CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Joomla JCE Editor Extension Remote Code Execution (RCE) Vulnerability Advisory (CVE-2026-48907)
[Affected Scope] Vulnerable versions of the JCE (Joomla Content Editor) extension for Joomla CMS
[Impact] Unauthenticated remote attackers can create unauthorized editor profiles, bypass file upload restrictions, and upload malicious PHP scripts to achieve full Remote Code Execution (RCE)
[Mitigation] Immediately upgrade JCE to the latest patched version and deploy Web Application Firewall (WAF) rules to block unauthorized profile modification requests
Trend Micro Apex One Management Console Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-54948)
[Affected Scope] Trend Micro Apex One (on-premise) management console
[Impact] A pre-authenticated remote attacker can upload malicious code and execute arbitrary commands with system privileges, leading to full server compromise
[Mitigation] Immediately apply the official security patch (KA-0020652) and restrict network access to the management console
Oracle E-Business Suite Web Applications Desktop Integrator Remote Code Execution Vulnerability (CVE-2022-21587) Analysis and Mitigation Guide
[Affected Scope] Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.11, specifically the Upload component of Web Applications Desktop Integrator.
[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to upload arbitrary files and achieve full system takeover (RCE).
[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) patches and restrict external access to vulnerable endpoints.
Trend Micro Apex Central Arbitrary File Upload and Remote Code Execution (RCE) Vulnerability (CVE-2022-26871) Analysis and Mitigation Guide
[Affected Scope] Trend Micro Apex Central On-Premise deployments (SaaS deployments are unaffected)
[Impact] Unauthenticated remote attackers can upload malicious web shells to execute arbitrary commands with system privileges, leading to complete infrastructure compromise
[Mitigation] Immediately apply the official hotfixes/patches provided by Trend Micro and restrict external access to the management console