// Vulnerabilities & CVEs
Intel Feed

Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE

aiohttp 3.9.1 - directory traversal PoC

FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution

Docker Desktop 4.44.3 - Unauthenticated API Exposure

Piranha CMS 12.0 - Stored XSS in Text Block

RPi-Jukebox-RFID 2.8.0 - Stored Cross-Site Scripting (XSS)

D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)

RPi-Jukebox-RFID 2.8.0 - Remote Command Execution

Siklu EtherHaul Series EH-8010 - Arbitrary File Upload

Siklu EtherHaul Series EH-8010 - Remote Command Execution

WordPress Quiz Maker 6.7.0.56 - SQL Injection

Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie

FreeBSD rtsold 15.x - Remote Code Execution via DNSSL

Summar Employee Portal 3.98.0 - Authenticated SQL Injection

esm-dev 136 - Path Traversal

Pluck 4.7.7-dev2 - PHP Code Execution

phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)

phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF)

MaNGOSWebV4 4.0.6 - Reflected XSS

Apple Patches Actively Exploited Zero-Day Vulnerability Across Multiple Devices LinkedIn

CISA adds Microsoft Windows vulnerability CVE-2026-20805 to KEV catalog | brief | SC Media SC Media

Critical Vulnerability in next-mdx-remote Enables Arbitrary Code Execution in React SSR cyberpress.org

Microsoft patches zero-day, kills legacy Windows drivers SecurityBrief Australia

List of 10 Best Most Exploited Vulnerabilities 2016 to 2026 CybersecurityNews