vulnerabilityvia Exploit-DB (latest)
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Metabase 0.61.0 - Authenticated Remote Code Execution
Sep 3, 2026 UTC
Vulnerability news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia Exploit-DB (latest)
[webapps] Ghost_CMS 6.19.0 - Remote Code Execution
Ghost_CMS 6.19.0 - Remote Code Execution
Sep 2, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Langflow 1.10.0 - RCE
Langflow 1.10.0 - RCE
Sep 2, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Marimo 0.20.4 - RCE
Marimo 0.20.4 - RCE
Sep 2, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Wolf CMS 0.8.3.1 - RCE v
Wolf CMS 0.8.3.1 - RCE v
Sep 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Grav CMS 2.0.7 - RCE
Grav CMS 2.0.7 - RCE
Sep 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
Langflow 1.8.4 - Path Traversal to Remote Code Execution
Aug 31, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
Aug 25, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
Oct 22, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Open eClass 3.15 - RCE
Open eClass 3.15 - RCE
Oct 21, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE
Ecava_ntegraXor IGX_16.0.701.10 - RCE
Oct 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] InvoicePlane 1.7.1 - RCE
InvoicePlane 1.7.1 - RCE
Oct 1, 2026 UTC