Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2026

305 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 4

  • CVE-2026-25253
    42Plan

    OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket conne

    HighCVSS 8.8Proof of conceptEPSS 24%

    openclaw · openclawFeb 1, 2026

  • CVE-2025-15030
    39Monitor

    User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    unknown · user profile builderFeb 2, 2026

  • CVE-2025-9974
    32Monitor

    Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product

    HighCVSS 8.0Proof of conceptEPSS 0%

    nokia · nokia ontFeb 2, 2026

  • CVE-2026-20404
    26Monitor

    In Modem, there is a possible system crash due to improper input validation.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    mediatek · nr15Feb 2, 2026

  • CVE-2026-0599
    39Monitor

    Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

    HighCVSS 7.5No exploitEPSS 29%

    huggingface · huggingface/text-generation-inferenceFeb 2, 2026

  • CVE-2026-1232
    27Monitor

    Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows

    MediumCVSS 6.8Proof of conceptEPSS 0%

    beyondtrust · privilege management for windowsFeb 2, 2026

  • CVE-2026-22226
    35Monitor

    Command Injection Vulnerability on TP-Link Archer BE230 and AX73

    HighCVSS 8.5Proof of conceptEPSS 2%

    tp-link · archer be230 firmwareFeb 2, 2026

  • CVE-2026-22778
    60This week

    vLLM leaks a heap address when PIL throws an error

    CriticalCVSS 9.8WeaponizedEPSS 16%

    vllm · vllmFeb 2, 2026

  • CVE-2026-25137
    39Monitor

    NixOs Odoo database and filestore publicly accessible with default odoo configuration

    CriticalCVSS 9.1No exploitEPSS 10%

    nixos · nixpkgsFeb 2, 2026

  • CVE-2025-61638
    0Monitor

    Sanitizer::validateAttributes data-XSS

    CVSS 0.0Proof of conceptEPSS 0%

    mediawiki · mediawikiFeb 2, 2026

  • CVE-2025-15556
    61This week

    Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

    HighCVSS 7.7KEVWeaponizedEPSS 1%

    notepad-plus-plus · notepad\+\+Feb 2, 2026

  • CVE-2026-1375
    32Monitor

    Tutor LMS <= 3.9.5 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Course Modification and Deletion

    HighCVSS 8.1Proof of conceptEPSS 0%

    themeum · tutor lms – elearning and online course solutionFeb 3, 2026

  • CVE-2025-5319
    39Monitor

    SQLi in Emit Informatics' DIGITA Efficiency Management System

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    emit informatics and communication technologies industry and trade ltd. co. · digita efficiency management systemFeb 3, 2026

  • CVE-2026-1207
    25Monitor

    Potential SQL injection via raster lookups on PostGIS

    MediumCVSS 5.4Proof of conceptEPSS 12%

    djangoproject · djangoFeb 3, 2026

  • CVE-2026-1312
    21Monitor

    Potential SQL injection via QuerySet.order_by and FilteredRelation

    MediumCVSS 5.4Proof of conceptEPSS 0%

    djangoproject · djangoFeb 3, 2026

  • CVE-2026-1814
    27Monitor

    Rapid7 Nexpose Insecure Java Keystore Password Generation

    MediumCVSS 6.8Proof of conceptEPSS 0%

    rapid7 · insightvm/nexposeFeb 3, 2026

  • CVE-2026-24945
    21Monitor

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.34 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    themefic · ultimate addons for contact form 7Feb 3, 2026

  • CVE-2025-57529
    39Monitor

    YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    youdatasum · cpas audit management systemFeb 3, 2026

  • CVE-2025-61506
    39Monitor

    An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upl

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    mediacrush · mediacrushFeb 3, 2026

  • CVE-2025-69848
    21Monitor

    NetBox is an open-source infrastructure resource modeling and IP address management platform.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    netbox · netboxFeb 3, 2026

  • CVE-2025-69971
    40Plan

    FUXA v1.2.7 contains a hard-coded credential vulnerability in server/api/jwt-helper.js.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    frangoteam · fuxaFeb 3, 2026

