CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SMA1000 Work Place Pre-Authentication Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-83548)
[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface
[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive internal resources, and perform unauthorized administrative operations, potentially leading to full system compromise
[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the Work Place interface
BeyondTrust Remote Support and Privileged Remote Access Pre-Authentication Remote Code Execution (RCE) Vulnerability (CVE-2026-1731) Urgent Security Advisory
[Affected Scope] BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA).
[Impact] Unauthenticated remote attackers can execute arbitrary operating system commands in the context of the 'site' user by sending specially crafted HTTP requests.
[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to the management interface using IP whitelisting and WAF rules.
Zyxel NAS Pre-Authentication Remote Code Execution (RCE) Vulnerability Advisory (CVE-2023-27992)
[Affected Scope] Zyxel NAS326 (prior to V5.21(AAZF.14)C0), NAS540 (prior to V5.21(AATB.11)C0), and NAS542 (prior to V5.21(ABAG.11)C0)
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP requests, leading to complete system compromise
[Mitigation] Apply the official firmware updates immediately and restrict external internet access to the NAS management interface
ZyXEL NAS Devices weblogin.cgi Pre-Authentication Remote Code Execution (RCE) Vulnerability (CVE-2020-9054)
[Affected Scope] ZyXEL NAS devices (NAS326, NAS520, NAS540, NAS542) running firmware versions prior to 5.21, and all end-of-support NSA series models
[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP request
[Mitigation] Immediately upgrade active models to the patched firmware versions, and isolate or replace end-of-support (EoL) models from the network