🚨 CRITICAL: Metabase RCE — CVE-2026-59827
CVSS 9.9
⚠️ Unsafe deserialization in H2 query handling → authenticated users can get full RCE
🎯 Target: default Sample DB (ships in every Metabase install)
🔧 How: SELECT X'...'::OTHER smuggles a malicious payload into ObjectInputStream.readObject()
📌 Affected:
OSS 0.58.0 – 0.61.1.3
Enterprise 1.58.0 – 1.61.1.3
✅ Fix: Upgrade to 0.61.1.4+ / 1.61.1.4+
🩹 Can't patch now? Revoke native query perms on H2 DBs
🔗 Also check CVE-2026-59826 (H2 connection string RCE), dropped same day
🧪 We reproduced this in an isolated lab to validate patch behavior — full writeup with gadget chains + lab setup:
👉 https://exploitgrid.net/blogs/cve-2026-59827-vuln-and-exploit-working
⚖️ Lab research, defensive purpose only — don't test this on systems you don't own/have permission for.
#Metabase #CVE #RCE #InfoSec
CVSS 9.9
⚠️ Unsafe deserialization in H2 query handling → authenticated users can get full RCE
🎯 Target: default Sample DB (ships in every Metabase install)
🔧 How: SELECT X'...'::OTHER smuggles a malicious payload into ObjectInputStream.readObject()
📌 Affected:
OSS 0.58.0 – 0.61.1.3
Enterprise 1.58.0 – 1.61.1.3
✅ Fix: Upgrade to 0.61.1.4+ / 1.61.1.4+
🩹 Can't patch now? Revoke native query perms on H2 DBs
🔗 Also check CVE-2026-59826 (H2 connection string RCE), dropped same day
🧪 We reproduced this in an isolated lab to validate patch behavior — full writeup with gadget chains + lab setup:
👉 https://exploitgrid.net/blogs/cve-2026-59827-vuln-and-exploit-working
⚖️ Lab research, defensive purpose only — don't test this on systems you don't own/have permission for.
#Metabase #CVE #RCE #InfoSec
exploitgrid.net
CVE-2026-59827 — Critical Metabase Deserialization Bug Turns a SQL Query Into Remote Code Execution
Blog on CVE-2026-59827, Unsafe H2 query ouput deserialization in Metabase
🔴 CVE-2026-9810 | CVSS 9.8
AI Copilot WordPress Plugin — OAuth token binding failure grants unauthenticated admin access.
▪️ Affected: < 1.5.4
▪️ Fixed: 1.5.4
▪️ Auth required: None
Public exploit details are available. Full technical breakdown, detection queries, and remediation steps on ExploitGrid.
🔗 exploitgrid.net/blogs/cve-2026-9810-unauthenticated-rce
AI Copilot WordPress Plugin — OAuth token binding failure grants unauthenticated admin access.
▪️ Affected: < 1.5.4
▪️ Fixed: 1.5.4
▪️ Auth required: None
Public exploit details are available. Full technical breakdown, detection queries, and remediation steps on ExploitGrid.
🔗 exploitgrid.net/blogs/cve-2026-9810-unauthenticated-rce
exploitgrid.net
CVE-2026-9810 Unauthenticated RCE
CVE-2026-9810 Wordpress AI Copilot Plugin Unauthenticated RCE
🛡️ ExploitGrid Daily Threat Digest
Today: 1374 CVEs, 189 exploits, 570 critical, 189 with public PoCs
Top Highlights:
• [CVE] CVE-2026-47056 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-47056
• [CVE] CVE-2026-60217 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60217
• [CVE] CVE-2026-60358 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60358
• [CVE] CVE-2026-60360 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60360
• [CVE] CVE-2026-60365 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60365
➕ +1558 more threats tracked today →
Today: 1374 CVEs, 189 exploits, 570 critical, 189 with public PoCs
Top Highlights:
• [CVE] CVE-2026-47056 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-47056
• [CVE] CVE-2026-60217 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60217
• [CVE] CVE-2026-60358 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60358
• [CVE] CVE-2026-60360 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60360
• [CVE] CVE-2026-60365 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60365
➕ +1558 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 199 CVEs, 189 exploits, 49 critical, 189 with public PoCs
Top Highlights:
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60366
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60369
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
• [CVE] CVE-2026-60367 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60367
• [CVE] CVE-2026-60372 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60372
➕ +383 more threats tracked today →
Today: 199 CVEs, 189 exploits, 49 critical, 189 with public PoCs
Top Highlights:
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60366
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60369
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
• [CVE] CVE-2026-60367 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60367
• [CVE] CVE-2026-60372 [HIGH PRIORITY]
Vulnerability Record: CVE-2026-60372
➕ +383 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 205 CVEs, 101 exploits, 47 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
➕ +301 more threats tracked today →
Today: 205 CVEs, 101 exploits, 47 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
➕ +301 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 205 CVEs, 101 exploits, 47 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
➕ +301 more threats tracked today →
Today: 205 CVEs, 101 exploits, 47 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
