CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Brotli Decoder Remote Code Execution (RCE) and Memory Corruption Vulnerability (CVE-2026-111497)
[Affected Scope] All web servers, browsers, Node.js environments, and backend applications using Google Brotli library versions 1.0.3 through 1.2.0
[Impact] Remote unauthenticated attackers can corrupt decoder state memory via crafted compressed streams, leading to sensitive data disclosure, DoS, or Remote Code Execution (RCE)
[Mitigation] Immediately update Brotli libraries and dependent packages to the latest secure versions (1.0.10, 1.1.1, 1.2.1 or higher)
Palo Alto Networks PAN-OS User-ID Authentication Portal Buffer Overflow RCE Vulnerability (CVE-2026-0300)
[Affected Scope] Palo Alto Networks PAN-OS software running on PA-Series and VM-Series firewalls with the User-ID™ Authentication Portal (Captive Portal) service enabled.
[Impact] An unauthenticated remote attacker can execute arbitrary code with root privileges on the firewall by sending specially crafted packets.
[Mitigation] Apply the latest security patches immediately, and restrict access to the User-ID™ Authentication Portal to trusted internal IP addresses only.
Fortinet Multiple Products Stack-based Buffer Overflow Vulnerability (CVE-2025-32756) Security Advisory
[Affected Scope] Multiple Fortinet appliance product lines including FortiCamera, FortiMail, FortiNDR, FortiRecorder, and FortiVoice
[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with root privileges by sending crafted HTTP requests containing a malicious hash cookie
[Mitigation] Immediately upgrade to the patched firmware versions provided by the vendor and restrict external access to management interfaces
Ivanti Connect Secure / Policy Secure / ZTA Gateways Remote Code Execution (RCE) Vulnerability Alert (CVE-2025-22457)
[Affected Scope] Ivanti Connect Secure (before 22.7R2.6), Policy Secure (before 22.7R1.4), and ZTA Gateways (before 22.8R2.2)
[Impact] Unauthenticated remote attackers can trigger a stack-based buffer overflow to execute arbitrary code with root privileges on the target gateway
[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to external-facing management interfaces
D-Link GO-RT-AC750 Router cgibin Buffer Overflow Remote Code Execution Vulnerability (CVE-2022-37055) Security Advisory
[Affected Scope] D-Link GO-RT-AC750 hardware revA (firmware v101b03 and prior) and revB (firmware FWv200b02 and prior).
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise by sending crafted HTTP requests to the WAN/LAN interface.
[Mitigation] Apply the latest firmware updates immediately, or replace end-of-life (EoL) devices and disable remote WAN management interfaces.
Sophos XG Firewall User Portal Buffer Overflow Vulnerability (CVE-2020-15069) Technical Advisory
[Affected Scope] Sophos XG Firewall v17.0, v17.1, and v17.5 (v17.5 MR12 and prior) with Clientless VPN Access feature enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) or cause a Denial of Service (DoS) on the firewall via specially crafted HTTP/S requests
[Mitigation] Apply official hotfix HF062020.1, upgrade to the latest firmware, and restrict WAN access to the User Portal and SSL VPN ports
Microsoft Windows Server Service Remote Code Execution Vulnerability (MS08-067, CVE-2008-4250)
[Affected Scope] Microsoft Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7 Pre-Beta
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system via crafted RPC requests
[Mitigation] Apply the official Microsoft security patch (MS08-067) immediately and restrict external access to SMB ports (TCP 139/445)