CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
marimo Reactive Python Notebook Pre-Auth Remote Code Execution (RCE) via Terminal WebSocket Authentication Bypass (CVE-2026-39987)
[Affected Scope] All versions of marimo open-source Python notebook prior to 0.23.0
[Impact] Unauthenticated remote attackers can establish a connection to the /terminal/ws endpoint, obtaining a full PTY shell and executing arbitrary system commands
[Mitigation] Immediately upgrade the marimo package to version 0.23.0 or higher
Fortinet FortiOS and FortiProxy Authentication Bypass and Remote Super-Admin Privilege Escalation (CVE-2024-55591)
[Affected Scope] FortiOS versions 7.0.0 through 7.0.16, and FortiProxy versions 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12
[Impact] Remote unauthenticated attackers can bypass authentication via crafted requests to the Node.js websocket module, gaining full super-admin privileges
[Mitigation] Immediately upgrade to the patched firmware versions and restrict external access to the management interface