  • CVE-2025-70559
    26Monitor

    pdfminer.six before 20251230 contains an insecure deserialization vulnerability in the CMap loading mechanism.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    Feb 3, 2026

  • CVE-2025-70849
    24Monitor

    Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /stor

    MediumCVSS 6.1Proof of conceptEPSS 0%

    stefanprodan · podinfoFeb 3, 2026

  • CVE-2025-62501
    28Monitor

    SSH Hostkey Misconfiguration Vulnerability in TP-Link Archer AX53

    HighCVSS 7.0No exploitEPSS 0%

    tp-link · archer ax53 firmwareFeb 3, 2026

  • CVE-2026-25616
    24Monitor

    Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

    MediumCVSS 6.1Proof of conceptEPSS 0%

    phillipsdata · blestaFeb 3, 2026

  • CVE-2026-1801
    26Monitor

    Libsoup: libsoup: http request smuggling via malformed chunk headers

    MediumCVSS 6.5Proof of conceptEPSS 0%

    gnome · libsoupFeb 3, 2026

  • CVE-2026-24514
    26Monitor

    ingress-nginx Admission Controller denial of service

    MediumCVSS 6.5Proof of conceptEPSS 0%

    kubernetes · ingress-nginxFeb 3, 2026

  • CVE-2026-20980
    28Monitor

    Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.

    HighCVSS 7.0Proof of conceptEPSS 0%

    samsung · androidFeb 4, 2026

  • CVE-2025-15260
    26Monitor

    MyRewards – Loyalty Points and Rewards for WooCommerce <= 5.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Loyalty Rule Modification

    MediumCVSS 6.5Proof of conceptEPSS 0%

    lwsdevelopers · myrewardsFeb 4, 2026

  • CVE-2026-0743
    17Monitor

    WP Content Permission <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ohmem-message' Parameter

    MediumCVSS 4.4Proof of conceptEPSS 0%

    orenhav · wp content permissionFeb 4, 2026

  • CVE-2025-5329
    39Monitor

    SQLi in Martcode Software's Delta Course Automation

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    martcode software inc. · delta course automationFeb 4, 2026

  • CVE-2025-70545
    24Monitor

    A stored cross-site scripting (XSS) vulnerability exists in the web management interface of the PPC (Belden) ONT 2K05X router running firmwa

    MediumCVSS 6.1Proof of conceptEPSS 0%

    belden · ppc 2k05x firmwareFeb 4, 2026

  • CVE-2026-25049
    37Monitor

    n8n Has an Expression Escape Vulnerability Leading to RCE

    CriticalCVSS 9.4Proof of conceptEPSS 1%

    n8n · n8nFeb 4, 2026

  • CVE-2026-25053
    37Monitor

    n8n is Vulnerable to OS Command Injection in Git Node

    CriticalCVSS 9.4Proof of conceptEPSS 0%

    n8n · n8nFeb 4, 2026

  • CVE-2025-69213
    34Monitor

    OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 4, 2026

  • CVE-2025-69215
    34Monitor

    OpenSTAManager has an SQL Injection in the Stampe Module

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 4, 2026

  • CVE-2026-25513
    33Monitor

    FacturaScripts has SQL Injection vulnerability in API ORDER BY Clause

    HighCVSS 8.3Proof of conceptEPSS 0%

    facturascripts · facturascriptsFeb 4, 2026

  • CVE-2026-25514
    34Monitor

    FacturaScripts has SQL Injection vulnerability in Autocomplete Actions

    HighCVSS 8.7Proof of conceptEPSS 0%

    facturascripts · facturascriptsFeb 4, 2026

  • CVE-2026-25512
    38Monitor

    Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler

    CriticalCVSS 9.4Proof of conceptEPSS 3%

    group-office · group officeFeb 4, 2026

  • CVE-2026-25526
    39Monitor

    JinJava Bypass through ForTag leads to Arbitrary Java Execution

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    hubspot · jinjavaFeb 4, 2026

