Security Radar

CVE-2026-24423 Severity under analysis Ransomware added on 02/05/2026

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

SmarterTools · SmarterMail · CWE-306

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

CVE-2026-23760 Severity under analysis Ransomware added on 01/26/2026

SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

SmarterTools · SmarterMail · CWE-288

SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. This could allow an unauthenticated attacker to supply a target administrator username and a new password to reset the account, resulting in full administrative compromise of the SmarterMail instance.

CVE-2025-52691 Severity under analysis Ransomware added on 01/26/2026

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

SmarterTools · SmarterMail · CWE-434

SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

CVE-2025-14733 Severity under analysis Ransomware added on 12/19/2025

WatchGuard Firebox Out of Bounds Write Vulnerability

WatchGuard · Firebox · CWE-787

WatchGuard Fireware OS iked process contains an out of bounds write vulnerability in the OS iked process. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code and affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer.

CVE-2025-55182 Severity under analysis Ransomware added on 12/05/2025

Meta React Server Components Remote Code Execution Vulnerability

Meta · React Server Components

Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182.

CVE-2025-61884 Severity under analysis Ransomware added on 10/20/2025

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Oracle · E-Business Suite · CWE-918

Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.

CVE-2025-61882 Severity under analysis Ransomware added on 10/06/2025

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suite

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.

CVE-2021-43226 Severity under analysis Ransomware added on 10/06/2025

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.

CVE-2025-10035 Severity under analysis Ransomware added on 09/29/2025

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

Fortra · GoAnywhere MFT · CWE-502, CWE-77

Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

CVE-2025-8088 Severity under analysis Ransomware added on 08/12/2025

RARLAB WinRAR Path Traversal Vulnerability

RARLAB · WinRAR · CWE-35

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

CVE-2025-49706 Severity under analysis Ransomware added on 07/22/2025

Microsoft SharePoint Improper Authentication Vulnerability

Microsoft · SharePoint · CWE-287

Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.

CVE-2025-49704 Severity under analysis Ransomware added on 07/22/2025

Microsoft SharePoint Code Injection Vulnerability

Microsoft · SharePoint · CWE-94

Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

CVE-2025-53770 Severity under analysis Ransomware added on 07/20/2025

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint · CWE-502

Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

CVE-2025-5777 Severity under analysis Ransomware added on 07/10/2025

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Citrix · NetScaler ADC and Gateway · CWE-125

Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

CVE-2019-6693 Severity under analysis Ransomware added on 06/25/2025

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Fortinet · FortiOS · CWE-798

Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key.

CVE-2025-42999 Severity under analysis Ransomware added on 05/15/2025

SAP NetWeaver Deserialization Vulnerability

SAP · NetWeaver · CWE-502

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.

CVE-2025-3248 Severity under analysis Ransomware added on 05/05/2025

Langflow Missing Authentication Vulnerability

Langflow · Langflow · CWE-306

Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.

CVE-2025-31324 Severity under analysis Ransomware added on 04/29/2025

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP · NetWeaver · CWE-434

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

CVE-2025-29824 Severity under analysis Ransomware added on 04/08/2025

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft · Windows · CWE-416

Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

CVE-2025-31161 Severity under analysis Ransomware added on 04/07/2025

CrushFTP Authentication Bypass Vulnerability

CrushFTP · CrushFTP · CWE-305

CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header that allows a remote unauthenticated attacker to authenticate to any known or guessable user account (e.g., crushadmin), potentially leading to a full compromise.

CVE-2025-22457 Severity under analysis Ransomware added on 04/04/2025

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · CWE-121

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

CVE-2025-24472 Severity under analysis Ransomware added on 03/18/2025

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · FortiOS and FortiProxy · CWE-288

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.

CVE-2025-26633 Severity under analysis Ransomware added on 03/11/2025

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Microsoft · Windows · CWE-707

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.

CVE-2025-22225 Severity under analysis Ransomware added on 03/04/2025

VMware ESXi Arbitrary Write Vulnerability

VMware · ESXi · CWE-123

VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox.