CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Firewall Management Center (FMC) Insecure Deserialization Vulnerability (CVE-2026-20131, CVSS 10.0) - Remote Code Execution and Root Privilege Escalation
[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software.
[Impact] Unauthenticated, remote attackers can execute arbitrary Java code with root privileges by sending crafted serialized Java objects.
[Mitigation] Apply official Cisco security patches immediately and restrict public internet access to the FMC management interface.
Docling Core YAML Deserialization Remote Code Execution Vulnerability (CVE-2026-24009)
[Affected Scope] docling-core versions from v2.21.0 prior to v2.48.4, specifically when paired with pyyaml versions prior to v5.4
[Impact] Remote attackers can execute arbitrary Python code on the target server by supplying malicious YAML data to the load_from_yaml() method
[Mitigation] Upgrade docling-core to version v2.48.4 or later, or ensure the installed PyYAML version is v5.4 or greater
Netwrix Auditor Remote Code Execution (RCE) Vulnerability Advisory (CVE-2022-31199)
[Affected Scope] Netwrix Auditor server and User Activity Video Recording agents installed on monitored systems
[Impact] Unauthenticated remote attackers can execute arbitrary code with 'NT AUTHORITY\SYSTEM' privileges on affected servers and monitored hosts
[Mitigation] Immediately upgrade Netwrix Auditor to the latest secure version and restrict network access to agent communication ports
Laravel Ignition Debug Mode Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2021-3129)
[Affected Scope] Laravel applications running versions prior to 8.4.2 and utilizing facade/ignition versions prior to 2.5.2 with debug mode (APP_DEBUG=true) enabled
[Impact] Unauthenticated remote attackers can execute arbitrary PHP code on the target server, leading to complete system compromise and data exfiltration
[Mitigation] Upgrade the facade/ignition package to version 2.5.2 or higher, and ensure that Laravel debug mode (APP_DEBUG) is set to 'false' in production environments