Netlas.io

CVE-2026-56846, CVE-2026-56848 & CVE-2026-58043 and other: 3 high-severity and 8 medium or low vulnerabilities in Node.js ‍🔥 Recently disclosed vulnerabilities in Node.js touch HTTP/2, the Permission Model, and several core modules. Search at Netlas.io: 👉 Link: https://nt.ls/AAg1f 👉 Dork: tag.name:"node_js" Vendor's advisory: https://nodejs.org/en/blog/vulnerability/july-2026-security-releases

Command injection in Mittel MiCollab, no CVE assigned yet, 9.8 rating ‍🔥 A command injection vulnerability has been discovered in the AWV component of Mitel MiCollab. A successful exploit of this vulnerability could allow an attacker to execute arbitrary commands and potentially gain control of the system. Search at Netlas.io: 👉 Link: https://nt.ls/t8Tk9 👉 Dork: tag.name:"micollab" Vendor's advisory: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2026-0006

CVE-2026-16812: OS Command injection in VeloCloud Orchestrator, 10.0 rating ‍🔥 A new vulnerability in Arista VeloCloud Orchestrator (VCO) allows an unauthenticated remote attacker run OS commands on the VCO host. A compromise can also expose managed devices. This vulnerability is already being actively exploited in the wild! Search at Netlas.io: 👉 Link: https://nt.ls/PkM4n 👉 Dork: http.body:"single-spa-application:@velocloud/vco-header" OR http.body:"vco/branding.css" OR http.body:"vco/favicon" Vendor's advisory: https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144

CVE-2026-61511: Pre-auth RCE vulnerability in vBulletin, 9.3 rating 🔥 The vulnerability allows unauthenticated attacker to run arbitrary PHP code as the web server, which can mean full site takeover. PoC is now available! Search at Netlas.io: 👉 Link: https://nt.ls/c7BPf 👉 Dork: tag.name:"vbulletin" Read more: https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/

High-severity LPE in Exim, no CVE assigned yet 🤷‍ A new vulnerability in Exim allows a local attacker to read files outside the mail spool. This could lead to privilege escalation. Search at Netlas.io: 👉 Link: https://nt.ls/qEnbs 👉 Dork: tag.name:"exim" Vendor's advisory: https://www.exim.org/static/doc/security/EXIM-Security-2026-06-22.1/EXIM-Security-2026-06-22.1.txt

CVE-2026-60291, CVE-2026-60292, CVE-2026-60294 and other: A lot of vulnerabilities in Oracle Weblogic Server, 9.8 rating 🔥 Recently disclosed easily exploitable vulnerabilities in Oracle Weblogic Server allow unauthenticated attacker to compromise Oracle WebLogic Server. Search at Netlas.io: 👉 Link: https://nt.ls/NdCqq 👉 Dork: tag.name:"weblogic" Vendor's advisory: https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW

HollowByte: DoS vulnerability in OpenSSL, no CVE assigned yet 🤷‍ By sending a malicious payload of just 11 bytes, a remote, unauthenticated attacker can freeze server memory and to crush a host. Search at Netlas.io: 👉 Link: https://nt.ls/be55E 👉 Dork: tag.name:"openssl" Read more: https://sec.okta.com/articles/2026/06/openssl-hollowbtye-a-dos-hiding-in-11-bytes/

CVE-2026-63030: Pre-Auth RCE in WordPress Core, 9.8 rating 🔥 Recently disclosed WordPress pre authentication RCE vulnerability can be exploited by an anonymous user in a stock install of WordPress with no plugins. PoC exists! Search at Netlas.io: 👉 Link: https://nt.ls/Yvd0s 👉 Dork: tag.name:"wordpress" Read more: https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core

CVE-2026-15409 & CVE-2026-15410: Two exploited in the wild vulnerabilities in SonicWall SMA1000, up to 10.0 rating 🔥 Recently disclosed vulnerabilities in SonicWall SMA1000 allow an unauthenticated attacker to open a websocket-based tunnel to arbitrary localhost-only services and subsequently execute arbitrary operating system commands as root. These flaws are being actively exploited in the wild! PoC exists! Search at Netlas.io: 👉 Link: https://nt.ls/I9q7F 👉 Dork: http.favicon.hash_sha256:6bb6f64adaa6a7ed4da10a2fe4edf4cb4d9914aa742c7ad607ca4ca678dcd3f1 OR certificate.subject_dn:"HTTPS Management Certificate for SonicWALL (self-signed)" Vendor's advisory: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008

CVE-2026-56164 and other: EoP and another exploitable vulnerabilities in Microsoft SharePoint Server, 5.3 rating 🔥 A new Elevation of Privilege vulnerability in Microsoft SharePoint Server has been added to the CISA KEV, along with two previously disclosed vulnerabilities (CVE-2026-45659 & CVE-2026-32201). Attackers can chain them to gain access to SharePoint Server instances, steal IIS machine keys, and deploy malware. 🔥 All three are being actively exploited in the wild! Search at Netlas.io: 👉 Link: https://nt.ls/oGZ1j 👉 Dork: tag.name:"microsoft_sharepoint" Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164

