By publication date

Exploited and new serious CVEs: February 2026

319 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 4 of 4

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-26265Proof of concept	Discourse has IDOR vulnerability in the directory items endpointdiscourse · discourse · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	1.2%	Feb 26, 2026
24Monitor	CVE-2026-22722Proof of concept	VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crashvmware · workstation · CWE-476 Local privilege escalation Memory safety	Medium6.1	—	0.1%	Feb 26, 2026
27Monitor	CVE-2026-28208No exploit	Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unixjunrar project · junrar · CWE-22 pre-auth RCE Path traversal	Medium5.9	—	14.7%	Feb 26, 2026
35Monitor	CVE-2026-28363Proof of concept	In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compresopenclaw · openclaw · CWE-184	High8.8	—	0.5%	Feb 27, 2026
31Monitor	CVE-2026-28364Proof of concept	In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution ocaml · ocaml · CWE-126 RCE Deserialization	High7.8	—	0.2%	Feb 27, 2026
8Monitor	CVE-2026-3286No exploit	itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgeryitwanger · paicoding · CWE-918 SSRF	Low2.1	—	0.3%	Feb 27, 2026
31Monitor	CVE-2026-28372Proof of concept	telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added gnu · inetutils · CWE-829 Local privilege escalation	High7.8	—	0.4%	Feb 27, 2026
20Monitor	CVE-2026-1434Proof of concept	Reflected XSS in Omega-PSIRpw · omega-psir · CWE-79 Pre-auth XSS	Medium5.1	—	0.1%	Feb 27, 2026
35Monitor	CVE-2026-2749Proof of concept	Path traversal in Centreon Open Ticketscentreon · open tickets · CWE-22 Path traversal	High8.8	—	0.6%	Feb 27, 2026
34Monitor	CVE-2026-3304Proof of concept	Multer vulnerable to Denial of Service via incomplete cleanupexpressjs · multer · CWE-459 Pre-auth	High8.7	—	0.7%	Feb 27, 2026
22Monitor	CVE-2026-28288Proof of concept	Dify has a user enumeration issuedify · dify · CWE-204 Pre-auth	Medium5.5	—	0.6%	Feb 27, 2026
29Monitor	CVE-2026-28409Proof of concept	WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injectionwegia · wegia · CWE-78 RCE Auth bypass Command injection	High7.2	—	3.6%	Feb 27, 2026
40Plan	CVE-2026-28411Proof of concept	WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`wegia · wegia · CWE-288 Pre-auth Auth bypass	Critical9.8	—	2.6%	Feb 27, 2026
31Monitor	CVE-2026-28414Proof of concept	Gradio has Absolute Path Traversal on Windows with Python 3.13+gradio project · gradio · CWE-36 Pre-auth Path traversal	High7.5	—	3.0%	Feb 27, 2026
36Monitor	CVE-2026-28416No exploit	Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processinggradio project · gradio · CWE-918 Pre-auth SSRF	High8.6	—	7.2%	Feb 27, 2026
60This week	CVE-2026-28515Weaponized	openDCIM <= 23.04 Missing Authorization in install.phpopendcim · opendcim · CWE-862 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.3	—	1.2%	Feb 27, 2026
60This week	CVE-2026-28516Weaponized	openDCIM <= 23.04 SQL Injection in Config::UpdateParameteropendcim · opendcim · CWE-89 pre-auth RCE SQL injection	Critical9.3	—	1.0%	Feb 27, 2026
60This week	CVE-2026-28517Weaponized	openDCIM <= 23.04 OS Command Injection via dot Configuration Parameteropendcim · opendcim · CWE-78 pre-auth RCE Command injection	Critical9.3	—	6.2%	Feb 27, 2026
30Monitor	CVE-2025-13673Proof of concept	Tutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_codethemeum · tutor lms – elearning and online course solution · CWE-89 Pre-auth SQL injection	High7.5	—	0.5%	Feb 28, 2026

