vulnerabilityvia Exploit-DB (latest)
[remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
Sep 24, 2026 UTC
Security news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia Exploit-DB (latest)
[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
Sep 11, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
FreePBX 17.0.2 - Remote Code Execution (RCE)
Sep 3, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Langflow 1.10.0 - RCE
Langflow 1.10.0 - RCE
Sep 2, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Marimo 0.20.4 - RCE
Marimo 0.20.4 - RCE
Sep 2, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Wolf CMS 0.8.3.1 - RCE v
Wolf CMS 0.8.3.1 - RCE v
Sep 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Grav CMS 2.0.7 - RCE
Grav CMS 2.0.7 - RCE
Sep 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
Aug 25, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
Oct 22, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] Open eClass 3.15 - RCE
Open eClass 3.15 - RCE
Oct 21, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE
Ecava_ntegraXor IGX_16.0.701.10 - RCE
Oct 1, 2026 UTC
vulnerabilityvia Exploit-DB (latest)
[webapps] InvoicePlane 1.7.1 - RCE
InvoicePlane 1.7.1 - RCE
Oct 1, 2026 UTC