  • CVE-2026-25541
    22Monitor

    Bytes is vulnerable to integer overflow in BytesMut::reserve

    MediumCVSS 5.5Proof of conceptEPSS 0%

    tokio-rs · bytesFeb 4, 2026

  • CVE-2026-25546
    31Monitor

    Godot MCP is vulnerable to Command Injection via unsanitized projectPath

    HighCVSS 7.8Proof of conceptEPSS 1%

    coding-solo · godot mcpFeb 4, 2026

  • CVE-2026-25547
    36Monitor

    Uncontrolled Resource Consumption in @isaacs/brace-expansion

    CriticalCVSS 9.2No exploitEPSS 0%

    isaacs · brace-expansionFeb 4, 2026

  • CVE-2026-22038
    32Monitor

    AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks

    HighCVSS 8.1Proof of conceptEPSS 0%

    agpt · autogpt platformFeb 4, 2026

  • CVE-2026-1953
    32Monitor

    Stored Cross Site Scripting(XSS) in Nukegraphic CMS V3.1.2

    HighCVSS 8.2Proof of conceptEPSS 0%

    nukegraphic cms · nukegraphic cmsFeb 5, 2026

  • CVE-2025-68721
    32Monitor

    Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface.

    HighCVSS 8.1Proof of conceptEPSS 0%

    axigen · axigen mail serverFeb 5, 2026

  • CVE-2025-68722
    35Monitor

    Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin inter

    HighCVSS 8.8Proof of conceptEPSS 0%

    axigen · axigen mail serverFeb 5, 2026

  • CVE-2020-37123
    38Monitor

    Pinger 1.0 - Remote Code Execution

    CriticalCVSS 9.3Proof of conceptEPSS 3%

    wcchandler · pingerFeb 5, 2026

  • CVE-2025-68723
    36Monitor

    Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface.

    CriticalCVSS 9.0Proof of conceptEPSS 0%

    axigen · axigen mail serverFeb 5, 2026

  • CVE-2025-69906
    35Monitor

    Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin.

    HighCVSS 8.8Proof of conceptEPSS 0%

    monstra · monstra cmsFeb 5, 2026

  • CVE-2026-2000
    14Monitor

    DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection

    LowCVSS 2.0No exploitEPSS 19%

    dcnetworks · dcme-320 firmwareFeb 6, 2026

  • CVE-2026-21643
    97Now

    An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may a

    CriticalCVSS 9.8KEVWeaponizedEPSS 93%

    fortinet · forticlientemsFeb 6, 2026

  • CVE-2026-1337
    4Monitor

    Insufficient escaping of unicode characters in query log

    LowCVSS 1.1Proof of conceptEPSS 0%

    neo4j · neo4jFeb 6, 2026

  • CVE-2026-2058
    22Monitor

    mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection

    MediumCVSS 5.5Proof of conceptEPSS 0%

    vishalmathur · cloudclassroom-php-projectFeb 6, 2026

  • CVE-2026-1769
    21Monitor

    Stored XSS on Xerox CentreWare Web 7.0.6

    MediumCVSS 5.4Proof of conceptEPSS 0%

    xerox · centreware webFeb 6, 2026

  • CVE-2026-24135
    28Monitor

    Gogs vulnerable to arbitrary file deletion via path traversal in wiki page update

    HighCVSS 7.2Proof of conceptEPSS 0%

    gogs · gogsFeb 6, 2026

  • CVE-2026-24419
    34Monitor

    OpenSTAManager has an SQL Injection in the Prima Nota module

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 6, 2026

  • CVE-2026-25725
    30Monitor

    Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

    HighCVSS 7.7No exploitEPSS 0%

    anthropic · claude codeFeb 6, 2026

  • CVE-2025-69212
    38Monitor

    OpenSTAManager has an OS Command Injection in P7M File Processing

    CriticalCVSS 9.4Proof of conceptEPSS 1%

    devcode · openstamanagerFeb 6, 2026

  • CVE-2025-69214
    34Monitor

    OpenSTAManager has a SQL Injection in ajax_select.php (componenti endpoint)

