CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Catalyst SD-WAN Manager Data Collection Agent (DCA) Credential Exposure Vulnerability (CVE-2026-20128)
[Affected Scope] Cisco Catalyst SD-WAN Manager releases prior to 20.18
[Impact] Unauthenticated, remote attackers can retrieve the DCA password file via crafted HTTP requests and gain unauthorized DCA user privileges
[Mitigation] Immediately upgrade Cisco Catalyst SD-WAN Manager to release 20.18 or later
SolarWinds Web Help Desk Security Control Bypass Vulnerability (CVE-2025-40536) Urgent Security Advisory
[Affected Scope] All SolarWinds Web Help Desk (WHD) versions prior to 2026.1.
[Impact] Unauthenticated remote attackers can bypass internal security controls, gaining unauthorized access to restricted functionalities and sensitive data.
[Mitigation] Immediately upgrade to the latest secure version (2026.1 or higher) and restrict external access until patched.
PTZOptics PT30X Camera Authentication Bypass and Information Disclosure (CVE-2024-8956) Vulnerability & Mitigation Guide
[Affected Scope] PTZOptics PT30X-SDI and PT30X-NDI camera devices running firmware versions prior to 6.3.40.
[Impact] Remote, unauthenticated attackers can bypass authentication by omitting the HTTP Authorization header, leading to the exposure of sensitive configuration data, password hashes, and unauthorized configuration modifications.
[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or higher and restrict external internet access to the device.
SolarWinds Web Help Desk Hardcoded Credentials Vulnerability (CVE-2024-28987) Critical Security Advisory
[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and prior versions
[Impact] Remote unauthenticated attackers can exploit hardcoded credentials to access internal functionality and modify sensitive data.
[Mitigation] Immediately apply the official SolarWinds 12.8.3 Hotfix 2 or later, and restrict external network access.
Cisco IOS XR Software Health Check RPM Redis Unauthenticated Remote Data Manipulation and Information Disclosure (CVE-2022-20821)
[Affected Scope] Cisco IOS XR Software deployments with the Health Check RPM enabled
[Impact] Unauthenticated remote attackers can connect to the Redis instance inside the NOSi container, enabling them to write to the database, write arbitrary files to the container filesystem, and retrieve database information
[Mitigation] Apply official Cisco software updates, deactivate the unused Health Check RPM, or restrict access to TCP port 6379 using infrastructure ACLs
TP-Link TL-WA855RE Wi-Fi Extender Unauthenticated Factory Reset and Unauthorized Access Vulnerability (CVE-2020-24363)
[Affected Scope] TP-Link TL-WA855RE V5 devices running firmware version 20200415-rel37464 or earlier.
[Impact] An unauthenticated attacker on the same network can force a factory reset and reboot via a TDDP_RESET POST request, subsequently gaining full administrative control by setting a new password.
[Mitigation] Apply the latest official firmware update from the manufacturer and restrict local network access to trusted hosts only.
NETGEAR Routers Administrator Password Disclosure Vulnerability (CVE-2017-5521)
[Affected Scope] Multiple NETGEAR router models including R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000
[Impact] Unauthenticated remote attackers (if remote management is enabled) or local attackers on LAN/WLAN can retrieve the plaintext administrator password
[Mitigation] Apply the latest official firmware updates immediately, or enable the 'Password Recovery' feature and disable remote management as a temporary workaround