CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
PaperCut MF/NG Web Management Interface Improper Access Control Vulnerability (CVE-2026-81578) Advisory
[Affected Scope] Web management interface of PaperCut MF and PaperCut NG.
[Impact] Unauthenticated remote attackers can trigger backend actions and modify system configurations before access validation checks complete, potentially leading to Remote Code Execution (RCE).
[Mitigation] Apply the official vendor security patches immediately and restrict external access to the web management ports (default 9191, 9192).
SonicWall SonicOS Management Access Improper Access Control Vulnerability (CVE-2024-40766) Analysis and Mitigation Guide
[Affected Scope] SonicWall Firewall Gen 5 and Gen 6 devices, and Gen 7 devices running SonicOS 7.0.1-5035 and older versions
[Impact] Unauthenticated remote attackers can gain unauthorized access to firewall resources and, under specific conditions, cause the firewall to crash, leading to a Denial of Service (DoS)
[Mitigation] Immediately apply the latest firmware patches provided by SonicWall, and restrict or disable WAN management access to the firewall
Adobe ColdFusion Administrator Endpoint Authentication Bypass Vulnerability (CVE-2023-29298) Analysis and Mitigation Guide
[Affected Scope] Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier), and 2023.0.0.330468 (and earlier)
[Impact] Unauthenticated remote attackers can bypass security controls to access administrative CFM and CFC endpoints, potentially leading to full system compromise
[Mitigation] Apply the official Adobe security patches (APSB23-40) immediately and restrict external access to the ColdFusion Administrator interface