Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-17 08:33 UTC
Evidence Sources: 1
First Seen: 2026-07-17
Asserted: 2026-07-17
Scope Notes: GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file | Affected: FlowiseAI / Flowise | CVSS: 7.5 (HIGH) …
Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-17 07:51 UTC
Evidence Sources: 1
First Seen: 2026-07-17
Asserted: 2026-07-17
Scope Notes: Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape | Affected: FlowiseAI / Flo…
Catalog: KEVIntel
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 17:00 UTC
Evidence Sources: 1
First Seen: 2026-07-16
Asserted: 2026-07-16
Scope Notes: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Forti…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 81
Evidence Sources: 1
First Seen: 2023-10-14
Asserted: 2023-10-14
Scope Notes: Affected: Apache / Tika | Class: other-software | Severity: High (…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2025-11-10
Asserted: 2025-11-10
Scope Notes: Affected: Securden / Securden Unified PAM | Class: security-manag…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 0
Evidence Sources: 1
First Seen: 2025-02-13
Asserted: 2025-02-13
Scope Notes: Affected: Palo Alto Networks / PAN-OS | Class: firewall | Severity:…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 75
Evidence Sources: 1
First Seen: 2023-10-14
Asserted: 2023-10-14
Scope Notes: Affected: Wordpress / Wordpress Duplicator plugin | Class: cms | …
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2024-04-11
Asserted: 2024-04-11
Scope Notes: Affected: TopThink / ThinkPHP | Class: web-app-framework | Severi…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 75
Evidence Sources: 1
First Seen: 2023-10-25
Asserted: 2023-10-25
Scope Notes: Affected: Citrix / Citrix ADC and Citrix Gateway | Class: app-deli…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Microsoft / Exchange | Class: email | Severity: Critica…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 88
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Netgear / NETGEAR R/D Series Routers | Class: router | S…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 0
Evidence Sources: 1
First Seen: 2024-11-19
Asserted: 2024-11-19
Scope Notes: Affected: Palo Alto Networks / PAN-OS | Class: firewall | Severity:…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 75
Evidence Sources: 1
First Seen: 2025-05-12
Asserted: 2025-05-12
Scope Notes: Affected: WAVLINK / WAVLINK WL-WN533A8 | Class: router | Severity…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Synacor / Zimbra Collaboration Suite | Class: email | Se…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Belkin / Wemo | Class: embedded-system | Severity: Crit…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-14
Asserted: 2023-10-14
Scope Notes: Affected: Spring / Spring Data Commons | Class: web-app-framework …
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 53
Evidence Sources: 1
First Seen: 2025-05-15
Asserted: 2025-05-15
Scope Notes: Affected: Ivanti / Endpoint Manager Mobile (EPMM), formerly Mobile…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-13
Asserted: 2023-10-13
Scope Notes: Affected: Fortinet / FortiOS | Class: firewall | Severity: Critic…
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 75
Evidence Sources: 1
First Seen: 2023-10-14
Asserted: 2023-10-14
Scope Notes: Affected: Seagate / Seagate NAS OS | Class: nas | Severity: High …
Catalog: Shadowserver
Status: Confirmed
Exploited: Yes
Status Updated: 2026-07-16 00:00 UTC
Characteristics: Severity: 98
Evidence Sources: 1
First Seen: 2023-10-14
Asserted: 2023-10-14
Scope Notes: Affected: D-Link / DIR-868L/DIR-817LW | Class: router | Severity:…