Netlas.io

CVE-2026-61511: Pre-auth RCE vulnerability in vBulletin, 9.3 rating 🔥 The vulnerability allows unauthenticated attacker to run arbitrary PHP code as the web server, which can mean full site takeover. PoC is now available! Search at Netlas.io: 👉 Link: https://nt.ls/c7BPf 👉 Dork: tag.name:"vbulletin" Read more: https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/

High-severity LPE in Exim, no CVE assigned yet 🤷‍ A new vulnerability in Exim allows a local attacker to read files outside the mail spool. This could lead to privilege escalation. Search at Netlas.io: 👉 Link: https://nt.ls/qEnbs 👉 Dork: tag.name:"exim" Vendor's advisory: https://www.exim.org/static/doc/security/EXIM-Security-2026-06-22.1/EXIM-Security-2026-06-22.1.txt

CVE-2026-60291, CVE-2026-60292, CVE-2026-60294 and other: A lot of vulnerabilities in Oracle Weblogic Server, 9.8 rating 🔥 Recently disclosed easily exploitable vulnerabilities in Oracle Weblogic Server allow unauthenticated attacker to compromise Oracle WebLogic Server. Search at Netlas.io: 👉 Link: https://nt.ls/NdCqq 👉 Dork: tag.name:"weblogic" Vendor's advisory: https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW

HollowByte: DoS vulnerability in OpenSSL, no CVE assigned yet 🤷‍ By sending a malicious payload of just 11 bytes, a remote, unauthenticated attacker can freeze server memory and to crush a host. Search at Netlas.io: 👉 Link: https://nt.ls/be55E 👉 Dork: tag.name:"openssl" Read more: https://sec.okta.com/articles/2026/06/openssl-hollowbtye-a-dos-hiding-in-11-bytes/

CVE-2026-63030: Pre-Auth RCE in WordPress Core, 9.8 rating 🔥 Recently disclosed WordPress pre authentication RCE vulnerability can be exploited by an anonymous user in a stock install of WordPress with no plugins. PoC exists! Search at Netlas.io: 👉 Link: https://nt.ls/Yvd0s 👉 Dork: tag.name:"wordpress" Read more: https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core

CVE-2026-15409 & CVE-2026-15410: Two exploited in the wild vulnerabilities in SonicWall SMA1000, up to 10.0 rating 🔥 Recently disclosed vulnerabilities in SonicWall SMA1000 allow an unauthenticated attacker to open a websocket-based tunnel to arbitrary localhost-only services and subsequently execute arbitrary operating system commands as root. These flaws are being actively exploited in the wild! PoC exists! Search at Netlas.io: 👉 Link: https://nt.ls/I9q7F 👉 Dork: http.favicon.hash_sha256:6bb6f64adaa6a7ed4da10a2fe4edf4cb4d9914aa742c7ad607ca4ca678dcd3f1 OR certificate.subject_dn:"HTTPS Management Certificate for SonicWALL (self-signed)" Vendor's advisory: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008

CVE-2026-56164 and other: EoP and another exploitable vulnerabilities in Microsoft SharePoint Server, 5.3 rating 🔥 A new Elevation of Privilege vulnerability in Microsoft SharePoint Server has been added to the CISA KEV, along with two previously disclosed vulnerabilities (CVE-2026-45659 & CVE-2026-32201). Attackers can chain them to gain access to SharePoint Server instances, steal IIS machine keys, and deploy malware. 🔥 All three are being actively exploited in the wild! Search at Netlas.io: 👉 Link: https://nt.ls/oGZ1j 👉 Dork: tag.name:"microsoft_sharepoint" Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164

CVE-2026-44747: Memory corruption in SAP NetWeaver AS ABAP, 9.9 rating 🔥 New vulnerability in SAP NetWeaver AS ABAP allows an authenticated attacker to abuse logical errors in memory management. This could lead to unauthorized data access, data modification, or system downtime. Search at Netlas.io: 👉 Link: https://nt.ls/4m05i 👉 Dork: http.headers.server:"NetWeaver Application Server / ABAP" Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html

CVE-2026-57807 & CVE-2026-12761: Two vulnerable WordPress plugins by miniOrange, 9.8 rating both 🔥 There are two authentication bypass vulnerabilities disclosed in miniOrange plugins: OAuth Single Sign On - SSO & Social Login and Register (Discord, Google, Twitter, LinkedIn). These flaws might allow a malicious actor to gain admin access to the website. Search at Netlas.io: 👉 Link: https://nt.ls/M4c8B 👉 Dork: http.body:"plugins/miniorange-oauth-oidc-single-sign-on" OR http.body:"miniorange-login-openid" Read more: https://patchstack.com/database/wordpress/plugin/miniorange-oauth-oidc-single-sign-on/vulnerability/wordpress-oauth-single-sign-on-sso-oauth-client-plugin-38-5-8-broken-authentication-vulnerability?_s_id=cve https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/miniorange-login-openid/miniorange-social-login-and-register-discord-google-twitter-linkedin-770-unauthenticated-authentication-bypass-to-administrator-account-takeover-via-profile-completion-otp-flow

Apache Kafka OAUTHBEARER authentication bypass, no CVE assigned yet, 8.1 rating 🔥 The vulnerability is a missing 'exp' enforcement in the SASL/OAUTHBEARER unauthenticated token acceptance path on the broker side. An attacker holding any historical Kafka session JWT can replay it indefinitely after the JWT's own /exp' has passed. Search at Netlas.io: 👉 Link: https://nt.ls/TQzt7 👉 Dork: http.title:"kafka" OR http.title:"Apache Kafka" OR http.body:"kafka" OR http.body:"Apache Kafka" Read more: https://seclists.org/oss-sec/2026/q3/18

