Remote Access (PRA) | Description: Critical pre-authentication RCE vulnerability. | CWEs: CWE-78 | Origin sour…

<h3>CVE-2026-41940</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-05-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-05-08</p> <p><strong>Asserted:</strong> 2026-05-08</p> <p><strong>Scope Notes:</strong> Affected: WebPros / cPanel | Description: cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenti…

<h3>CVE-2024-42009</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-04-27 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-04-27</p> <p><strong>Asserted:</strong> 2026-04-27</p> <p><strong>Scope Notes:</strong> Affected: RoundCube / Webmail | Description: A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to stea…

<h3>CVE-2025-22457</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-04-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-04-08</p> <p><strong>Asserted:</strong> 2026-04-08</p> <p><strong>Scope Notes:</strong> Affected: Ivanti / Ivanti Connect Secure | Description: Evidence of active exploitation in the wild against ICS 9.X (end of life) and 22.7R2.5 and earlier versions s…

<h3>CVE-2025-4428</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-04-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-04-08</p> <p><strong>Asserted:</strong> 2026-04-08</p> <p><strong>Scope Notes:</strong> Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: High severity vulnerability. Successful exploitation may lead to unauthenticated remote code executio…

<h3>CVE-2025-4427</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-04-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-04-08</p> <p><strong>Asserted:</strong> 2026-04-08</p> <p><strong>Scope Notes:</strong> Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: Medium severity vulnerability. Successful exploitation may lead to unauthenticated remote code execut…

<h3>CVE-2025-55182</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-04-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-04-08</p> <p><strong>Asserted:</strong> 2026-04-08</p> <p><strong>Scope Notes:</strong> Affected: Meta / React Server Components | Description: Flaw in how React decodes payloads sent to React Server Function endpoints enabled unauthenticated remote cod…

<h3>CVE-2025-53770</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-04-08 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-04-08</p> <p><strong>Asserted:</strong> 2026-04-08</p> <p><strong>Scope Notes:</strong> Affected: Microsoft / SharePoint | Description: Microsoft confirmation of active attacks targeting on-premises SharePoint Server customers by exploiting vulnerabilit…

<h3>CVE-2026-20963</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-03-12 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-03-12</p> <p><strong>Asserted:</strong> 2026-03-12</p> <p><strong>Scope Notes:</strong> Affected: Microsoft / Microsoft SharePoint | Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute c…

<h3>CVE-2026-1340</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-01-29 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-29</p> <p><strong>Asserted:</strong> 2026-01-29</p> <p><strong>Scope Notes:</strong> Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remo…

<h3>CVE-2026-1281</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-01-29 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-29</p> <p><strong>Asserted:</strong> 2026-01-29</p> <p><strong>Scope Notes:</strong> Affected: Ivanti / Endpoint Manager Mobile (EPMM) | Description: A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remo…

<h3>CVE-2025-59719</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-01-27 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-27</p> <p><strong>Asserted:</strong> 2026-01-27</p> <p><strong>Scope Notes:</strong> Affected: Fortinet / Fortiweb | Description: An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb may allow an unauthenticated atta…

<h3>CVE-2025-59718</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-01-27 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-27</p> <p><strong>Asserted:</strong> 2026-01-27</p> <p><strong>Scope Notes:</strong> Affected: Fortinet / FortiOS,FortiProxy,FortiSwitchManager | Description: A improper verification of cryptographic signature vulnerability in Fortinet FortiOS, Forti…

<h3>CVE-2025-25231</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2025-09-09 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-09-09</p> <p><strong>Asserted:</strong> 2025-09-09</p> <p><strong>Scope Notes:</strong> Affected: Omnissa / Omnissa Workspace ONE UEM | Description: Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor m…

<h3>CVE-2025-6543</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2025-07-18 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-18</p> <p><strong>Asserted:</strong> 2025-07-18</p> <p><strong>Scope Notes:</strong> Affected: Citrix / Citrix ADC and Citrix Gateway | Origin source: cnw</p>

<h3>CVE-2010-0738</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2025-07-14 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-14</p> <p><strong>Asserted:</strong> 2025-07-14</p> <p><strong>Scope Notes:</strong> Affected: Red Hat / JBoss Application Server | Description: this management interface allows administrative operations to be performed without adequate access control…

<h3>CVE-2011-4085</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2025-07-14 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-14</p> <p><strong>Asserted:</strong> 2025-07-14</p> <p><strong>Scope Notes:</strong> Affected: Red Hat / JBoss Application Server | Description: some management interfaces remain accessible and lack effective access control mechanisms | Origin source:…

<h3>CVE-2017-12149</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2025-07-14 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-14</p> <p><strong>Asserted:</strong> 2025-07-14</p> <p><strong>Scope Notes:</strong> Affected: Red Hat / JBoss Application Server | Description: the servlet exposes an endpoint that allows you to invoke Java Management Extensions (JMX) operations wit…