➕ +301 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 205 CVEs, 101 exploits, 47 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
➕ +301 more threats tracked today →
Today: 205 CVEs, 101 exploits, 47 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
• [CVE] CVE-2026-2395 [HIGH PRIORITY]
SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
➕ +301 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 209 CVEs, 101 exploits, 44 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [EXPLOIT] EGE-GH-2h00wb7 [CRITICAL/PoC]
CVE-2024-9264
➕ +305 more threats tracked today →
Today: 209 CVEs, 101 exploits, 44 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [EXPLOIT] EGE-GH-2h00wb7 [CRITICAL/PoC]
CVE-2024-9264
➕ +305 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62145 [HIGH PRIORITY]
Local Privilege Escalation in Gaia Portal
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
➕ +312 more threats tracked today →
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62145 [HIGH PRIORITY]
Local Privilege Escalation in Gaia Portal
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
• [CVE] CVE-2026-60369 [HIGH PRIORITY]
➕ +312 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
➕ +312 more threats tracked today →
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
➕ +312 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
➕ +312 more threats tracked today →
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
➕ +312 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
➕ +312 more threats tracked today →
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [EXPLOIT] EGE-GH-kQ3GEHY [CRITICAL/PoC]
CVE-2022-4361
• [EXPLOIT] EGE-GH-86ioQWk [CRITICAL/PoC]
Report-XZ-Utils-CVE-2024-3094
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
➕ +312 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
➕ +312 more threats tracked today →
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
➕ +312 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
➕ +312 more threats tracked today →
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
➕ +312 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
➕ +312 more threats tracked today →
Today: 216 CVEs, 101 exploits, 46 critical, 104 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2026-16232 [CRITICAL/PoC]
Authentication Bypass in the SmartConsole Login Process Using an Application ...
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-62144 [CRITICAL/PoC]
Management Authentication Bypass and Privilege Escalation
⚠️ Recorded Exploit Available
• [CVE] CVE-2026-60366 [HIGH PRIORITY]
➕ +312 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 372 CVEs, 101 exploits, 91 critical, 101 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2025-71389 [HIGH PRIORITY]
Cal.com before 5.9.9 Remote Code Execution via RSC
• [CVE] CVE-2026-42933 [HIGH PRIORITY]
Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs
• [CVE] CVE-2026-47668 [HIGH PRIORITY]
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
➕ +468 more threats tracked today →
Today: 372 CVEs, 101 exploits, 91 critical, 101 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-lPXYcAr [CRITICAL/PoC]
log4shell-vulnerable-app
• [EXPLOIT] EGE-GH-Ixho1eK [CRITICAL/PoC]
keycloak__keycloak_CVE-2022-4361_21-1-1
• [CVE] CVE-2025-71389 [HIGH PRIORITY]
Cal.com before 5.9.9 Remote Code Execution via RSC
• [CVE] CVE-2026-42933 [HIGH PRIORITY]
Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs
• [CVE] CVE-2026-47668 [HIGH PRIORITY]
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
➕ +468 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 196 CVEs, 155 exploits, 54 critical, 155 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-ARoDEf6 [CRITICAL/PoC]
CVE-2025-32432-POC
• [EXPLOIT] EGE-GH-uEWTGVH [CRITICAL/PoC]
cve-2025-55182-react2shell_reproduction
• [CVE] CVE-2026-56163 [HIGH PRIORITY]
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
• [CVE] CVE-2026-56191 [HIGH PRIORITY]
Microsoft Exchange Online Tampering Vulnerability
• [CVE] CVE-2026-57106 [HIGH PRIORITY]
Data Quality Elevation of Privilege Vulnerability
➕ +346 more threats tracked today →
Today: 196 CVEs, 155 exploits, 54 critical, 155 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-ARoDEf6 [CRITICAL/PoC]
CVE-2025-32432-POC
• [EXPLOIT] EGE-GH-uEWTGVH [CRITICAL/PoC]
cve-2025-55182-react2shell_reproduction
• [CVE] CVE-2026-56163 [HIGH PRIORITY]
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
• [CVE] CVE-2026-56191 [HIGH PRIORITY]
Microsoft Exchange Online Tampering Vulnerability
• [CVE] CVE-2026-57106 [HIGH PRIORITY]
Data Quality Elevation of Privilege Vulnerability
➕ +346 more threats tracked today →
🛡️ ExploitGrid Daily Threat Digest
Today: 311 CVEs, 93 exploits, 16 critical, 93 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-kQIP8Pr [CRITICAL/PoC]
cve-2021-44228-log4shell_rce_reproduction
• [EXPLOIT] EGE-GH-Q8xzoRn [CRITICAL/PoC]
cve-2024-3400-panos_rce_reproduction
• [CVE] CVE-2026-66012 [HIGH PRIORITY]
SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
• [CVE] CVE-2026-61884 [HIGH PRIORITY]
Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Pat...
