Skip to content
Noroxi
By publication date

Exploited and new serious CVEs: November 2026

3,461 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 20 of 35

  • CVE-2026-125402
    28Monitor

    Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in src/ec_sslwrap.c that trusts the

    HighCVSS 7.2No exploitEPSS 0%

    2 days ago

  • CVE-2026-125403
    28Monitor

    Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_sts

    HighCVSS 7.2No exploitEPSS 0%

    ettercap · ettercap2 days ago

  • CVE-2026-125404
    30Monitor

    Ettercap through 0.8.4.1 Stack Buffer Overflow via WPA CCMP Decryption

    HighCVSS 7.7No exploitEPSS 0%

    ettercap · ettercap2 days ago

  • CVE-2026-125405
    28Monitor

    Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/ec_http.c due to unvalidated NT

    HighCVSS 7.2No exploitEPSS 0%

    2 days ago

  • CVE-2026-125406
    34Monitor

    Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ec_telnet.c that decreme

    HighCVSS 8.7No exploitEPSS 0%

    2 days ago

  • CVE-2026-107240
    30Monitor

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is no

    HighCVSS 7.6No exploitEPSS 0%

    versa · vos2 days ago

  • CVE-2026-107241
    30Monitor

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is no

    HighCVSS 7.6No exploitEPSS 0%

    versa · vos2 days ago

  • CVE-2026-107243
    30Monitor

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is no

    HighCVSS 7.6No exploitEPSS 0%

    versa · vos2 days ago

  • CVE-2026-107244
    30Monitor

    The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is no

    HighCVSS 7.6No exploitEPSS 0%

    versa · vos2 days ago

  • CVE-2026-107246
    36Monitor

    The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal.

    CriticalCVSS 9.2No exploitEPSS 0%

    webpros · plesk extension "site import"2 days ago

  • CVE-2026-109793
    30Monitor

    Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver application server abap (internet communication manager) and sap web dispatcher2 days ago

  • CVE-2026-109794
    30Monitor

    Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver application server abap, abap platform and sap web dispatcher2 days ago

  • CVE-2026-109795
    39Monitor

    Missing authorization check in S4CRM

    CriticalCVSS 9.9No exploitEPSS 0%

    sap_se · s4crm2 days ago

  • CVE-2026-109797
    28Monitor

    Cross-tenant sandbox takeover in SAP/astonish

    HighCVSS 7.1No exploitEPSS 0%

    sap_se · sap/astonish2 days ago

  • CVE-2026-109798
    36Monitor

    XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)

    CriticalCVSS 9.1No exploitEPSS 0%

    sap_se · sap businessobjects business intelligence platform (web intelligence)2 days ago

  • CVE-2026-109799
    30Monitor

    Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip))

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap cloud sdk for python2 days ago

  • CVE-2026-109800
    30Monitor

    Memory Corruption vulnerability in SAP Web Dispatcher

    HighCVSS 7.7No exploitEPSS 0%

    sap_se · sap web dispatcher2 days ago

  • CVE-2026-109803
    39Monitor

    Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)

    CriticalCVSS 9.9No exploitEPSS 0%

    sap_se · sap netweaver knowledge management (xml forms)2 days ago

  • CVE-2026-109804
    30Monitor

    Information Disclosure in SAP NetWeaver (SAP Message Server)

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver (sap message server)2 days ago

  • CVE-2026-109806
    30Monitor

    Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver (internet graphics service)2 days ago

  • CVE-2026-109807
    30Monitor

    Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service)

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver (internet graphics service)2 days ago

  • CVE-2026-120008
    32Monitor

    Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service)

    HighCVSS 8.2No exploitEPSS 0%

    sap_se · sap netweaver (internet graphics service)2 days ago

  • CVE-2026-120009
    28Monitor

    Code Injection vulnerability in SAP ABAP Developer Tools (AMDP Data Preview)

    HighCVSS 7.2No exploitEPSS 0%

    sap_se · sap abap developer tools (amdp data preview)2 days ago

  • CVE-2026-120010
    30Monitor

    Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server)

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver application server (sap message server)2 days ago

