| CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance → |
Known exploitedCISA KEV |
8.6High |
| CVE-2026-0257PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Palo Alto Networks Cloud NGFW, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access Reported fix guidance → |
Known exploitedCISA KEV |
7.8High |
| CVE-2025-8088Path traversal vulnerability in WinRAR win.rar GmbH WinRAR Versions & vendor guidance → |
Known exploitedCISA KEV |
8.4High |
| CVE-2025-68145mcp-server-git has missing path validation when using --repository flag modelcontextprotocol servers Versions & vendor guidance → |
Not in downloaded KEV |
6.4Medium |
| CVE-2025-68144mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files modelcontextprotocol servers Versions & vendor guidance → |
Not in downloaded KEV |
6.3Medium |
| CVE-2025-68143mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations modelcontextprotocol servers Versions & vendor guidance → |
Not in downloaded KEV |
6.5Medium |
| CVE-2025-66414DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost modelcontextprotocol typescript-sdk Versions & vendor guidance → |
Not in downloaded KEV |
7.6High |
| CVE-2025-66032Claude Code Command Validation Bypass Allows Arbitrary Code Execution anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV |
8.7High |
| CVE-2025-66030node-forge ASN.1 OID Integer Truncation digitalbazaar forge Versions & vendor guidance → |
Not in downloaded KEV |
6.3Medium |
| CVE-2025-65099Claude Code vulnerable to command execution prior to startup trust dialog anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV |
7.7High |
| CVE-2025-64755@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV |
8.7High |
| CVE-2025-64446Fortinet FortiWeb Path Traversal Vulnerability Fortinet FortiWeb Reported fix guidance → |
Known exploitedCISA KEV |
9.4Critical |
| CVE-2025-6264Velociraptor priviledge escalation via UpdateConfig artifact Rapid7 Velociraptor Reported workaround → |
Not in downloaded KEV |
5.5Medium |
| CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager, Fortinet FortiPAM Reported fix guidance → |
Known exploitedCISA KEV |
5.4Medium |
| CVE-2025-60710Host Process for Windows Tasks Elevation of Privilege Vulnerability Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV |
7.8High |
| CVE-2025-59829Claude Code: Permission deny bypass is possible through symlink anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV |
2.3Low |
| CVE-2025-59828Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV |
7.7High |
| CVE-2025-59536Claude Code's startup trust dialog could lead to Command Execution attack anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV |
8.7High |
| CVE-2025-59041Claude Code vulnerable to arbitrary code execution caused by maliciously configured git email anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV |
8.7High |
| CVE-2025-55182Meta React Server Components Remote Code Execution Vulnerability Meta react-server-dom-webpack, Meta react-server-dom-turbopack, Meta react-server-dom-parcel Versions & vendor guidance → |
Known exploitedCISA KEV |
10Critical |
| CVE-2025-53771Microsoft SharePoint Server Spoofing Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Not in downloaded KEV |
6.5Medium |
| CVE-2025-53770Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV |
9.8Critical |
| CVE-2025-53110Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix modelcontextprotocol servers Versions & vendor guidance → |
Not in downloaded KEV |
7.3High |
| CVE-2025-53109Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handling modelcontextprotocol servers Versions & vendor guidance → |
Not in downloaded KEV |
7.3High |
| CVE-2025-48703CWP Control Web Panel OS Command Injection Vulnerability centos-webpanel CentOS Web Panel Versions & vendor guidance → |
Known exploitedCISA KEV |
9Critical |