Export limit exceeded: 425892 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,764

Export CSV
CVE-2026-27745

SPIP interface_traduction_objets < 2.2.2 Authenticated RCE

The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow. The plugin incorporates untrusted request data into a hidden form field that is rendered without SPIP output filtering. Because fields prefixed with an underscore bypass protection mechanisms and the hidden content is rendered with filtering disabled, an authenticated attacker with editor-level privileges can inject crafted content that is evaluated through SPIP's template processing chain, resulting in execution of code in the context of the web server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Spip
Products
Interface Traduction Objets Spip
CVE-2019-25671

VA MAX 8.3.4 Remote Code Execution via changeip.php

VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter. Attackers can send POST requests to the changeip.php endpoint with malicious payload in the mtu_eth0 field to execute commands as the apache user.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Va Max
Products
Va Max
CVE-2026-27744

SPIP tickets < 4.3.3 Unauthenticated RCE

The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages. The plugin appends untrusted request parameters into HTML that is later rendered by a template using unfiltered environment rendering (#ENV**), which disables SPIP output filtering. As a result, an unauthenticated attacker can inject crafted content that is evaluated through SPIP's template processing chain, leading to execution of code in the context of the web server.

CVSS 4.0 · 9.3 Critical EPSS 1.0% KEV · Not listed
Vendors
Centreon Spip
Products
Open Tickets Tickets
CVE-2026-27510

Unitree Go2 Mobile Program Tampering Enables Root RCE

Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of user-created programmes. The Android application stores programs in a local SQLite database (unitree_go2.db, table dog_programme) and transmits the programme_text content, including the pyCode field, to the robot. The robot's actuator_manager.py executes the supplied Python as root without integrity verification or content validation. An attacker with local access to the Android device can tamper with the stored programme record to inject arbitrary Python that executes when the user triggers the program via a controller keybinding, and the malicious binding persists across reboots. Additionally, a malicious program shared through the application's community marketplace can result in arbitrary code execution on any robot that imports and runs it.

CVSS 4.0 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Unitree Unitreerobotics
Products
Go2 Go2 Firmware Unitree Go2
CVE-2026-22206

SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Spip
Products
Saisies Spip
CVE-2026-28208

Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix

Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content anywhere on the filesystem when a crafted RAR archive is extracted on Linux/Unix. This can often lead to remote code execution (e.g., overwriting shell profiles, source code, cron jobs, etc). Version 7.5.8 has a fix for the issue.

CVSS 3.1 · 5.9 Medium EPSS 14.7% KEV · Not listed
Vendors
Junrar Junrar Project
Products
Junrar Junrar
CVE-2026-21389

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the request body sent to the contacts import route.

CVSS 3.1 · 8 High EPSS 1.7% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-24517

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into requests sent to the firmware update route.

CVSS 3.1 · 8 High EPSS 1.8% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-24689

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the devices field of the firmware update apply action.

CVSS 3.1 · 8 High EPSS 1.7% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-24695

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into OpenSSL argument fields within requests sent to the utility route, leading to remote code execution.

CVSS 3.1 · 8 High EPSS 1.7% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-25105

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into parameters of the Modbus command tool in the debug route.

CVSS 3.1 · 8 High EPSS 2.1% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-25721

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the server username and/or password fields of the restore action in the API V1 route.

CVSS 3.1 · 8 High EPSS 2.1% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-20764

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by providing malicious input via the device hostname configuration which is later processed during system setup, resulting in remote code execution.

CVSS 3.1 · 8 High EPSS 2.1% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-25196

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi-Fi SSID and/or password fields can lead to remote code execution when the configuration is processed.

CVSS 3.1 · 8 High EPSS 2.1% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-25037

Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by configuring a maliciously crafted LCD state which is later processed during system setup, enabling remote code execution.

CVSS 3.1 · 8 High EPSS 2.1% KEV · Not listed
Vendors
Copeland
Products
Copeland Xweb 300d Pro Copeland Xweb 500b Pro Copeland Xweb 500d Pro and 6 more
CVE-2026-0980

Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Logicminds Red Hat Redhat
Products
Rubyipmi Red Hat Satellite 6 Satellite and 3 more
CVE-2026-27947

Group-Office Vulnerable to Remote Code Execution (RCE)

Group-Office is an enterprise customer relationship management and groupware tool. Versions prior to 26.0.9, 25.0.87, and 6.8.154 have an authenticated Remote Code Execution vulnerability in the TNEF attachment processing flow. The vulnerable path extracts attacker-controlled files from `winmail.dat` and then invokes `zip` with a shell wildcard (`*`). Because extracted filenames are attacker-controlled, they can be interpreted as `zip` options and lead to arbitrary command execution. Versions 26.0.9, 25.0.87, and 6.8.154 fix the issue.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Intermesh
Products
Group-office
CVE-2026-28409

WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection

WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution (RCE) vulnerability exists in the WeGIA application's database restoration functionality. An attacker with administrative access (which can be obtained via the previously reported Authentication Bypass) can execute arbitrary OS commands on the server by uploading a backup file with a specifically crafted filename. Version 3.6.5 fixes the issue.

CVSS 3.1 · 10 Critical EPSS 3.6% KEV · Not listed
Vendors
Labredescefetrj Wegia
Products
Wegia Wegia