CVE-2026-26265
30Monitor
Discourse has IDOR vulnerability in the directory items endpoint
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
discourse · discourseFeb 26, 2026
CVE-2026-22722
24Monitor
VMware Workstation for Windows null pointer dereference may allow an authenticated user to trigger a crash
MediumCVSS 6.1Proof of conceptEPSS 0%
- Local privilege escalation
- Memory safety
vmware · workstationFeb 26, 2026
CVE-2026-28208
27Monitor
Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix
MediumCVSS 5.9No exploitEPSS 14%
- pre-auth RCE
- Path traversal
junrar project · junrarFeb 26, 2026
CVE-2026-28363
35Monitor
In OpenClaw before 2026.2.23, tools.exec.safeBins validation for sort could be bypassed via GNU long-option abbreviations (such as --compres
HighCVSS 8.8Proof of conceptEPSS 0%
openclaw · openclawFeb 27, 2026
CVE-2026-28364
31Monitor
In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution
HighCVSS 7.8Proof of conceptEPSS 0%
- RCE
- Deserialization
ocaml · ocamlFeb 27, 2026
CVE-2026-3286
8Monitor
itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery
LowCVSS 2.1No exploitEPSS 0%
- SSRF
itwanger · paicodingFeb 27, 2026
CVE-2026-28372
31Monitor
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added
HighCVSS 7.8Proof of conceptEPSS 0%
- Local privilege escalation
gnu · inetutilsFeb 27, 2026
CVE-2026-1434
20Monitor
Reflected XSS in Omega-PSIR
MediumCVSS 5.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
pw · omega-psirFeb 27, 2026
CVE-2026-2749
35Monitor
Path traversal in Centreon Open Tickets
HighCVSS 8.8Proof of conceptEPSS 0%
- Path traversal
centreon · open ticketsFeb 27, 2026
CVE-2026-3304
34Monitor
Multer vulnerable to Denial of Service via incomplete cleanup
HighCVSS 8.7Proof of conceptEPSS 0%
- Pre-auth
expressjs · multerFeb 27, 2026
CVE-2026-28288
22Monitor
Dify has a user enumeration issue
MediumCVSS 5.5Proof of conceptEPSS 0%
- Pre-auth
dify · difyFeb 27, 2026
CVE-2026-28409
29Monitor
WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection
HighCVSS 7.2Proof of conceptEPSS 3%
wegia · wegiaFeb 27, 2026
CVE-2026-28411
40Plan
WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
- Auth bypass
wegia · wegiaFeb 27, 2026
CVE-2026-28414
31Monitor
Gradio has Absolute Path Traversal on Windows with Python 3.13+
HighCVSS 7.5Proof of conceptEPSS 3%
- Pre-auth
- Path traversal
gradio project · gradioFeb 27, 2026
CVE-2026-28416
36Monitor
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
HighCVSS 8.6No exploitEPSS 7%
- Pre-auth
- SSRF
gradio project · gradioFeb 27, 2026
CVE-2026-28515
60This week
openDCIM <= 23.04 Missing Authorization in install.php
CriticalCVSS 9.3WeaponizedEPSS 1%
opendcim · opendcimFeb 27, 2026
CVE-2026-28516
60This week
openDCIM <= 23.04 SQL Injection in Config::UpdateParameter
CriticalCVSS 9.3WeaponizedEPSS 1%
- pre-auth RCE
- SQL injection
opendcim · opendcimFeb 27, 2026
CVE-2026-28517
60This week
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
CriticalCVSS 9.3WeaponizedEPSS 6%
- pre-auth RCE
- Command injection
opendcim · opendcimFeb 27, 2026
CVE-2025-13673
30Monitor
Tutor LMS <= 3.9.6 - Unauthenticated SQL Injection via coupon_code
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
themeum · tutor lms – elearning and online course solutionFeb 28, 2026