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 6, 2026

  • CVE-2025-69216
    34Monitor

    OpenSTAManager has an SQL Injection in Scadenzario Print Template

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 6, 2026

  • CVE-2026-23989
    32Monitor

    REVA Public Link Exploit

    HighCVSS 8.1Proof of conceptEPSS 0%

    heinlein · opencloud revaFeb 6, 2026

  • CVE-2026-24416
    34Monitor

    OpenSTAManager has a Time-Based Blind SQL Injection in Article Pricing Module

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 6, 2026

  • CVE-2026-24417
    34Monitor

    OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 6, 2026

  • CVE-2026-24418
    34Monitor

    OpenSTAManager has an SQL Injection vulnerability in the Scadenzario bulk operations module

    HighCVSS 8.7Proof of conceptEPSS 0%

    devcode · openstamanagerFeb 6, 2026

  • CVE-2026-25643
    37Monitor

    Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape

    CriticalCVSS 9.1Proof of conceptEPSS 4%

    frigate · frigateFeb 6, 2026

  • CVE-2026-25632
    40Plan

    EPyT-Flow has unsafe JSON deserialization (__type__)

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    waterfutures · epyt-flowFeb 6, 2026

  • CVE-2026-25731
    31Monitor

    Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export

    HighCVSS 7.8Proof of conceptEPSS 0%

    calibre-ebook · calibreFeb 6, 2026

  • CVE-2025-68621
    29Monitor

    Trilium Notes has a Timing Attack Vulnerability in /api/login/sync

    HighCVSS 7.4Proof of conceptEPSS 0%

    triliumnotes · triliumFeb 6, 2026

  • CVE-2026-1731
    97Now

    Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

    CriticalCVSS 9.9KEVWeaponizedEPSS 92%

    beyondtrust · privileged remote accessFeb 6, 2026

  • CVE-2026-25544
    39Monitor

    Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    payloadcms · payloadFeb 6, 2026

  • CVE-2026-25732
    31Monitor

    NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write

    HighCVSS 7.5Proof of conceptEPSS 3%

    zauberzeug · niceguiFeb 6, 2026

  • CVE-2026-2080
    32Monitor

    UTT HiPER 810 formUser setSysAdm command injection

    HighCVSS 7.3No exploitEPSS 10%

    utt · 810 firmwareFeb 7, 2026

  • CVE-2026-2113
    23Monitor

    yuan1994 tpadmin WebUploader preview.php deserialization

    MediumCVSS 5.5Proof of conceptEPSS 2%

    tpadmin project · tpadminFeb 7, 2026

  • CVE-2026-25857
    35Monitor

    Tenda G300-F Command Injection via formSetWanDiag

    HighCVSS 8.6Proof of conceptEPSS 3%

    tenda · g300-f firmwareFeb 7, 2026

  • CVE-2025-15100
    35Monitor

    JAY Login & Register <= 2.6.03 - Authenticated (Subscriber+) Privilege Escalation via jay_panel_ajax_update_profile

    HighCVSS 8.8Proof of conceptEPSS 0%

    jayarsiech · jay login & registerFeb 7, 2026

  • CVE-2026-2131
    13Monitor

    XixianLiang HarmonyOS-mcp-server input_text os command injection

    LowCVSS 2.1No exploitEPSS 17%

    xixianliang · harmonyos mcp serverFeb 7, 2026

  • CVE-2026-2143
    31Monitor

    D-Link DIR-823X DDNS Service set_ddns os command injection

    HighCVSS 7.3No exploitEPSS 5%

    dlink · dir-823x firmwareFeb 8, 2026

  • CVE-2026-2184
    30Monitor

    Great Developers Certificate Generation System csv.php os command injection

    MediumCVSS 6.9No exploitEPSS 10%

    greatdevelopers · certificateFeb 8, 2026

  • CVE-2026-2210
    30Monitor

    D-Link DIR-823X set_filtering sub_4211C8 os command injection

    HighCVSS 7.3No exploitEPSS 4%

    dlink · dir-823x firmwareFeb 8, 2026

  • CVE-2026-2222
    7Monitor

    code-projects Online Reviewer System btn_functions.php cross site scripting

    LowCVSS 1.9Proof of conceptEPSS 0%

    fabian · online reviewer systemFeb 9, 2026

  • CVE-2026-25916
    17Monitor

    Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

    MediumCVSS 4.3Proof of conceptEPSS 0%

    roundcube · webmailFeb 9, 2026

  • CVE-2026-1529
    32Monitor

    Org.keycloak.services.resources.organizations: keycloak: unauthorized organization registration via improper invitation token validation