  • CVE-2026-120014
    30Monitor

    Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager

    HighCVSS 7.6No exploitEPSS 0%

    sap_se · sap web dispatcher and internet communication manager2 days ago

  • CVE-2026-120015
    30Monitor

    Insufficient Input Validation in SAP Host Agent

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap host agent2 days ago

  • CVE-2026-120017
    40Plan

    Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)

    CriticalCVSS 10.0No exploitEPSS 0%

    sap_se · sap netweaver as abap and abap platform (saml2 service provider)2 days ago

  • CVE-2026-124598
    30Monitor

    Hardcoded API Key Discovered in GV-Face Android Application v2.2.1

    HighCVSS 7.5No exploitEPSS 0%

    geovision inc. · gv-face2 days ago

  • CVE-2026-124600
    40Plan

    Unencrypted HTTP Traffic Exposing Sensitive User Credentials in GV-Face Android Application v2.2.1

    CriticalCVSS 10.0No exploitEPSS 0%

    geovision inc. · gv-face2 days ago

  • CVE-2026-125086
    37Monitor

    D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials

    CriticalCVSS 9.3No exploitEPSS 0%

    d-link · m602 days ago

  • CVE-2026-76964
    40Plan

    Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager)

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    sap_se · sap netweaver as abap (internet communication manager)2 days ago

  • CVE-2026-76965
    39Monitor

    OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform

    CriticalCVSS 9.9No exploitEPSS 0%

    sap_se · sap netweaver and abap platform2 days ago

  • CVE-2026-76966
    35Monitor

    Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform

    HighCVSS 8.9No exploitEPSS 0%

    sap_se · sap netweaver and abap platform2 days ago

  • CVE-2026-76970
    30Monitor

    Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver and abap platform2 days ago

  • CVE-2026-76973
    30Monitor

    Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform (SAP Message Server)

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver and abap platform (sap message server)2 days ago

  • CVE-2026-89103
    40Plan

    Broken Access Control in SAP Gateway

    CriticalCVSS 10.0No exploitEPSS 0%

    sap_se · sap gateway2 days ago

  • CVE-2026-89114
    30Monitor

    Missing Authentication check in SAP NetWeaver AS Java EDM Application

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap netweaver as java edm application2 days ago

  • CVE-2026-89119
    38Monitor

    Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager

    CriticalCVSS 9.6No exploitEPSS 0%

    sap_se · sap web dispatcher and internet communication manager2 days ago

  • CVE-2026-89126
    40Plan

    Memory Corruption vulnerability in SAP Web Dispatcher

    CriticalCVSS 10.0No exploitEPSS 0%

    sap_se · sap web dispatcher2 days ago

  • CVE-2026-88707
    28Monitor

    An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters t

    HighCVSS 7.1No exploitEPSS 0%

    asus · router firmware2 days ago

  • CVE-2026-88709
    28Monitor

    Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to ins

    HighCVSS 7.0No exploitEPSS 0%

    asus · router firmware2 days ago

  • CVE-2026-88710
    34Monitor

    Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to t

    HighCVSS 8.7No exploitEPSS 1%

    asus · router firmware2 days ago

  • CVE-2026-125612
    35Monitor

    DIAEnergie - SQL Injection Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    deltaww · diaenergie2 days ago

  • CVE-2026-112125
    29Monitor

    Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor

    HighCVSS 7.3No exploitEPSS 0%

    hitachi · ha monitor2 days ago

  • CVE-2026-115640
    29Monitor

    LimeSurvey Community Edition 7.7.0 - Stored XSS in Central Participants blocklist control

    HighCVSS 7.4No exploitEPSS 0%

    limesurvey · limesurvey community edition2 days ago

  • CVE-2026-115646
    39Monitor

    Partial String Comparison Vulnerability in HiRDB

    CriticalCVSS 9.8No exploitEPSS 0%

    hitachi · hirdb server version 102 days ago

  • CVE-2026-86578
    29Monitor

    Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows

    HighCVSS 7.3No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for windows2 days ago

  • CVE-2026-86579
    32Monitor

    Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows

    HighCVSS 8.2No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for windows2 days ago

  • CVE-2026-91754
    32Monitor

    Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware

    HighCVSS 8.1No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for vmware2 days ago

