CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Catalyst SD-WAN Manager Arbitrary File Creation and Overwrite Vulnerability (CVE-2026-20262) Advisory
[Affected Scope] Web UI and API endpoints of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage)
[Impact] An authenticated remote attacker can create or overwrite arbitrary files on the filesystem, potentially leading to root privilege escalation
[Mitigation] Immediately apply the official Cisco security patches and monitor unauthorized API requests and file upload activities
Kentico Xperience Remote Code Execution (RCE) via Path Traversal and Arbitrary File Upload (CVE-2025-2749)
[Affected Scope] Kentico Xperience through version 13.0.178
[Impact] Authenticated attackers can exploit the Staging Sync Server to upload arbitrary files to relative paths, leading to server-side execution and full Remote Code Execution (RCE)
[Mitigation] Apply the official Kentico hotfix immediately and restrict access to the Staging Sync Server endpoints