CVE & Exploit Intelligence Database

CVE-2026-26235 7.5 HIGH 2 PoCs Analysis EPSS 0.00

JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication.

CWE-306 Feb 12, 2026

CVE-2026-1729 9.8 CRITICAL 2 PoCs Analysis EPSS 0.00

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.

CWE-306 Feb 12, 2026

CVE-2026-2249 9.8 CRITICAL 2 PoCs Analysis EPSS 0.00

METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with 'daemon' privileges. This results in the compromise of the software, granting unauthorized access to modify configuration, read and alter sensitive data, or disrupt services.

CWE-306 Feb 11, 2026

CVE-2026-2248 9.8 CRITICAL 1 PoC Analysis EPSS 0.00

METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with root (UID 0) privileges. This results in full system compromise, allowing unauthorized access to modify system configuration, read sensitive data, or disrupt device operations

CWE-306 Feb 11, 2026

CVE-2020-37157 7.5 HIGH 1 PoC Analysis EPSS 0.00

DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive credentials through an unprotected configuration backup endpoint. Attackers can download the configuration file and extract hardcoded username and password by accessing the /tmpfs/config_backup.bin resource.

CWE-306 Feb 07, 2026

CVE-2020-37146 7.5 HIGH 1 PoC Analysis EPSS 0.00

ACE Security WiP-90113 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration files. Attackers can access the camera's configuration backup by sending a GET request to the /config_backup.bin endpoint, exposing credentials and system settings.

CWE-306 Feb 07, 2026

CVE-2020-36963 7.5 HIGH 1 PoC Analysis EPSS 0.00

Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router configuration without authentication.

CWE-306 Jan 28, 2026

CVE-2026-24423 9.8 CRITICAL KEV RANSOMWARE 1 PoC Analysis EPSS 0.29

SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. This command will be executed by the vulnerable application.

CWE-306 Jan 23, 2026

CVE-2021-47891 9.8 CRITICAL 1 PoC Analysis EPSS 0.00

Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to send crafted network packets to execute arbitrary commands. Attackers can exploit the service by connecting to port 9512 and sending specially crafted packets to open a command prompt and download and execute malicious payloads.

CWE-306 Jan 23, 2026

CVE-2021-47802 7.5 HIGH 1 PoC Analysis EPSS 0.00

Tenda D151 and D301 routers contain an unauthenticated configuration download vulnerability that allows remote attackers to retrieve router configuration files. Attackers can send a request to /goform/getimage endpoint to download configuration data including admin credentials without authentication.

CWE-306 Jan 21, 2026

CVE-2026-23744 9.8 CRITICAL EXPLOITED 2 PoCs Analysis NUCLEI EPSS 0.17

MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.

CWE-306 Jan 16, 2026

CVE-2023-54335 9.8 CRITICAL 1 PoC Analysis EPSS 0.00

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

CWE-306 Jan 13, 2026

CVE-2026-22812 8.8 HIGH 7 PoCs Analysis NUCLEI EPSS 0.04

OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.

CWE-749 Jan 12, 2026

CVE-2026-0842 6.3 MEDIUM 1 PoC Analysis EPSS 0.00

A flaw has been found in Flycatcher Toys smART Sketcher up to 2.0. This affects an unknown part of the component Bluetooth Low Energy Interface. This manipulation causes missing authentication. The attack can only be done within the local network. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE-287 Jan 11, 2026

CVE-2025-65731 6.8 MEDIUM 1 PoC Analysis EPSS 0.00

An issue was discovered in D-Link Router DIR-605L (Hardware version F1; Firmware version: V6.02CN02) allowing an attacker with physical access to the UART pins to execute arbitrary commands due to presence of root terminal access on a serial interface without proper access control.

CWE-306 Jan 08, 2026

CVE-2017-20213 7.5 HIGH 1 PoC Analysis EPSS 0.00

FLIR Thermal Camera F/FC/PT/D Stream firmware version 8.0.0.64 contains an unauthenticated vulnerability that allows remote attackers to access live camera streams without credentials. Attackers can exploit the vulnerability to view unauthorized thermal camera video feeds across multiple camera series without requiring any authentication.

CWE-306 Jan 08, 2026

CVE-2026-21445 9.1 CRITICAL 1 PoC Analysis EPSS 0.00

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data and system operations that should require proper authorization. Version 1.7.0.dev45 contains a patch.

CWE-306 Jan 02, 2026

CVE-2020-36904 7.5 HIGH 1 PoC Analysis EPSS 0.00

Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows attackers to execute arbitrary Windows binaries by manipulating the NO_LIST_EXE_PATH configuration parameter. Attackers can bypass authentication through the /cps/ endpoint and modify server configuration, including changing admin passwords and executing system commands.

CWE-306 Dec 31, 2025

CVE-2019-25248 7.5 HIGH 1 PoC Analysis EPSS 0.00

Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve the camera's RTSP stream by exploiting the lack of authentication in the video access mechanism.

CWE-306 Dec 24, 2025

CVE-2019-25240 9.8 CRITICAL 1 PoC Analysis EPSS 0.00

Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams. Attackers can exploit the Mobile Web Viewer module by specifying channel numbers to retrieve sequential video snapshots without authentication.

CWE-306 Dec 24, 2025