    HighCVSS 8.1Proof of conceptEPSS 0%

    red hat · red hat build of keycloak 26.2Feb 9, 2026

  • CVE-2026-25057
    36Monitor

    Zip Slip in MarkUs config upload allowing RCE

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    markusproject · markusFeb 9, 2026

  • CVE-2026-25231
    31Monitor

    FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control

    HighCVSS 7.5Proof of conceptEPSS 1%

    filerise · fileriseFeb 9, 2026

  • CVE-2026-25498
    34Monitor

    Craft has a potential authenticated Remote Code Execution via malicious attached Behavior

    HighCVSS 8.6No exploitEPSS 1%

    craftcms · craft cmsFeb 9, 2026

  • CVE-2026-25890
    32Monitor

    File Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL

    HighCVSS 8.1Proof of conceptEPSS 0%

    filebrowser · filebrowserFeb 9, 2026

  • CVE-2026-25892
    31Monitor

    Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint

    HighCVSS 7.5Proof of conceptEPSS 2%

    adminer · adminerFeb 9, 2026

  • CVE-2026-25961
    30Monitor

    SumatraPDF Update MITM -> Arbitrary Code Execution

    HighCVSS 7.5Proof of conceptEPSS 0%

    sumatrapdfreader · sumatrapdfFeb 9, 2026

  • CVE-2026-25895
    40Plan

    FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

    CriticalCVSS 9.5Proof of conceptEPSS 6%

    frangoteam · fuxaFeb 9, 2026

  • CVE-2026-25938
    38Monitor

    FUXA Unauthenticated Remote Code Execution in Node-RED Integration

    CriticalCVSS 9.5Proof of conceptEPSS 1%

    frangoteam · fuxaFeb 9, 2026

  • CVE-2026-25939
    37Monitor

    FUXA Unauthenticated Remote Arbitrary Scheduler Write

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    frangoteam · fuxaFeb 9, 2026

  • CVE-2025-11142
    35Monitor

    The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution.

    HighCVSS 8.8Proof of conceptEPSS 0%

    axis · axis osFeb 10, 2026

  • CVE-2025-62676
    28Monitor

    An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0

    HighCVSS 7.1Proof of conceptEPSS 0%

    fortinet · forticlientFeb 10, 2026

  • CVE-2025-68686
    62This week

    An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,

    MediumCVSS 5.9KEVWeaponizedEPSS 29%

    fortinet · fortiosFeb 10, 2026

  • CVE-2026-1603
    87Now

    An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored

    HighCVSS 7.5KEVWeaponizedEPSS 88%

    ivanti · endpoint managerFeb 10, 2026

  • CVE-2026-0651
    27Monitor

    Path Traversal on TP-Link Tapo D235, C211, C520WS and C260 via Local https

    MediumCVSS 6.9Proof of conceptEPSS 0%

    tp-link · tapo c260 firmwareFeb 10, 2026

  • CVE-2026-0652
    41Plan

    Remote Code Execution on TP-Link Tapo C260 by Guest User

    HighCVSS 8.7No exploitEPSS 23%

    tp-link · tapo c260 firmwareFeb 10, 2026

  • CVE-2026-20841
    34Monitor

    Windows Notepad App Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 9%

    microsoft · windows notepadFeb 10, 2026

  • CVE-2026-21244
    29Monitor

    Windows Hyper-V Remote Code Execution Vulnerability

    HighCVSS 7.3Proof of conceptEPSS 1%

    microsoft · windows 10 1607Feb 10, 2026