CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
DD-WRT UPnP SSDP Buffer Overflow Vulnerability (CVE-2021-27137) Analysis and Mitigation Guide
[Affected Scope] DD-WRT firmware versions before build 45724 with UPnP functionality enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code or cause a Denial of Service (DoS) by sending crafted SSDP M-SEARCH requests, with active exploitation by botnets (e.g., c0xmo) confirmed in the wild [1, 2, references]
[Mitigation] Immediately upgrade DD-WRT firmware to build 45724 or later, and disable UPnP services until the patch is applied [1, references]
Palo Alto Networks PAN-OS User-ID Authentication Portal Buffer Overflow RCE Vulnerability (CVE-2026-0300)
[Affected Scope] Palo Alto Networks PAN-OS software running on PA-Series and VM-Series firewalls with the User-ID™ Authentication Portal (Captive Portal) service enabled.
[Impact] An unauthenticated remote attacker can execute arbitrary code with root privileges on the firewall by sending specially crafted packets.
[Mitigation] Apply the latest security patches immediately, and restrict access to the User-ID™ Authentication Portal to trusted internal IP addresses only.
Microsoft Windows Server Service Remote Code Execution Vulnerability (MS08-067, CVE-2008-4250)
[Affected Scope] Microsoft Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7 Pre-Beta
[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system via crafted RPC requests
[Mitigation] Apply the official Microsoft security patch (MS08-067) immediately and restrict external access to SMB ports (TCP 139/445)