CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Catalyst SD-WAN CLI Input Validation Vulnerability Leading to Root Privilege Escalation (CVE-2026-20245)
[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Manager (formerly vManage), and Validator (formerly vBond)
[Impact] An authenticated, local attacker with netadmin privileges can execute arbitrary commands as root and push unauthorized configuration changes to edge devices
[Mitigation] Immediately upgrade to the fixed software versions recommended by Cisco and verify the configuration integrity of all managed edge devices.
Apache HTTP Server mod_rewrite Improper Output Escaping Remote Code Execution and Source Code Disclosure (CVE-2024-38475)
[Affected Scope] Apache HTTP Server versions 2.4.59 and earlier, specifically environments utilizing mod_rewrite rules where substitutions in server context use backreferences or variables as the first segment.
[Impact] Attackers can map URLs to restricted filesystem locations, leading to unauthorized source code disclosure or arbitrary code execution (RCE).
[Mitigation] Immediately upgrade Apache HTTP Server to version 2.4.60 or later, and review/restrict unsafe RewriteRules.
Cobalt Strike Remote Code Execution Vulnerability via Swing Component HTML Injection (CVE-2022-42948)
[Affected Scope] Cobalt Strike version 4.7.1
[Impact] Remote attackers can execute arbitrary code within the Cobalt Strike UI context by injecting crafted HTML payloads
[Mitigation] Immediately upgrade to Cobalt Strike version 4.7.2 or later, and restrict access to the Teamserver
Zimbra Collaboration Suite (ZCS) Calendar Cross-Site Scripting (XSS) Vulnerability (CVE-2022-24682) Analysis and Mitigation Guide
[Affected Scope] Zimbra Collaboration Suite (ZCS) 8.8.x versions prior to 8.8.15 Patch 30 (Update 1)
[Impact] Attackers can execute arbitrary JavaScript in the victim's browser session, leading to session hijacking and unauthorized mailbox access
[Mitigation] Immediately upgrade Zimbra Collaboration Suite to 8.8.15 Patch 30 (Update 1) or later