CVE-2024-21762 — Vulnerability brief
CVE-2024-21762 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2025-55182: React2Shell Vulnerability
A remote code execution vulnerability in React applications, used as a lure in the ChocoPoC campaign.
CVE-2022-40684: Fortinet FortiOS Authentication Bypass Used in StrikeShark
CVE-2022-40684 is an authentication bypass vulnerability in Fortinet FortiOS. It was exploited in the StrikeShark campaign.
CVE-2023-20198: Cisco IOS XE Web UI Vulnerability Used in StrikeShark
CVE-2023-20198 is a critical vulnerability in Cisco IOS XE Web UI that allows remote code execution. It was exploited in the StrikeShark…
CVE-2026-54636 — Critical vulnerability brief
CVSS 9Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running…
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer could allow a malicious repository to execute commands and steal a developer's cloud credentials. The…
CVE-2026-12957 — Vulnerability brief
CVE-2026-12957 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-12958: Amazon Q Developer Symlink Vulnerability
A vulnerability in Amazon Q Developer Language Server 1.69.0 and earlier allows malicious repositories to use symlinks to write to sensitive files…
CVE-2025-59536: Claude Code MCP Config Command Execution
A vulnerability in Claude Code allowed project-level MCP configuration to lead to command execution.
CVE-2025-54136: MCPoison – Cursor MCP Config Injection
CVE-2025-54136, known as MCPoison, is a vulnerability in Cursor discovered by Check Point Research. It allows an attacker to get an MCP…