com.hotels:waggle-dance-api (>=2.0.0, <=2.1.0), com.netflix.genie:genie-app (>=3.0.0-rc.26, <=3.0.11) +11 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.3.8.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.hotels:waggle-dance-api =2.0.0,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), de.adorsys.ledgers:gateway-app (3.1.1) +5 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.17.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.11.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.11.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

com.jdcloud.jdsf:spring-cloud-jdsf-core (1.0.0-edgware), org.springframework.boot:spring-boot-starter-remote-shell (1.5.20.release) +21 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.20.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.jdcloud.jdsf:spring-cloud-jdsf-core...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.0.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.0.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.10.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.10.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.12.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.12.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

io.github.resilience4j:resilience4j-spring-boot (>=0.12.0, <=0.12.1), org.springframework.boot:spring-boot-starter-remote-shell (1.5.5.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.5.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - io.github.resilience4j:resilience4j-spring-bo...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.2.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.2.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

org.springframework.boot:spring-boot-starter-remote-shell (1.0.0.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.0.0.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.1.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.1.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

io.fabric8:process-spring-boot-container (>=1.1.0.cr3, <=1.1.0.cr5), io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr3) +2 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.3.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - io.fabric8:process-spring-boot-container...

cn.patterncat:event-trace-client (1.3.0), cn.patterncat:springboot-metrics-starter (>=0.0.1, <=0.0.8) +6 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.4.6.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - cn.patterncat:event-trace-client 1.3.0 -...

com.ebay:lightning-client (0.9.0), com.ebay:lightning-core (0.9.0) +1 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.0.1.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.ebay:lightning-client 0.9.0 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.12), com.github.surpassm:liaoin-security-app (0.0.1.release) +7 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.15.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

com.netflix.spectator:spectator-web-spring (>=0.41.0, <=0.42.0), org.apache.camel:camel-example-spring-boot (>=2.16.3, <=2.16.5) +8 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.8.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.netflix.spectator:spectator-web-spring...

CVE-2026-26478

The Mobvoi Tichome Mini smart speaker (firmware versions 012 and 027 ) is vulnerable to a shell command injection via a specially crafted UDP datagram sent to port 35670 . The flaw originates from an IPC mechanism using the C system() function to process messages, which allows remote attackers to...

SofaWiki 3.9.2 Shell Upload

This is a proof of concept remote shell upload exploit for SofaWiki version 3.9.2 that leverages an issue originally discovered in 2024...

📄 Pterodactyl Panel Remote Code Execution

This Metasploit module exploits a remote code execution vulnerability in Pterodactyl Panel versions before 1.11.11. The vulnerability allows an attacker to write a malicious PHP file via the locale functionality and then execute it to gain a reverse shell...

Ilevia EVE X1 Server

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary shell commands and the disclosure of sensitive system information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...