18132 matches found
CVE-2026-54710 FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution RCE vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary PHP files, allowing authenticated attackers to execute arbitrary PHP code on the server with the privileg...
EUVD-2026-88390
FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution RCE vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary PHP files, allowing authenticated attackers to execute arbitrary PHP code on the server with the privileg...
CVE-2026-54710
FreePBX versions prior to 16.0.40 and 17.0.7 are vulnerable to a critical remote code execution (RCE) flaw in the superfecta module . The root cause is the unsafe inclusion of arbitrary PHP files within the module's AJAX handler (specifically the options and save_options cases), where the applica...
CVE-2026-54710 FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution RCE vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary PHP files, allowing authenticated attackers to execute arbitrary PHP code on the server with the privileg...
Exploit for PHP Remote File Inclusion in Wordpress
markdown 🎯 CVE-2026-87902 — WordPress Core LFI → RCE...
Exploit for CVE-2026-38526
CVE-2026-38526 — Krayin CRM ≤ 2.2.x Authenticated RCE ⚠️...
WordPress Ad Inserter plugin 2.8.12-2.8.18 - Subscriber+ RCE / Stored XSS vulnerability
Subscriber+ RCE / Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Ad Inserter versions 2.8.12-2.8.18...
CVE-2026-12267
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection within the Windows DNS Query Resolution Policy name field. This flaw can lead to remote code execution (RCE). No specific exploit details or in-the-wild exploitation information are provided in the documents. Remedia...
CVE-2026-12267 Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code execution...
CVE-2026-12268 Authenticated PowerShell Injection leads to RCE
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution...
CVE-2026-12268
ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection during a Windows DNS SPF/TXT record push. This vulnerability can lead to remote code execution (RCE). The provided documents do not specify the exact component, file, or root cause details beyond the injec...
CVE-2026-12269 Authenticated File Write to RCE via keepalived in DDI Central
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
CVE-2026-12269
Zohocorp ManageEngine DDI Central version 6.2.0 (builds below 6201) is vulnerable to a Keepalived configuration injection vulnerability within the HA configuration workflow. An authenticated operator-level user can exploit this flaw to modify the Keepalived configuration, potentially leading to R...
CVE-2026-12269 Authenticated File Write to RCE via keepalived in DDI Central
Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue could allow an authenticated operator-level user to modify the Keepalived configuration and potentially execute commands as root on the DDI...
Exploit for CRLF Injection in Comfy Comfyui-Manager
CVE-2026-22777 — ComfyUI-Manager CRLF Injection → RCE with CV...
PT-2026-99957
FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...
PT-2026-99959
FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...
openEQUELLA Deserialization / SSTI Remote Code Execution
openEQUELLA versions prior to 2026.1.0 contain authenticated remote code execution vulnerabilities involving unsafe Java deserialization and FreeMarker server side template injection. The deserialization issue allows an authenticated non-guest user to bypass a class denylist using a nested...