  • CVE-2026-91755
    32Monitor

    Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware

    HighCVSS 8.1No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for vmware2 days ago

  • CVE-2026-91756
    32Monitor

    OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware

    HighCVSS 8.1No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for vmware2 days ago

  • CVE-2026-91757
    28Monitor

    OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware

    HighCVSS 7.1No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for vmware2 days ago

  • CVE-2026-91758
    31Monitor

    Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux

    HighCVSS 7.8No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for linux2 days ago

  • CVE-2026-91759
    31Monitor

    Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux

    HighCVSS 7.8No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for linux2 days ago

  • CVE-2026-91760
    28Monitor

    Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux

    HighCVSS 7.0No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for linux2 days ago

  • CVE-2026-91761
    32Monitor

    Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux

    HighCVSS 8.2No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for linux2 days ago

  • CVE-2026-91762
    31Monitor

    Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux

    HighCVSS 7.9No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for linux2 days ago

  • CVE-2026-91763
    32Monitor

    Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux

    HighCVSS 8.2No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for linux2 days ago

  • CVE-2026-91764
    32Monitor

    Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux

    HighCVSS 8.1No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for linux2 days ago

  • CVE-2026-92863
    28Monitor

    Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market)

    HighCVSS 7.0No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for aix2 days ago

  • CVE-2026-92864
    29Monitor

    Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the J

    HighCVSS 7.3No exploitEPSS 0%

    hitachi · hitachi dynamic link manager for aix2 days ago

  • CVE-2026-12389
    33Monitor

    A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.

    HighCVSS 8.4No exploitEPSS 0%

    axis communications ab · axis camera station pro2 days ago

  • CVE-2026-12963
    29Monitor

    A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.

    HighCVSS 7.4No exploitEPSS 0%

    axis communications ab · axis camera station pro2 days ago

  • CVE-2026-12964
    32Monitor

    A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.

    HighCVSS 8.0No exploitEPSS 0%

    axis communications ab · axis camera station pro2 days ago

  • CVE-2026-13312
    39Monitor

    A vulnerability that could allow an attacker to compromise a system.

    CriticalCVSS 9.9No exploitEPSS 0%

    axis communications ab · axis camera station pro2 days ago

  • CVE-2026-4762
    35Monitor

    A vulnerability to perform a privilege escalation attack on the server as a non-admin user.

    HighCVSS 8.8No exploitEPSS 0%

    axis communications ab · axis camera station pro2 days ago

  • CVE-2026-63288
    33Monitor

    A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.

    HighCVSS 8.3No exploitEPSS 0%

    axis communications ab · axis a1210 - secure entry2 days ago

  • CVE-2026-8372
    35Monitor

    A vulnerability that could allow an attacker to gain unauthorized access.

    HighCVSS 8.8No exploitEPSS 0%

    axis communications ab · axis camera station pro2 days ago

  • CVE-2026-100386
    30Monitor

    Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG Parser

    HighCVSS 7.5No exploitEPSS 0%

    themefic · ultra addons for contact form 72 days ago

  • CVE-2026-120513
    32Monitor

    Everest Forms <= 3.6.2 - Unauthenticated Arbitrary File Deletion via 'everest_forms_{form_id}_old_{field_id}' Parameter

    HighCVSS 8.2No exploitEPSS 0%

    wpeverest · everest forms – contact form, payment form, quiz, survey & custom form builder with ai2 days ago

  • CVE-2026-76877
    32Monitor

    WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' Parameter

    HighCVSS 8.1No exploitEPSS 0%

    wpml · wpml multilingual cms2 days ago

  • CVE-2026-84938
    28Monitor

    Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hook

    HighCVSS 7.2No exploitEPSS 0%

    themefusion · avada (fusion) builder2 days ago

  • CVE-2026-93427
    28Monitor

    ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom Field

    HighCVSS 7.2No exploitEPSS 0%

    armember · armember premium – membership plugin, content restriction, member levels, user profile & user signup2 days ago

  • CVE-2026-120012
    30Monitor

    Information Disclosure vulnerability in SAP Cloud SDK for AI(JavaScript)

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap cloud sdk for ai(javascript)1 day ago