• [CVE] CVE-2026-62835 [HIGH PRIORITY]
Azure Portal Information Disclosure Vulnerability
➕ +399 more threats tracked today →
Disclaimer: Informational, defensive security monitoring only.
Today: 311 CVEs, 93 exploits, 16 critical, 93 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-kQIP8Pr [CRITICAL/PoC]
cve-2021-44228-log4shell_rce_reproduction
• [EXPLOIT] EGE-GH-Q8xzoRn [CRITICAL/PoC]
cve-2024-3400-panos_rce_reproduction
• [CVE] CVE-2026-66012 [HIGH PRIORITY]
SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
• [CVE] CVE-2026-61884 [HIGH PRIORITY]
Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Pat...
• [CVE] CVE-2026-62835 [HIGH PRIORITY]
Azure Portal Information Disclosure Vulnerability
➕ +399 more threats tracked today →
Disclaimer: Informational, defensive security monitoring only.
🛡️ ExploitGrid Daily Threat Digest
Today: 311 CVEs, 93 exploits, 16 critical, 93 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-kQIP8Pr [CRITICAL/PoC]
cve-2021-44228-log4shell_rce_reproduction
• [EXPLOIT] EGE-GH-Q8xzoRn [CRITICAL/PoC]
cve-2024-3400-panos_rce_reproduction
• [CVE] CVE-2026-66012 [HIGH PRIORITY]
SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
• [CVE] CVE-2026-61884 [HIGH PRIORITY]
Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Pat...
• [CVE] CVE-2026-62835 [HIGH PRIORITY]
Azure Portal Information Disclosure Vulnerability
➕ +399 more threats tracked today →
Disclaimer: Informational, defensive security monitoring only.
Today: 311 CVEs, 93 exploits, 16 critical, 93 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-kQIP8Pr [CRITICAL/PoC]
cve-2021-44228-log4shell_rce_reproduction
• [EXPLOIT] EGE-GH-Q8xzoRn [CRITICAL/PoC]
cve-2024-3400-panos_rce_reproduction
• [CVE] CVE-2026-66012 [HIGH PRIORITY]
SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
• [CVE] CVE-2026-61884 [HIGH PRIORITY]
Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Pat...
• [CVE] CVE-2026-62835 [HIGH PRIORITY]
Azure Portal Information Disclosure Vulnerability
➕ +399 more threats tracked today →
Disclaimer: Informational, defensive security monitoring only.
🛡️ ExploitGrid Daily Threat Digest
Today: 311 CVEs, 93 exploits, 16 critical, 93 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-kQIP8Pr [CRITICAL/PoC]
cve-2021-44228-log4shell_rce_reproduction
• [EXPLOIT] EGE-GH-Q8xzoRn [CRITICAL/PoC]
cve-2024-3400-panos_rce_reproduction
• [CVE] CVE-2026-66012 [HIGH PRIORITY]
SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
• [CVE] CVE-2026-61884 [HIGH PRIORITY]
Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Pat...
• [CVE] CVE-2026-62835 [HIGH PRIORITY]
Azure Portal Information Disclosure Vulnerability
➕ +399 more threats tracked today →
Disclaimer: Informational, defensive security monitoring only.
Today: 311 CVEs, 93 exploits, 16 critical, 93 with public PoCs
Top Highlights:
• [EXPLOIT] EGE-GH-kQIP8Pr [CRITICAL/PoC]
cve-2021-44228-log4shell_rce_reproduction
• [EXPLOIT] EGE-GH-Q8xzoRn [CRITICAL/PoC]
cve-2024-3400-panos_rce_reproduction
• [CVE] CVE-2026-66012 [HIGH PRIORITY]
SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP
• [CVE] CVE-2026-61884 [HIGH PRIORITY]
Tycon Systems TPDIN-Monitor-WEB2 Authentication Bypass Using an Alternate Pat...
• [CVE] CVE-2026-62835 [HIGH PRIORITY]
Azure Portal Information Disclosure Vulnerability
➕ +399 more threats tracked today →
Disclaimer: Informational, defensive security monitoring only.