目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Cybersecurity Vulnerability Intelligence: CVE, KEV, EPSS and PoC Tracking

A focused English hub for security teams tracking high-risk vulnerabilities, known exploited CVEs, exploitation probability, public exploit mappings, proof-of-concept availability, affected products and mitigation references.

Critical RCE vulnerabilities Known exploited vulnerabilities High EPSS exploitation probability Public exploit mappings CVE proof-of-concept database AI-generated PoC analysis Featured AI PoCs Reproduced vulnerabilities RCE CVE tag In-the-wild CVE tag

Vendor Vulnerability Hubs

Microsoft vulnerabilities Cisco vulnerabilities Fortinet vulnerabilities Palo Alto Networks vulnerabilities Ivanti vulnerabilities VMware vulnerabilities Apache Software Foundation vulnerabilities Linux vulnerabilities Oracle Corporation vulnerabilities Adobe vulnerabilities Apple vulnerabilities Google vulnerabilities

Recently Published Critical CVEs

12 CVEs
CVE Title CVSS Vendor Published
CVE-2026-116508 TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow - A950RG CWE-121 10.0 TOTOLINK 2026-10-26
CVE-2026-116506 TOTOLINK A950RG firewall.so apmib_set command injection - A950RG CWE-77 9.9 TOTOLINK 2026-10-26
CVE-2026-116505 TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection - A950RG CWE-77 9.1 TOTOLINK 2026-10-26
CVE-2026-116504 TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection - A950RG CWE-77 9.9 TOTOLINK 2026-10-26
CVE-2026-110720 Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules - Tooling CWE-863 9.9 HashiCorp 2026-10-26
CVE-2026-10757 BUG-000187511 - ArcGIS Server has a security vulnerability. - ArcGIS Server CWE-89 9.8 Esri 2026-10-26
CVE-2026-102649 Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset - burrito CWE-306 9.9 padok-team 2026-10-26
CVE-2026-115905 zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE - zip2 CWE-20 10.0 zip-rs 2026-10-26
CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE - OpenHands Software Agent SDK CWE-1327 9.8 OpenHands 2026-10-26
CVE-2026-77055 Improper Privilege Assignment in boneIO - black_debian_images CWE-266 9.3 boneIO 2026-10-26
CVE-2026-93328 Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write - MCP Toolbox for Databases (googleapis/mcp-toolbox) CWE-862 9.3 Google Cloud 2026-10-26
CVE-2026-65184 Avocent ACS8000 wsserver command injection - Avocent ACS8000 CWE-78 9.8 Vertiv 2026-10-26

Live Vulnerability Queues

CISA KEV Known exploited vulnerabilities prioritized by date added.
High EPSS Risk CVEs with elevated exploitation probability.
Public Exploits ExploitDB, Metasploit and Nuclei mappings.
AI PoC Analysis AI-generated proof-of-concept analysis and triage notes.

How to use this vulnerability intelligence hub

Start with KEV and EPSS when prioritizing emergency patching. Use public exploit mappings and PoC pages to understand exploit availability, then open the CVE detail page for CVSS vectors, affected versions, CWE classification, references, AI deep analysis and mitigation context.