CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Kestra Orchestration Platform Authentication Bypass and Remote Code Execution (RCE) Vulnerability (CVE-2026-49869)
[Affected Scope] Kestra open-source versions prior to 1.0.45 and 1.3.21
[Impact] Unauthenticated remote attackers can bypass authentication filters to create and execute arbitrary workflows, leading to Remote Code Execution (RCE) as root inside the worker container
[Mitigation] Immediately upgrade Kestra to version 1.0.45, 1.3.21, or higher
ServiceNow Now Platform Input Validation Vulnerability Leading to Remote Code Execution (CVE-2024-5217)
[Affected Scope] ServiceNow Now Platform Washington DC, Vancouver, and earlier releases
[Impact] An unauthenticated remote attacker can execute arbitrary code within the context of the Now Platform due to improper input validation
[Mitigation] Apply the official security patches and hotfixes released during the June 2024 patching cycle immediately