Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 19, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
2,494 vulnerabilities · highest exploit probability first
  • CVE-2022-39986Critical 9.8
    RaspAP Command Injection vulnerability
    raspap · raspap
    EPSS99%
    1 exploit
    Published Aug 1, 2023
  • CVE-2023-34960Critical 9.8
    A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.
    chamilo · chamilo
    EPSS99%
    2 exploits
    Published Jul 31, 2023
  • CVE-2023-3836Critical 9.8
    A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713.
    dahuasecurity · smart parking management
    EPSS74%
    1 exploit
    Published Jul 22, 2023
  • CVE-2023-38646Critical 9.8
    Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level.
    metabase · metabase
    EPSS99%
    1 exploit
    Published Jul 21, 2023
  • CVE-2023-34127High 8.8
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges.
    sonicwall · analytics
    EPSS86%
    1 exploit
    Published Jul 13, 2023
  • CVE-2023-34133High 7.5
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database.
    sonicwall · analytics
    EPSS73%
    1 exploit
    Published Jul 13, 2023
  • CVE-2023-34124Critical 9.8
    The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass.
    sonicwall · analytics
    EPSS50%
    1 exploit
    Published Jul 13, 2023
  • CVE-2023-3643Critical 9.8
    It has been classified as critical.
    carel · boss mini firmware
    EPSS75%
    1 exploit
    Published Jul 12, 2023
  • CVE-2023-36969High 8.8
    CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.
    cmsmadesimple · cms made simple
    EPSS49%
    1 exploit
    Published Jul 6, 2023
  • CVE-2023-3460Critical 9.8
    The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will.
    ultimatemember · ultimate member
    EPSS72%
    1 exploit
    Published Jul 4, 2023
  • CVE-2023-3450High 7.2
    The manipulation leads to os command injection.
    ruijie · rg-bcr860 firmware
    EPSS51%
    1 exploit
    Published Jun 28, 2023
  • CVE-2023-2068Critical 9.8
    The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode.
    advancedfilemanager · file manager advanced shortcode
    EPSS40%
    3 exploits
    Published Jun 27, 2023
  • CVE-2023-30258Critical 9.8
    Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
    magnussolution · magnusbilling
    EPSS94%
    2 exploits
    Published Jun 23, 2023
  • CVE-2023-29711Critical 9.8
    An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request.
    interlink · psg-5124 firmware
    EPSS70%
    1 exploit
    Published Jun 22, 2023
  • CVE-2023-35885Critical 9.8
    CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
    mgt-commerce · cloudpanel
    EPSS75%
    1 exploit
    Published Jun 20, 2023
  • CVE-2018-1160Critical 9.8
    Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c.
    netatalk · netatalk
    EPSS87%
    7 exploits
    Published Jun 20, 2023
  • CVE-2023-34468High 8.8
    Apache NiFi vulnerable to Code Injection
    apache · nifi
    EPSS62%
    1 exploit
    Published Jun 12, 2023
  • CVE-2023-33625Critical 9.8
    D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.
    dlink · dir-600 firmware
    EPSS33%
    3 exploits
    Published Jun 12, 2023
  • CVE-2023-34096High 8.8
    In versions 3.06 and prior, the file panorama.pm is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write permissions on the affected system.
    thruk · thruk
    EPSS63%
    6 exploits
    Published Jun 8, 2023
  • CVE-2023-32707High 8.8
    In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by providing…
    splunk · splunk cloud platform
    EPSS79%
    2 exploits
    Published Jun 1, 2023
  • CVE-2023-30253High 8.8
    Dolibarr vulnerable to remote code execution via uppercase manipulation
    dolibarr · dolibarr erp\/crm
    EPSS82%
    1 exploit
    Published May 30, 2023
  • CVE-2023-29919Critical 9.8
    SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.
    contec · solarview compact firmware
    EPSS60%
    1 exploit
    Published May 22, 2023
  • CVE-2022-42889Critical 9.8
    Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded.
    apache · commons text
    EPSS100%
    2 exploits
    Published May 18, 2023
  • CVE-2023-2766High 7.5
    The manipulation leads to files or directories accessible.
    weaver · e-office
    EPSS54%
    1 exploit
    Published May 17, 2023
  • CVE-2023-2745Medium 6.1
    WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter.
