IOS XE

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2026-20127-1772060804671.png

A critical authentication bypass vulnerability in the web management interface of Cisco IOS XE Software allows an unauthenticated, remote attacker to bypass authentication controls and gain administrative access to affected devices.

Cisco Security Advisory

CISA KEV Catalog

Cisco IOS XE Web UI Authentication Bypass

Struts

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2025-49113-1772060883163.png

A critical vulnerability in Apache Struts 2.5.0 through 2.5.30 allows remote attackers to execute arbitrary code via crafted OGNL expressions in HTTP request parameters when Dynamic Method Invocation is enabled.

National Vulnerability Database

Apache Struts Security Advisory

Remote Code Execution in Apache Struts Framework via OGNL Expression Injection

Cloud Platform

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2026-25108-1772060858399.png

The Acme Cloud Platform versions 4.2.0 through 4.2.8 contains an unauthenticated remote code execution vulnerability in the API gateway component. A remote attacker can execute arbitrary code by sending specially crafted HTTP requests to the management interface.

Acme Security Advisory

Unauthenticated Remote Code Execution in Acme Cloud Platform

Adaptive Security Appliance (ASA) Software

Firepower Threat Defense (FTD) Software

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2024-20353-1772063289752.jpeg

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

Cisco ASA/FTD Web Services Denial of Service Vulnerability

PAN-OS

GlobalProtect

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2024-3400-1772063423059.jpeg

A command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interfaces allows unauthenticated remote attackers to execute arbitrary system commands with root privileges via specially crafted HTTP requests.

Palo Alto Networks Security Advisory

Palo Alto PAN-OS GlobalProtect Command Injection Vulnerability

TeamCity

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2024-27198-1772063474098.jpeg

A critical authentication bypass vulnerability in JetBrains TeamCity allows unauthenticated attackers to execute arbitrary code on the TeamCity server through specially crafted HTTP requests. This vulnerability affects TeamCity versions prior to 2023.11.4.

JetBrains Security Advisory

JetBrains TeamCity Authentication Bypass Leading to Remote Code Execution

ScreenConnect

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2024-1709-1772063448970.jpeg

ConnectWise ScreenConnect (formerly ScreenConnect) versions prior to 23.9.8 contain an authentication bypass vulnerability that allows an unauthenticated attacker to execute arbitrary commands on the server and gain unauthorized access to the application.

ConnectWise Advisory

ConnectWise ScreenConnect Authentication Bypass Vulnerability

Connect Secure

Policy Secure

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2024-21887-1772063369675.jpeg

A command injection vulnerability in Ivanti Connect Secure and Policy Secure allows an unauthenticated attacker to execute arbitrary commands as root via specially crafted HTTP requests. This vulnerability has been actively exploited in the wild by Chinese state-sponsored threat actors.

Ivanti Security Advisory

Ivanti Connect Secure Command Injection Zero-Day Vulnerability

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2023-46805-1772063264561.png

A critical authentication bypass vulnerability in Ivanti Connect Secure and Policy Secure Gateways allows unauthenticated remote attackers to bypass authentication controls and gain unauthorized administrative access to affected systems.

Ivanti Connect Secure Authentication Bypass Vulnerability

NetScaler ADC

NetScaler Gateway

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2023-4966-1772063557186.jpeg

A security vulnerability in Citrix NetScaler ADC and Gateway allows an unauthenticated remote attacker to cause a memory leak that can lead to the disclosure of sensitive information including session tokens and credentials.

Citrix Security Bulletin

Citrix Bleed - NetScaler ADC/Gateway Memory Leak Vulnerability

Confluence Data Center and Server

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2023-22515-1772063511031.png

A critical authentication bypass vulnerability in Confluence Data Center and Server allows an unauthenticated attacker to create an admin user and gain full system access. This vulnerability is being actively exploited in the wild.

Atlassian Security Advisory

Atlassian Confluence Critical Authentication Bypass and Privilege Escalation

https://hlfitrjkdcidoupducby.supabase.co/storage/v1/object/public/cve-images/cves/cve-2023-20198-1772063325279.png

A critical vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication and gain privileged access to the affected system. This vulnerability exists due to improper authentication controls in the web UI feature.

CVE Archive