CVE Vulnerability Advisory Database

[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software.

[Impact] Unauthenticated, remote attackers can execute arbitrary Java code with root privileges by sending crafted serialized Java objects.

[Mitigation] Apply official Cisco security patches immediately and restrict public internet access to the FMC management interface.

[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software

[Impact] Unauthenticated remote attackers can bypass authentication and execute scripts to obtain full root access to the underlying operating system

[Mitigation] Immediate application of official security patches and restriction of management interface access via ACLs

[Affected Scope] Cisco Catalyst SD-WAN Controller (formerly vSmart), Cisco Catalyst SD-WAN Manager (formerly vManage), and Cisco Catalyst SD-WAN Validator (formerly vBond).

[Impact] Unauthenticated remote attackers can bypass peering authentication, gain high-privileged administrative access, and manipulate the entire SD-WAN fabric configuration via NETCONF.

[Mitigation] Apply official Cisco software patches immediately and restrict control plane access to trusted peer IPs using Access Control Lists (ACLs).

[Affected Scope] Dell RecoverPoint for Virtual Machines versions prior to 6.0.3.1 HF1

[Impact] Unauthenticated remote attackers can leverage hardcoded credentials to gain unauthorized root-level access and establish persistence on the underlying operating system

[Mitigation] Immediately upgrade to version 6.0.3.1 HF1 or later, or apply strict network access controls

[Affected Scope] BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA).

[Impact] Unauthenticated remote attackers can execute arbitrary operating system commands in the context of the 'site' user by sending specially crafted HTTP requests.

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to the management interface using IP whitelisting and WAF rules.

[Affected Scope] Fortinet FortiClientEMS version 7.4.4

[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges by sending crafted HTTP requests.

[Mitigation] Immediately apply the official vendor patches and restrict external access to the EMS management ports.

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) affected versions

[Impact] Unauthenticated attackers can execute arbitrary code remotely, potentially leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to exposed management interfaces

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM)

[Impact] Unauthenticated remote attackers can inject and execute arbitrary code, leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces

[Affected Scope] SolarWinds Web Help Desk (WHD) versions prior to 2026.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with high privileges on the host machine by sending specially crafted serialized data

[Mitigation] Immediately upgrade SolarWinds Web Help Desk to version 2026.1 or higher, and restrict external network access to the service

[Affected Scope] FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, and FortiNAC-F devices with FortiCloud SSO authentication enabled

[Impact] An attacker with a valid FortiCloud account and a registered device can bypass authentication to log into other registered devices under different accounts, gaining full administrative control (CVSS 9.8, Active KEV)

[Mitigation] Immediately upgrade to the patched firmware versions or disable FortiCloud SSO administrator login on all affected devices

[Affected Scope] SmarterTools SmarterMail software versions prior to Build 9511

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands on the target system via a malicious HTTP server, leading to complete system compromise

[Mitigation] Immediately upgrade SmarterMail to the latest stable version (Build 9511 or higher) and restrict access to administrative endpoints

[Affected Scope] docling-core versions from v2.21.0 prior to v2.48.4, specifically when paired with pyyaml versions prior to v5.4

[Impact] Remote attackers can execute arbitrary Python code on the target server by supplying malicious YAML data to the load_from_yaml() method

[Mitigation] Upgrade docling-core to version v2.48.4 or later, or ensure the installed PyYAML version is v5.4 or greater

[Affected Scope] All SmarterTools SmarterMail versions prior to build 9511

[Impact] Unauthenticated attackers can bypass authentication to reset system administrator passwords, gaining full administrative control and executing arbitrary OS commands with SYSTEM/root privileges

[Mitigation] Immediately upgrade SmarterMail to build 9511 or later, and restrict external access to administrative APIs until patched

[Affected Scope] Sangfor Operation and Maintenance Security Management System up to version 3.0.12

[Impact] Unauthenticated remote attackers can bypass password reset logic, compromise administrative accounts, and gain full control over the bastion host

[Mitigation] Restrict external access to the system and block the vulnerable endpoint using web application firewalls or reverse proxy rules

[Affected Scope] Sangfor Operation and Maintenance Management System up to version 3.0.12

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with elevated privileges by sending specially crafted requests

[Mitigation] Restrict external access to the vulnerable endpoint, apply firewall/WAF rules, and monitor for official vendor patches

[Affected Scope] Appsmith versions 1.94 and below with publicly accessible applications

[Impact] Unauthenticated attackers can execute unpublished (edit-mode) actions, leading to sensitive data exposure, unauthorized database queries, and side-effect behaviors

[Mitigation] Restrict public access to applications and implement request filtering on reverse proxies or WAFs to block unauthorized edit-mode execution requests

[Affected Scope] Self-managed Grist deployments running versions prior to 1.7.9 with the GRIST_SANDBOX_FLAVOR environment variable configured to pyodide

[Impact] A remote attacker can execute arbitrary system processes on the hosting server by tricking a user into opening a maliciously crafted spreadsheet

[Mitigation] Upgrade Grist to version 1.7.9 or higher, or immediately change the sandbox flavor configuration to gvisor to enforce kernel-level isolation

[Affected Scope] Systems running telnetd from GNU Inetutils versions up to and including 2.7.

[Impact] Remote attackers can bypass authentication and gain complete root access to the target system by injecting '-f root' into the USER environment variable.

[Mitigation] Apply the official vendor patches immediately, or disable the telnetd service and transition to secure protocols like SSH.

[Affected Scope] Oracle HTTP Server and WebLogic Server Proxy Plug-in (for Apache HTTP Server and IIS) versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 within Oracle Fusion Middleware.

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to compromise the server, leading to unauthorized data modification, deletion, or complete system takeover with potential scope expansion to backend systems (CVSS 10.0).

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, restrict network access, and deploy WAF rules to filter malicious HTTP headers.

[Affected Scope] birkir prime versions up to and including 0.4.0.beta.0 at the /graphql endpoint

[Impact] Unauthenticated remote attackers can trigger a Denial of Service (DoS) by exhausting server resources via malicious batch queries

[Mitigation] Implement strict request size limits, disable or restrict GraphQL batching, and deploy WAF rules to block anomalous payloads