CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2026-1340)
[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) affected versions
[Impact] Unauthenticated attackers can execute arbitrary code remotely, potentially leading to full system compromise
[Mitigation] Apply the official security patches immediately and restrict access to exposed management interfaces
Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2026-1281)
[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM)
[Impact] Unauthenticated remote attackers can inject and execute arbitrary code, leading to full system compromise
[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces
Sitecore Experience Manager and Experience Platform Remote Code Execution Vulnerability (CVE-2025-53690) Security Advisory
[Affected Scope] Sitecore Experience Manager (XM) and Experience Platform (XP) versions up to and including 9.0
[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the host system via deserialization of untrusted data
[Mitigation] Immediately apply the official security patches from the vendor, or implement temporary workarounds such as enforcing ViewState encryption and restricting access
Langflow /api/v1/validate/code Unauthenticated Remote Code Execution Vulnerability (CVE-2025-3248)
[Affected Scope] Langflow versions prior to 1.3.0
[Impact] A remote, unauthenticated attacker can execute arbitrary Python code and fully compromise the host system by sending crafted HTTP requests.
[Mitigation] Immediately upgrade Langflow to version 1.3.0 or later, and restrict external access to the vulnerable endpoint.
Novi Survey Remote Code Execution (RCE) Vulnerability Security Advisory (CVE-2023-29492)
[Affected Scope] All on-premises and cloud web application servers running Novi Survey versions prior to 8.9.43676.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands and malicious code under the security context of the web service account.
[Mitigation] Immediately upgrade to the official patched version (8.9.43676 or higher) and restrict external access to the application.
Sophos Firewall User Portal and Webadmin Remote Code Execution (RCE) Vulnerability Advisory (CVE-2022-3236)
[Affected Scope] Sophos Firewall version v19.0 MR1 and older affecting User Portal and Webadmin interfaces
[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the firewall device by sending specially crafted HTTP requests
[Mitigation] Immediately upgrade to the latest firmware version (v19.0 MR2 or later) and disable WAN access to Webadmin and User Portal
Spring Cloud Gateway Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2022-22947)
[Affected Scope] Spring Cloud Gateway versions prior to 3.1.1 and 3.0.7, where the Gateway Actuator endpoint is enabled, exposed, and unsecured
[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the host by sending maliciously crafted HTTP requests
[Mitigation] Immediately upgrade Spring Cloud Gateway to version 3.1.1, 3.0.7, or higher, and disable or secure the Gateway Actuator endpoint
Ivanti Cloud Services Appliance (CSA) Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2021-44529)
[Affected Scope] Ivanti Endpoint Manager Cloud Services Appliance (CSA) versions 4.5 and 4.6
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with limited privileges ('nobody') by sending specially crafted HTTP requests.
[Mitigation] Immediately apply the official security patches provided by Ivanti and restrict access to the CSA management interface from the public internet.