CVE Vulnerability Advisory Database

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] Unauthenticated remote attackers can execute arbitrary code over the network and fully compromise the host server

[Mitigation] Apply the official Microsoft security updates immediately, and restrict network access to SharePoint endpoints until patched

[Affected Scope] Adobe ColdFusion versions 2025.9, 2023.20 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code in the context of the current user, with active exploitation confirmed in the wild

[Mitigation] Immediately apply the official Adobe security patches (APSB26-68) and restrict access to sensitive endpoints

[Affected Scope] Websites utilizing the SP Page Builder extension for Joomla

[Impact] Unauthenticated attackers can upload and execute malicious PHP code, leading to complete takeover of the web server

[Mitigation] Immediately update to the latest patched version, apply WAF rules, and disable PHP execution in upload directories

[Affected Scope] All versions of PTC Windchill PDMlink and FlexPLM prior to 11.0 M030, including all CPS releases.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges by deserializing untrusted data.

[Mitigation] Apply the official vendor security patches (CPS) immediately, restrict external network exposure, and enable WAF deserialization detection rules.

[Affected Scope] LiteSpeed cPanel plugin versions prior to 2.4.8 (distributed in LiteSpeed WHM PlugIn prior to 5.3.2.0)

[Impact] An attacker with FTP or web shell access on a shared hosting server running CloudLinux/CageFS can exploit symlinks to bypass isolation, escalate privileges, and compromise the server

[Mitigation] Immediately upgrade the LiteSpeed WHM plugin to version 5.3.2.0 or higher to apply the patched cPanel plugin (v2.4.8+)

[Affected Scope] Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62

[Impact] Unauthenticated remote attackers can compromise and completely take over the PeopleSoft Enterprise PeopleTools system via HTTP network access

[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) and restrict external HTTP access to the affected component

[Affected Scope] Check Point Remote Access and Mobile Access VPN gateways utilizing the deprecated IKEv1 key exchange protocol

[Impact] Unauthenticated remote attackers can bypass user authentication and establish unauthorized VPN connections without valid user credentials

[Mitigation] Apply the official vendor hotfixes immediately, or disable the deprecated IKEv1 protocol and transition to IKEv2

[Affected Scope] Arista EOS-based switches configured with tunnel decapsulation such as VXLAN, decap-groups, or GRE tunnel interfaces

[Impact] Attackers can bypass security boundaries by sending unexpected tunneled packets, which the switch incorrectly decapsulates and forwards. This vulnerability is actively exploited in the wild

[Mitigation] Apply the latest EOS security patches from Arista or implement inbound Access Control Lists (ACLs) to restrict unauthorized tunnel traffic

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)

[Impact] An authenticated, local attacker with netadmin privileges can execute arbitrary commands as root and push unauthorized configuration changes to edge devices

[Mitigation] Immediately upgrade to the fixed software versions recommended by Cisco and verify the configuration integrity of all managed edge devices.

[Affected Scope] Multiple components within the Android Operating System (OS)

[Impact] Local privilege escalation (LPE) and arbitrary code execution without requiring additional privileges or user interaction, actively exploited in the wild

[Mitigation] Immediately apply the Android June 2026 Security Patch Level or later

[Affected Scope] Microsoft SharePoint Server deployments

[Impact] An authorized attacker can exploit a deserialization of untrusted data vulnerability over the network to execute arbitrary code with server privileges.

[Mitigation] Immediately apply the official security patches provided by Microsoft and restrict network access to SharePoint servers.

[Affected Scope] All Ubiquiti UniFi OS devices accessible via the network.

[Impact] Unauthenticated attackers can exploit a Path Traversal (CWE-22) vulnerability to access and manipulate underlying system files, leading to complete takeover of system accounts.

[Mitigation] Immediately apply the official security patches provided by Ubiquiti and restrict external network access to the UniFi OS management interface.

[Affected Scope] Ubiquiti UniFi OS devices accessible via the network

[Impact] Unauthenticated remote attackers can make unauthorized system changes, gain administrative control, and potentially enlist devices into botnets

[Mitigation] Apply the official vendor security patches immediately, restrict access to management interfaces, and monitor for unauthorized configuration changes

[Affected Scope] Trend Micro Apex One (On-Premise) server installations.

[Impact] A local attacker with administrative credentials can modify key tables via directory traversal to inject and deploy malicious code to connected agents.

[Mitigation] Apply the official security patches provided by Trend Micro immediately and restrict administrative access to the server.

[Affected Scope] Drupal core versions 8.9.0 to < 10.4.10, 10.5.0 to < 10.5.10, 10.6.0 to < 10.6.9, 11.0.0 to < 11.1.10, 11.2.0 to < 11.2.12, and 11.3.0 to < 11.3.10

[Impact] Unauthenticated remote attackers can inject malicious SQL queries to extract sensitive database information, hijack administrator sessions, or potentially achieve Remote Code Execution (RCE).

[Mitigation] Immediately upgrade Drupal core to the respective patched versions (10.4.10, 10.5.10, 10.6.9, 11.1.10, 11.2.12, 11.3.10, or later).

[Affected Scope] Windows operating system environments with Microsoft Defender enabled

[Impact] A local authorized attacker can exploit symbolic link resolution to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the host

[Mitigation] Immediately apply the official Microsoft security updates and ensure the Defender engine and definitions are updated to the latest versions

[Affected Scope] All supported on-premises Microsoft Exchange Server environments.

[Impact] Unauthenticated remote attackers can execute malicious scripts within the victim's browser session, leading to session hijacking, spoofing, and privilege escalation.

[Mitigation] Apply the official Microsoft security updates immediately, and deploy WAF rules to block anomalous web requests prior to patching.

[Affected Scope] Palo Alto Networks PAN-OS software with GlobalProtect portal or gateway enabled (Panorama and Cloud NGFW are not impacted).

[Impact] Unauthenticated attackers can bypass security restrictions to establish unauthorized VPN connections and gain access to internal network resources.

[Mitigation] Apply the official security patches immediately, and restrict access to GlobalProtect interfaces until fully patched.

[Affected Scope] Ivanti EPMM versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1

[Impact] A remotely authenticated attacker with administrative privileges can exploit improper input validation to execute arbitrary code and fully compromise the system.

[Mitigation] Immediately upgrade to the patched versions (12.6.1.1, 12.7.0.1, 12.8.0.1, or higher) provided by the vendor.

[Affected Scope] Windows systems with Microsoft Defender enabled and lacking the latest security updates.

[Impact] An authorized local attacker can exploit insufficient access control granularity to elevate privileges to SYSTEM, potentially disabling security controls.

[Mitigation] Immediately update the Microsoft Defender engine and definition files to the latest version, especially as this vulnerability is actively exploited in the wild.