  • CVE-2026-120013
    30Monitor

    Path Traversal in Agent Memory Module of SAP Cloud SDK for Python

    HighCVSS 7.5No exploitEPSS 0%

    sap_se · sap cloud sdk for python1 day ago

  • CVE-2026-60035
    34Monitor

    Command injection in network auth

    HighCVSS 8.6No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-60036
    34Monitor

    Command injection in patch activate

    HighCVSS 8.6No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-60037
    34Monitor

    OpenSSL command injection in device importer

    HighCVSS 8.6No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-60038
    34Monitor

    OpenSSL command injection in ImportPKCS12

    HighCVSS 8.6No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-60039
    34Monitor

    Command injection in backup restore

    HighCVSS 8.6No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-60040
    34Monitor

    DoS in backup creation

    HighCVSS 8.7No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-60044
    34Monitor

    Static backup password

    HighCVSS 8.7No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-60046
    34Monitor

    DoS via password reset

    HighCVSS 8.7No exploitEPSS 0%

    mb connect line · mbconnect241 day ago

  • CVE-2026-104619
    31Monitor

    PackageKit ZYpp rollback vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    packagekit · packagekit1 day ago

  • CVE-2026-119446
    37Monitor

    Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API token

    CriticalCVSS 9.4No exploitEPSS 0%

    nerves-hub · nerves_hub_web1 day ago

  • CVE-2026-120295
    28Monitor

    Incorrect authorization in the devices page bulk move allows view-role members to move devices into another organization and receive its firmware

    HighCVSS 7.1No exploitEPSS 0%

    nerves-hub · nerves_hub_web1 day ago

  • CVE-2026-120730
    34Monitor

    Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmware

    HighCVSS 8.6No exploitEPSS 0%

    nerves-hub · nerves_hub_web1 day ago

  • CVE-2026-120999
    29Monitor

    Improper authentication lets Google sign-in and confirmation links sign users in to accounts registered with their email address by someone else

    HighCVSS 7.4No exploitEPSS 0%

    nerves-hub · nerves_hub_web1 day ago

  • CVE-2026-125704
    30Monitor

    Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization

    HighCVSS 7.5No exploitEPSS 0%

    red hat · red hat enterprise linux 101 day ago

  • CVE-2026-95646
    33Monitor

    Authenticated Command Injection

    HighCVSS 8.0No exploitEPSS 3%

    zohocorp · ddi central1 day ago

  • CVE-2026-95651
    30Monitor

    Authentication Bypass

    HighCVSS 7.5No exploitEPSS 1%

    zohocorp · ddi central1 day ago

  • CVE-2026-109097
    34Monitor

    A vulnerability has been identified in ROS# (All versions < V2.3.1).

    HighCVSS 8.6No exploitEPSS 0%

    siemens · ros#1 day ago

  • CVE-2026-109830
    28Monitor

    A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01).

    HighCVSS 7.0No exploitEPSS 0%

    siemens · meta-iot20501 day ago

  • CVE-2026-112136
    36Monitor

    A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >=

    CriticalCVSS 9.2No exploitEPSS 0%

    siemens · mendix studio pro 111 day ago

  • CVE-2026-123717
    35Monitor

    [Eclipse CSI - otterdog] OS Command Injection and Arbitrary Code Execution

    HighCVSS 8.8No exploitEPSS 1%

    eclipse csi · otterdog1 day ago

  • CVE-2026-125712
    30Monitor

    Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing

    HighCVSS 7.5No exploitEPSS 0%

    red hat · red hat enterprise linux 101 day ago

  • CVE-2026-125742
    34Monitor

    7-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction

    HighCVSS 8.5No exploitEPSS 0%

    7-zip · 7-zip1 day ago

  • CVE-2026-12266
    30Monitor

    Authenticated Broken Access Control

    HighCVSS 7.6No exploitEPSS 0%

    zohocorp · ddi central1 day ago

  • CVE-2026-12572
    29Monitor

    Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to c

    HighCVSS 7.2No exploitEPSS 3%

    zohocorp · ddi central1 day ago

  • CVE-2026-12573
    36Monitor

    Authenticated Command Injection

    HighCVSS 8.8No exploitEPSS 3%

    zohocorp · ddi central1 day ago