CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
ConnectWise ScreenConnect Client Remote Code Execution (RCE) and Privilege Escalation (CVE-2026-84869)
[Affected Scope] ConnectWise ScreenConnect client software (Servers are not impacted)
[Impact] Attackers can exploit active remote sessions to transfer and execute malicious files without host confirmation, leading to full system compromise.
[Mitigation] Immediately update all ScreenConnect clients to the latest patched version and enforce session consent policies.
Appsmith Unauthenticated Edit-Mode Action Execution and Data Exposure Vulnerability (CVE-2026-24042)
[Affected Scope] Appsmith versions 1.94 and below with publicly accessible applications
[Impact] Unauthenticated attackers can execute unpublished (edit-mode) actions, leading to sensitive data exposure, unauthorized database queries, and side-effect behaviors
[Mitigation] Restrict public access to applications and implement request filtering on reverse proxies or WAFs to block unauthorized edit-mode execution requests
Dassault Systemes DELMIA Apriso Missing Authorization Vulnerability (CVE-2025-6205) Analysis and Mitigation Guide
[Affected Scope] DELMIA Apriso from Release 2020 through Release 2025
[Impact] Unauthenticated remote attackers can bypass authorization checks to gain privileged access to the application
[Mitigation] Apply official security patches immediately, restrict external access, and enforce IP-based access control lists
SimpleHelp Remote Support Software Privilege Escalation Vulnerability (CVE-2024-57726) Advisory
[Affected Scope] SimpleHelp remote support software v5.5.7 and earlier versions
[Impact] Low-privilege technician accounts can generate API keys with excessive permissions, leading to full server administrator privilege escalation
[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and audit all existing API keys for unauthorized creation
Redis Debian Packaging Defect Lua Sandbox Escape and Remote Code Execution (CVE-2022-0543) Analysis and Mitigation Guide
[Affected Scope] Redis server instances installed via package managers (apt) on Debian, Ubuntu, and derived Linux distributions
[Impact] Unauthenticated remote attackers can bypass the Lua scripting sandbox to execute arbitrary system commands with the privileges of the Redis process (CVSS 10.0, CISA KEV Listed)
[Mitigation] Apply official OS package updates immediately, or disable EVAL/EVALSHA commands and restrict network access to localhost
NETGEAR JGS516PE Missing Function-Level Access Control Vulnerability (CVE-2020-26919) Analysis and Mitigation Guide
[Affected Scope] NETGEAR JGS516PE devices running firmware versions prior to 2.6.0.43
[Impact] Unauthenticated remote attackers can bypass authentication to access sensitive management functions, potentially leading to arbitrary command execution and full device compromise
[Mitigation] Immediately upgrade the JGS516PE firmware to version 2.6.0.43 or later and restrict access to the management interface