CVE-2026-56843: Cleartext FTP Password Exposure in Plesk's XML API, 9.9 rating 🔥 Exposure of cleartext FTP credentials is possible in Plesk's XML API, which may allow a low-privileged attacker to upload malicious files and execute arbitrary code remotely (RCE) as another tenant's system user. Search at Netlas.io: 👉 Link: https://nt.ls/MZtlo 👉 Dork: tag.name:"plesk" Vendor's advisory: https://support.plesk.com/hc/en-us/articles/41178305151255-Vulnerability-in-Plesk-XML-API-Cleartext-FTP-Password-Exposure

CVE-2026-12184: Remote DoS in PHP, 8.2 rating 🔥 Failure to setup TLS handshake with a remote server can lead to DoS. Search at Netlas.io: 👉 Link: https://nt.ls/pjJC5 👉 Dork: tag.name:php Vendor's advisory: https://github.com/php/php-src/security/advisories/GHSA-mhmq-mmqj-2v39

CVE-2026-57517: Blind SQL Injection in Control Web Panel, 9.8 rating 🔥 SQL Injection flow in Control Web Panel allows remote code execution. PoC is now available! Search at Netlas.io: 👉 Link: https://nt.ls/biQe7 👉 Dork: http.title:"CWP ADMIN" OR http.favicon.hash_sha256:69cd33a03067a7a00b6a743e52b357cd46ffdfeb1d72beaf44f2ffd9abfc153a OR http.headers.server:cwpsrv Read more: https://karmainsecurity.com/KIS-2026-12

🚧 Planned Maintenance Netlas will be unavailable for up to a hour today, starting at 11:30 UTC. We have to reboot the whole system after maintenance. Thank you for your understanding and patience. We are sorry for any inconvenience this may cause.

CVE-2026-48276 and other: A lot of vulnerabilities in Adobe ColdFusion, 6 of them are 10.0 rating 😱 The last Adobe security bulletin disclosed 6 RCE vulnerabilities in Adobe ColdFusion with highest severity and other critical issues such as arbitrary file read and privilege escalation. Search at Netlas.io: 👉 Link: https://nt.ls/GxXdK 👉 Dork: tag.name:"adobe_coldfusion" Vendor's advisory: https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html

CVE-2026-49869 & CVE-2026-53576: Two RCE vulnerabilities in kestra, 10.0 rating 😱 Recently disclosed vulnerabilities in Kestra allow an unauthenticated remote attacker to execute arbitrary code as root. Search at Netlas.io: 👉 Link: https://nt.ls/58ToN 👉 Dork: http.title:kestra OR http.favicon.hash_sha256:26119c9b0a6c4e82ae8c2d367e4a7cb56a30c4da664b7185d14f6fbdf50f8ec8 Read more: https://github.com/kestra-io/kestra/security

CVE-2026-52813 & CVE-2026-52806 & CVE-2026-52811: Three RCE vulnerabilities in gogs, up to 10.0 rating 🔥 Recently disclosed vulnerabilities in gogs allow an attacker to execute arbitrary code. PoC exist for all three! Search at Netlas.io: 👉 Link: https://nt.ls/A9o6h 👉 Dork: tag.name:gogs Read more: https://github.com/gogs/gogs/security

CVE-2026-12046: RCE vulnerability in pgAdmin 4, 9.5 rating 🔥 Two SQL Editor endpoints were missing the login-required decorator and were reachable without authentication in server mode. This exposes an unauthenticated remote code execution path in the pgAdmin process. Search at Netlas.io: 👉 Link: https://nt.ls/jbYEF 👉 Dork: http.title:"pgAdmin" OR http.headers.set_cookie:"pga4_session=" OR http.favicon.hash_sha256:c3251099ffc5ed057dcbb624adbe79fa5794a0c64684442c1eaf1abc3edf7bde OR http.favicon.hash_sha256:6afa287fc6721817d9931bd8d7a796646ea535596f8bb038ff048666e19cfd17 Read more: https://github.com/pgadmin-org/pgadmin4/issues/10072

CVE-2026-8713: Arbitrary file deletion in Avada Builder WordPress plugin, 9.1 rating 🔥 New vulnerability in Avada Builder WordPress plugin (formerly Fusion Builder) allows an unauthenticated attacker to delete any file on the server. It can easily lead to remote code execution when the right file is deleted. Search at Netlas.io: 👉 Link: https://nt.ls/ohFG5 👉 Dork: http.body:"wp-content/plugins/fusion-builder" Read more: https://www.wordfence.com/blog/2026/06/critical-unauthenticated-arbitrary-file-deletion-vulnerability-patched-in-avada-builder-wordpress-plugin/

CVE-2026-10829: Remote code execution in Moxa NPort, 8.6 rating 🔥 A stack-based buffer overflow in Moxa NPort allows an attacker to corrupt memory by sending crafted input. It could achieve remote code execution with root privileges. Search at Netlas.io: 👉 Link: https://nt.ls/12mUL 👉 Dork: http.title:"NPort Web Console" OR http.headers.server:"MoxaHttp" OR http.body:"NPort Web Console" OR http.body:"<TITLE>OnCell" OR http.body:"<TITLE>Moxa OnCell" Vendor's advisory: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-261910-cve-2026-10828,-cve-2026-10829-use-of-externally-controlled-format-string-and-stack-based-buffer-overflow-v