Aggregating NVD, CVE, and multi-source threat feeds, this list provides deep analysis of high-risk threats such as RCE. By integrating CVSS and EPSS models, the system dynamically tracks Exp (Exploit) resources and PoC availability to accurately assess Exploitability. Combined with official Patches and remediation strategies, it helps prioritize Vulnerability Management workflows, significantly shortening response cycles and securing your critical assets.
Assigner (CNA / source)：[email protected] Remove this filter
| CVE | Description | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|
| CVE-2026-39558 | Unauthenticated Local File Inclusion in Malmö <= 2.2 versions. | 8.1 | 0.34% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39557 | Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions. | 8.1 | 0.40% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39554 | Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions. | 8.1 | 0.31% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39549 | Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions. | 8.1 | 0.42% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39547 | Unauthenticated Local File Inclusion in Getaway < 1.8 versions. | 8.1 | 0.34% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39545 | Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions. | 8.1 | 0.40% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39539 | Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions. | 8.1 | 0.31% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39537 | Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions. | 8.1 | 0.42% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39529 | Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions. | 9.8 | 0.38% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39522 | Unauthenticated Local File Inclusion in Solene <= 3.4 versions. | 8.1 | 0.42% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39446 | Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions. | 8.1 | 0.31% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39443 | Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions. | 8.1 | 0.31% | 2026-06-17 | 2026-06-17 |
| CVE-2026-39438 | Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions. | 9.3 | 0.37% | 2026-06-17 | 2026-06-17 |
| CVE-2026-34895 | Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions. | 8.1 | 0.34% | 2026-06-17 | 2026-06-17 |
| CVE-2026-34894 | Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions. | 8.1 | 0.42% | 2026-06-17 | 2026-06-17 |
| CVE-2026-34893 | Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions. | 8.1 | 0.34% | 2026-06-17 | 2026-06-17 |
| CVE-2026-27429 | Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions. | 9.8 | 0.53% | 2026-06-17 | 2026-06-17 |
| CVE-2026-27400 | Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions. | 8.6 | 0.51% | 2026-06-17 | 2026-06-17 |
| CVE-2026-27395 | Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. | 9.8 | 0.34% | 2026-06-17 | 2026-06-17 |
| CVE-2026-27041 | Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. | 9.9 | 0.32% | 2026-06-17 | 2026-06-17 |