CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Ubiquiti UniFi OS Improper Access Control Vulnerability (CVE-2026-34908) - Remote Code Execution and System Takeover Risk
[Affected Scope] Ubiquiti UniFi OS devices accessible via the network
[Impact] Unauthenticated remote attackers can make unauthorized system changes, gain administrative control, and potentially enlist devices into botnets
[Mitigation] Apply the official vendor security patches immediately, restrict access to management interfaces, and monitor for unauthorized configuration changes
Fortinet FortiClientEMS Remote Code Execution (RCE) Vulnerability via Improper Access Control (CVE-2026-35616)
[Affected Scope] Fortinet FortiClientEMS versions 7.4.5 through 7.4.6
[Impact] An unauthenticated remote attacker can execute unauthorized code or commands with system privileges via crafted network requests.
[Mitigation] Apply the official Fortinet security patch (version 7.4.7 or higher) immediately and restrict external network access to the EMS server.
Triofox Improper Access Control Bypass Vulnerability (CVE-2025-12480) Security Advisory
[Affected Scope] Triofox versions prior to 16.7.10368.56560
[Impact] Unauthenticated remote attackers can access initial setup pages even after installation is complete, potentially leading to full administrative takeover.
[Mitigation] Immediately upgrade Triofox to version 16.7.10368.56560 or later.
Citrix ShareFile Storage Zones Controller Remote Code Execution Vulnerability (CVE-2021-22941) Security Advisory
[Affected Scope] Citrix ShareFile Storage Zones Controller versions prior to 5.11.20
[Impact] Unauthenticated remote attackers can bypass access controls to compromise the storage zones controller, potentially leading to arbitrary code execution and data exfiltration
[Mitigation] Immediately upgrade to Citrix ShareFile Storage Zones Controller 5.11.20 or later, and restrict external access to administrative endpoints
QNAP QTS and Helpdesk App Improper Access Control Vulnerability (CVE-2020-2506) Analysis and Mitigation Guide
[Affected Scope] QNAP QTS operating system and Helpdesk application versions prior to 3.0.3
[Impact] Unauthenticated remote attackers can exploit improper access control to gain elevated privileges or read sensitive system information
[Mitigation] Immediately update the QTS operating system and upgrade the Helpdesk application to version 3.0.3 or later
QNAP Photo Station Improper Access Control Vulnerability (CVE-2019-7192) Analysis and Mitigation Guide
[Affected Scope] QNAP Photo Station versions running on QTS operating system environments
[Impact] Unauthenticated remote attackers can bypass access control mechanisms to gain unauthorized system access, potentially leading to Remote Code Execution (RCE)
[Mitigation] Immediately update QNAP Photo Station and QTS to the latest official security-patched versions