See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest

Last sync 04:05 UTC 8 of 8 sources healthy

Trending intelligence

1096–1110 of 2198 matching entries · 3315 total · live data

Entries per page

CVEVulnerabilityCVSSUpdatedProductPoCKEV

CVE-2026-42584netty vulnerability7.318 Sep 202611:18 UTCnetty>= 4.2.0.Alpha1, < 4.2.13.Final; < 4.1.133.Final24 sourcesVerifiedNo CVE-2026-42581netty vulnerability5.818 Sep 202611:18 UTCnetty>= 4.2.0.Alpha1, < 4.2.13.Final; < 4.1.133.Final24 sourcesVerifiedNo CVE-2026-42579netty vulnerability7.518 Sep 202611:18 UTCnetty>= 4.2.0.Alpha1, < 4.2.13.Final; < 4.1.133.Final21 sourcesVerifiedNo CVE-2026-42578netty vulnerability2.918 Sep 202611:18 UTCnetty>= 4.2.0.Alpha1, < 4.2.13.Final; < 4.1.133.Final24 sourcesVerifiedNo CVE-2026-42536Exploit for Classic Buffer Overflow in Apache Http_Server CVE-2026-425367.510 Sep 202611:20 UTCApache HTTP Server2.4.0 through 2.4.67 (semver)57 sourcesVerifiedNo CVE-2026-42533nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.0.026 Aug 202613:19 UTCUnknown productSee original advisory1040 sourcesVerifiedNo CVE-2026-42508golang.org/x/crypto/ssh/knownhosts vulnerability9.115 Sep 202610:17 UTCgolang.org/x/crypto/ssh/knownhostsbefore 0.52.0 (semver)49 sourcesNoneNo CVE-2026-42503golang.org/x/tools/gopls vulnerability8.818 Sep 202613:16 UTCgolang.org/x/tools/gopls0.0.0 through before 0.22.0 (semver)2 sourcesNoneNo CVE-2026-42499net/mail vulnerability7.518 Sep 202611:18 UTCnet/mailbefore 1.25.10 (semver); 1.26.0-0 through before 1.26.3 (semver)101 sourcesNoneNo CVE-2026-42338ip-address vulnerability5.311 Sep 202611:17 UTCip-address< 10.1.163 sourcesVerifiedNo CVE-2026-42264axios vulnerability7.411 Sep 202611:17 UTCaxios>= 1.0.0, < 1.15.251 sourcesVerifiedNo CVE-2026-42198pgjdbc vulnerability7.511 Sep 202611:17 UTCpgjdbc>= 42.2.0, < 42.7.1118 sourcesNoneNo CVE-2026-42167CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE0.024 Aug 202622:00 UTCUnknown productSee original advisory501 sourcesVerifiedNo CVE-2026-42154prometheus vulnerability7.510 Sep 202611:20 UTCprometheus< 3.5.3; >= 3.6.0, < 3.11.352 sourcesNoneNo CVE-2026-42151prometheus vulnerability7.510 Sep 202611:20 UTCprometheus< 3.5.3; >= 3.6.0, < 3.11.356 sourcesNoneNo

Priority signals

Counts across the current dataset

CISA Known Exploited Vulnerability

CVE-2026-87886

Acronis Backup Incorrect Default Permissions Vulnerability

Updated 15 Sep 2026 Open intelligence

Watched vendors

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

Verify

Source quality, consistency, and independent references form the confidence score.

See what became exploitable.