CVE-2026-31928 — Critical vulnerability brief
CVSS 9.3The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-54350 — Critical vulnerability brief
CVSS 10Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the…
CVE-2021-26855 — Vulnerability brief
CVE-2021-26855 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2023-32315: Openfire Path Traversal Vulnerability Used in StrikeShark
CVE-2023-32315 is a path traversal vulnerability in Openfire, an XMPP server. It was exploited in the StrikeShark campaign to target Taiwanese software…
CVE-2024-36401 — Vulnerability brief
CVE-2024-36401 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2016-4437: Apache Shiro Vulnerability Weaponized in StrikeShark
CVE-2016-4437 is a vulnerability in Apache Shiro that allows remote code execution. It was listed among the flaws exploited in the StrikeShark…
CVE-2021-27076: Microsoft SharePoint Vulnerability Used for DLL Side-Loading in StrikeShark
CVE-2021-27076 is a remote code execution vulnerability in Microsoft SharePoint. In StrikeShark, it was used to trigger a DLL side-loading chain to…
CVE-2022-27925 — Vulnerability brief
CVE-2022-27925 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2022-41082 (ProxyNotShell): Exchange Server Vulnerability Used in StrikeShark
CVE-2022-41082 is a remote code execution vulnerability in Microsoft Exchange Server, part of the ProxyNotShell attack chain. It was exploited in StrikeShark.
CVE-2023-46747: F5 BIG-IP Vulnerability Weaponized in StrikeShark
CVE-2023-46747 is a critical vulnerability in F5 BIG-IP that allows remote code execution. It was exploited in the StrikeShark campaign.