CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
MikroTik RouterOS SSH Argument Injection Privilege Escalation Vulnerability (CVE-2026-86060)
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to security patches.
[Impact] Unauthenticated remote attackers can manipulate the trusted policy mask via specially crafted SSH usernames, leading to full privilege escalation.
[Mitigation] Immediately upgrade to versions 6.49.21, 7.23.4, or 7.24.2 and restrict SSH access to trusted source IPs.
GNU Inetutils telnetd Remote Authentication Bypass and Root Privilege Escalation (CVE-2026-24061)
[Affected Scope] Systems running telnetd from GNU Inetutils versions up to and including 2.7.
[Impact] Remote attackers can bypass authentication and gain complete root access to the target system by injecting '-f root' into the USER environment variable.
[Mitigation] Apply the official vendor patches immediately, or disable the telnetd service and transition to secure protocols like SSH.
PHPMailer < 5.2.18 Remote Code Execution (RCE) and Argument Injection Vulnerability (CVE-2016-10033)
[Affected Scope] All PHP web applications utilizing PHPMailer versions prior to 5.2.18
[Impact] Remote attackers can exploit the vulnerability to execute arbitrary code on the target server by manipulating the Sender (From) field
[Mitigation] Immediately upgrade the PHPMailer library to the latest stable version (5.2.18 or higher)