    wordpress · wordpress
    EPSS80%
    1 exploit
    Published May 17, 2023
  • CVE-2023-32243Critical 9.8
    Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
    wpdeveloper · essential addons for elementor
    EPSS76%
    1 exploit
    Published May 15, 2023
  • CVE-2023-27823Critical 9.8
    An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.
    optoma · 1080pstx
    EPSS54%
    1 exploit
    Published May 12, 2023
  • CVE-2023-28128High 7.2
    An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution.
    ivanti · avalanche
    EPSS85%
    1 exploit
    Published May 9, 2023
  • CVE-2023-30013Critical 9.8
    TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg.
    totolink · x5000r firmware
    EPSS26%
    2 exploits
    Published May 5, 2023
  • CVE-2023-25826Critical 9.8
    Command injection in OpenTSDB
    opentsdb · opentsdb
    EPSS43%
    1 exploit
    Published May 3, 2023
  • CVE-2023-28384High 8.8
    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.
    myscada · mypro
    EPSS45%
    1 exploit
    Published Apr 27, 2023
  • CVE-2023-28770High 7.5
    The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the system files and to retrieve the password of the supervisor from…
    zyxel · dx5401-b0 firmware
    EPSS58%
    1 exploit
    Published Apr 27, 2023
  • CVE-2023-29524High 8.8
    XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet
    xwiki · xwiki
    EPSS76%
    1 exploit
    Published Apr 20, 2023
  • CVE-2023-21931High 7.5
    Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server.
    oracle · weblogic server
    EPSS82%
    1 exploit
    Published Apr 19, 2023
  • CVE-2023-29084High 7.2
    Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings.
    zohocorp · manageengine admanager plus
    EPSS98%
    1 exploit
    Published Apr 14, 2023
  • CVE-2023-27179High 7.5
    GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php.
    gdidees · gdidees cms
    EPSS61%
    1 exploit
    Published Apr 11, 2023
  • CVE-2023-26067High 8.1
    Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
    lexmark · cslbl firmware
    EPSS38%
    1 exploit
    Published Apr 10, 2023
  • CVE-2023-28503Critical 9.8
    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to bypass authentication…
    rocketsoftware · unidata
    EPSS62%
    1 exploit
    Published Mar 29, 2023
  • CVE-2023-28502Critical 9.8
    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user.
    rocketsoftware · unidata
    EPSS61%
    1 exploit
    Published Mar 29, 2023
  • CVE-2023-1133Critical 9.8
    Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default.
    deltaww · infrasuite device master
    EPSS50%
    1 exploit
    Published Mar 27, 2023
  • CVE-2023-26801Critical 9.8
    LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg.
    lb-link · bl-ac1900 firmware
    EPSS70%
    1 exploit
    Published Mar 26, 2023
  • CVE-2022-43781Critical 9.8
    There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center.
    atlassian · bitbucket
    EPSS98%
    1 exploit
    Published Mar 20, 2023
  • CVE-2023-27253High 8.8
    A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.
    netgate · pfsense
    EPSS90%
    2 exploits
    Published Mar 17, 2023
  • CVE-2023-28343Critical 9.8
    OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.
    apsystems · energy communication unit firmware
    EPSS85%
    2 exploits
    Published Mar 14, 2023
  • CVE-2023-25573High 7.5
    In affected versions an improper access control vulnerability exists in /api/jmeter/download/files, which allows any user to download any file without authentication.
    metersphere · metersphere
    EPSS52%
    1 exploit
    Published Mar 9, 2023
  • CVE-2023-26477Critical 9.8
    org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
    xwiki · xwiki
    EPSS75%
    1 exploit
    Published Mar 3, 2023
  • CVE-2023-26475High 8.8
    xwiki-platform vulnerable to Remote Code Execution in Annotations
    xwiki · xwiki
    EPSS64%
    1 exploit
    Published Mar 2, 2023
  • CVE-2022-47075High 7.5
    An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx.
    smartofficepayroll · smartoffice
    EPSS59%
    1 exploit
    Published Feb 28, 2023
  • CVE-2023-27372Critical 9.8
    SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled.
    spip · spip
    EPSS100%
    2 exploits
    Published Feb 28, 2023
  • CVE-2023-26035Critical 9.8
    Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization.
    zoneminder · zoneminder
    EPSS80%
    1 exploit
    Published Feb 25, 2023
Showing 201–250 of 2,494

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 19, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.