PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

pizzafy-1.0 - SQLi

South River Technologies Titan MFT Server 26.0.0 - code execution

Synametrics Syncrify 6.2 - command execution

Keycloak 26.7.2 - Unauthenticated Account Takeover

Open eClass 3.15 - RCE

Automotive Shop Management System 1.0 - SQLi

Edimax BR-6478AC firmware v2.20 - authenticated command injection

Exasol Database 7.1.30 - command execution

Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

Teltonika_RutOS 00.07.06.21 - command injection

TigerGraph_Community_Edition 4.2.4 - arbitrary file write

WordPress 7.0.2 - Path Travesal

Food-Ordering 1.0 - LFI

Ecava_ntegraXor IGX_16.0.701.10 - RCE

Krayin CRM 2.2.4 - IDOR

SuiteCRM 8.10.1 - Authenticated SSRF

InvoicePlane 1.7.1 - RCE

POMS oretnom23v1.0 - SQLi vulnerabilities