CVE-2026-44747: Memory corruption in SAP NetWeaver AS ABAP, 9.9 rating 🔥 New vulnerability in SAP NetWeaver AS ABAP allows an authenticated attacker to abuse logical errors in memory management. This could lead to unauthorized data access, data modification, or system downtime. Search at Netlas.io: 👉 Link: https://nt.ls/4m05i 👉 Dork: http.headers.server:"NetWeaver Application Server / ABAP" Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html

CVE-2026-57807 & CVE-2026-12761: Two vulnerable WordPress plugins by miniOrange, 9.8 rating both 🔥 There are two authentication bypass vulnerabilities disclosed in miniOrange plugins: OAuth Single Sign On - SSO & Social Login and Register (Discord, Google, Twitter, LinkedIn). These flaws might allow a malicious actor to gain admin access to the website. Search at Netlas.io: 👉 Link: https://nt.ls/M4c8B 👉 Dork: http.body:"plugins/miniorange-oauth-oidc-single-sign-on" OR http.body:"miniorange-login-openid" Read more: https://patchstack.com/database/wordpress/plugin/miniorange-oauth-oidc-single-sign-on/vulnerability/wordpress-oauth-single-sign-on-sso-oauth-client-plugin-38-5-8-broken-authentication-vulnerability?_s_id=cve https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/miniorange-login-openid/miniorange-social-login-and-register-discord-google-twitter-linkedin-770-unauthenticated-authentication-bypass-to-administrator-account-takeover-via-profile-completion-otp-flow

Apache Kafka OAUTHBEARER authentication bypass, no CVE assigned yet, 8.1 rating 🔥 The vulnerability is a missing 'exp' enforcement in the SASL/OAUTHBEARER unauthenticated token acceptance path on the broker side. An attacker holding any historical Kafka session JWT can replay it indefinitely after the JWT's own /exp' has passed. Search at Netlas.io: 👉 Link: https://nt.ls/TQzt7 👉 Dork: http.title:"kafka" OR http.title:"Apache Kafka" OR http.body:"kafka" OR http.body:"Apache Kafka" Read more: https://seclists.org/oss-sec/2026/q3/18

CVE-2026-56843: Cleartext FTP Password Exposure in Plesk's XML API, 9.9 rating 🔥 Exposure of cleartext FTP credentials is possible in Plesk's XML API, which may allow a low-privileged attacker to upload malicious files and execute arbitrary code remotely (RCE) as another tenant's system user. Search at Netlas.io: 👉 Link: https://nt.ls/MZtlo 👉 Dork: tag.name:"plesk" Vendor's advisory: https://support.plesk.com/hc/en-us/articles/41178305151255-Vulnerability-in-Plesk-XML-API-Cleartext-FTP-Password-Exposure

CVE-2026-12184: Remote DoS in PHP, 8.2 rating 🔥 Failure to setup TLS handshake with a remote server can lead to DoS. Search at Netlas.io: 👉 Link: https://nt.ls/pjJC5 👉 Dork: tag.name:php Vendor's advisory: https://github.com/php/php-src/security/advisories/GHSA-mhmq-mmqj-2v39

CVE-2026-57517: Blind SQL Injection in Control Web Panel, 9.8 rating 🔥 SQL Injection flow in Control Web Panel allows remote code execution. PoC is now available! Search at Netlas.io: 👉 Link: https://nt.ls/biQe7 👉 Dork: http.title:"CWP ADMIN" OR http.favicon.hash_sha256:69cd33a03067a7a00b6a743e52b357cd46ffdfeb1d72beaf44f2ffd9abfc153a OR http.headers.server:cwpsrv Read more: https://karmainsecurity.com/KIS-2026-12

🚧 Planned Maintenance Netlas will be unavailable for up to a hour today, starting at 11:30 UTC. We have to reboot the whole system after maintenance. Thank you for your understanding and patience. We are sorry for any inconvenience this may cause.

CVE-2026-48276 and other: A lot of vulnerabilities in Adobe ColdFusion, 6 of them are 10.0 rating 😱 The last Adobe security bulletin disclosed 6 RCE vulnerabilities in Adobe ColdFusion with highest severity and other critical issues such as arbitrary file read and privilege escalation. Search at Netlas.io: 👉 Link: https://nt.ls/GxXdK 👉 Dork: tag.name:"adobe_coldfusion" Vendor's advisory: https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html

CVE-2026-49869 & CVE-2026-53576: Two RCE vulnerabilities in kestra, 10.0 rating 😱 Recently disclosed vulnerabilities in Kestra allow an unauthenticated remote attacker to execute arbitrary code as root. Search at Netlas.io: 👉 Link: https://nt.ls/58ToN 👉 Dork: http.title:kestra OR http.favicon.hash_sha256:26119c9b0a6c4e82ae8c2d367e4a7cb56a30c4da664b7185d14f6fbdf50f8ec8 Read more: https://github.com/kestra-io/kestra/security

CVE-2026-52813 & CVE-2026-52806 & CVE-2026-52811: Three RCE vulnerabilities in gogs, up to 10.0 rating 🔥 Recently disclosed vulnerabilities in gogs allow an attacker to execute arbitrary code. PoC exist for all three! Search at Netlas.io: 👉 Link: https://nt.ls/A9o6h 👉 Dork: tag.name:gogs Read more: https://github.com/gogs/gogs/security