rce

• GHSA-q6xx-5vr8-p898 - Nezha WebSocket stream ownership bypass 2026-06-27
• CVE-2025-71336 - Flowise Custom MCP auth bypass RCE 2026-06-26
• CVE-2026-45051 - OpenAM WebAuthn deserialization RCE 2026-06-24
• CVE-2026-6933 - Premmerce Dev Tools plugin creation RCE 2026-06-16
• CVE-2026-53633 - Vitest Browser Mode CDP API RCE 2026-06-15
• CVE-2026-48062 - CodeIgniter4 ext_in upload validation bypass 2026-06-13
• CVE-2026-54090 - File Browser shell metacharacter command injection 2026-06-13
• GHSA-gv7w-rqvm-qjhr - esbuild Deno binary integrity RCE 2026-06-13
• CVE-2025-11953 - React Native CLI Metro command injection 2026-06-11
• CVE-2025-12735 - expr-eval context function RCE 2026-06-11
• CVE-2025-3248 - Langflow validate/code unauthenticated RCE 2026-06-11
• CVE-2025-49596 - MCP Inspector proxy unauthenticated RCE 2026-06-11
• CVE-2025-53967 - Framelink Figma MCP curl command injection 2026-06-11
• CVE-2025-55182 - React Server Components RCE 2026-06-11
• CVE-2025-6514 - mcp-remote OAuth command injection 2026-06-11
• CVE-2026-5058 - aws-mcp-server command injection RCE 2026-06-09
• CVE-2026-27494 - n8n Python Code node sandbox escape 2026-06-08
• CVE-2026-24425 - Twig SourcePolicyInterface callback bypass 2026-06-07
• CVE-2026-27606 - Rollup path traversal arbitrary write 2026-06-07
• CVE-2026-27893 - vLLM trust_remote_code bypass 2026-06-07
• CVE-2026-33696 - n8n GSuiteAdmin prototype pollution RCE 2026-06-07
• CVE-2026-44181 - Jupyter Enterprise Gateway Jinja2 SSTI RCE 2026-06-07
• CVE-2026-44632 - Yamcs Janino expression RCE 2026-06-07
• CVE-2026-45505 - Apache ActiveMQ Jolokia discovery wrapper bypass 2026-06-07
• CVE-2026-46640 - Twig macro-reference compilation RCE 2026-06-07
• CVE-2026-47391 - PraisonAI A2A eval tool RCE 2026-06-07
• CVE-2026-47668 - DbGate JSON script runner unauthenticated RCE 2026-06-07
• CVE-2026-47669 - DbGate archive unzip arbitrary write RCE 2026-06-07
• CVE-2026-47670 - DbGate loadReader dynamic import RCE 2026-06-07
• CVE-2026-49143 - browserstack-runner log handler RCE 2026-06-07
• CVE-2026-25049 - n8n expression escape RCE 2026-06-06
• CVE-2026-30861 - WeKnora MCP stdio command injection 2026-06-06
• CVE-2026-42211 - React Router Framework Mode deserialization RCE 2026-06-06
• CVE-2026-47428 - Vitest browser otelCarrier token RCE 2026-06-06
• CVE-2026-47429 - Vitest UI API file read and RCE 2026-06-06
• CVE-2026-48017 - DbGate loadReader functionName RCE 2026-06-06
• CVE-2026-45395 - Open WebUI tool update authorization RCE 2026-05-15
• GHSA-m99r-2hxc-cp3q - Flowise MCP security bypass RCE 2026-05-14
• CVE-2026-43898 - SandboxJS Function.caller sandbox escape 2026-05-12
• CVE-2026-44477 - CloudNativePG metrics exporter RCE 2026-05-12
• GHSA-6xcp-7mpr-m7wm - Open WebUI CORS and session RCE chain 2026-05-12
• CVE-2026-45033 - GitHub Copilot CLI nested bare repo RCE 2026-05-11
• CVE-2026-40933 - Flowise MCP adapter command execution 2026-05-06
• CVE-2026-42601 - ArchiveBox AddView config override RCE 2026-05-06
• CVE-2026-41265 - Flowise Airtable Agent code injection RCE 2026-05-02
• CVE-2026-41507 - math-codegen string literal RCE 2026-05-02
• CVE-2026-42231 - n8n XML webhook prototype pollution RCE 2026-05-02
• CVE-2026-42232 - n8n XML node prototype pollution RCE 2026-05-02
• CVE-2026-42779 - Apache MINA resolveClass deserialization RCE 2026-05-02
• CVE-2025-60455 - Modular Max Serve unsafe deserialization 2026-04-26
• CVE-2026-24159 — NVIDIA NeMo deserialization RCE 2026-04-26
• CVE-2026-24164 — NVIDIA BioNeMo deserialization RCE 2026-04-26
• CVE-2026-33824 — Windows IKEv2 remote code execution 2026-04-26
• CVE-2026-39987 — Marimo pre-auth RCE 2026-04-26
• CVE-2026-5760 — SGLang GGUF template RCE 2026-04-26
• CVE-2014-6271 — Shellshock 2026-04-25
• CVE-2021-44228 — Log4Shell 2026-04-25
• CVE-2024-6387 — regreSSHion 2026-04-25