CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Check Point Management Server Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2026-93616)
[Affected Scope] Check Point Management Server (R80.x, R81.x series)
[Impact] Unauthenticated attackers can upload and execute arbitrary scripts via directory traversal, leading to full system compromise.
[Mitigation] Apply the vendor-provided emergency hotfix and restrict management interface access from the public internet.
N-able N-central Pre-Authentication Remote Code Execution Vulnerability Advisory (CVE-2026-86218)
[Affected Scope] N-able N-central versions prior to 2026.3.1.14
[Impact] Unauthenticated remote attackers can execute arbitrary code with high privileges and fully compromise the system by sending specially crafted requests
[Mitigation] Immediately upgrade N-central to version 2026.3.1.14 or later, and restrict external access until patched
marimo Reactive Python Notebook Pre-Auth Remote Code Execution (RCE) via Terminal WebSocket Authentication Bypass (CVE-2026-39987)
[Affected Scope] All versions of marimo open-source Python notebook prior to 0.23.0
[Impact] Unauthenticated remote attackers can establish a connection to the /terminal/ws endpoint, obtaining a full PTY shell and executing arbitrary system commands
[Mitigation] Immediately upgrade the marimo package to version 0.23.0 or higher
Commvault Command Center Unauthenticated Remote Code Execution and Path Traversal Vulnerability Advisory (CVE-2025-34028)
[Affected Scope] Commvault Command Center Innovation Release versions 11.38.0 through 11.38.20.
[Impact] Unauthenticated remote attackers can upload malicious ZIP installation packages to execute arbitrary code (RCE) via path traversal and JSP web shell deployment.
[Mitigation] Immediately upgrade to patched versions: 11.38.20 with SP38-CU20-433/436 or 11.38.25 with SP38-CU25-434/438 or higher.
SonicWall SMA1000 AMC and CMC Pre-Authentication Remote Code Execution (RCE) Vulnerability (CVE-2025-23006) Security Advisory
[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)
[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system
[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles
Sophos Web Appliance Pre-Auth Command Injection Vulnerability (CVE-2023-1671) Security Advisory
[Affected Scope] Sophos Web Appliance versions prior to 4.3.10.4
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending specially crafted HTTP requests.
[Mitigation] Immediately upgrade Sophos Web Appliance to version 4.3.10.4 or higher, or migrate to a supported alternative solution due to the product's End-of-Life (EOL) status.
D-Link DIR-825 Web Interface Buffer Overflow Pre-Authentication Remote Code Execution (RCE) (CVE-2020-29557)
[Affected Scope] D-Link DIR-825 R1 devices running firmware versions up to 3.0.1 before 2020-11-20
[Impact] Remote unauthenticated attackers can execute arbitrary code with root privileges by sending crafted HTTP requests, leading to complete device compromise
[Mitigation] Apply the latest official firmware patch immediately, disable WAN-side remote management, or replace end-of-life hardware