CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Progress Kemp LoadMaster API OS Command Injection Remote Code Execution (RCE) Vulnerability Advisory (CVE-2026-8037)
[Affected Scope] API management interfaces of Progress Kemp LoadMaster load balancer appliances
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted API requests, leading to full system compromise
[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the management API
Ivanti EPMM (Endpoint Manager Mobile) Authentication Bypass and Remote API Access Vulnerability Advisory (CVE-2023-35078)
[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM, formerly MobileIron Core) versions 11.4, 11.10, 11.11, and all older/supported releases
[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, allowing them to harvest sensitive personally identifiable information (PII) or create unauthorized administrative accounts
[Mitigation] Immediately apply the official security patches or upgrade to Ivanti EPMM version 11.12 or higher, and restrict external access to administrative interfaces