CVE-20XX-?
agent?

Drop everything.

Critical CVEs that are confirmed exploited or very likely to be. Newest first.

3 CVEs · updated 2026-11-13 19:49 UTC

Reset all
  1. CVE-2026-102764

    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.

    Drop everything exploited Denial of service Network gear Beyondtrust Remote Support

    9.3 CRITICAL 79% exploit odds Fix listed
  2. CVE-2020-3161

    A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web server of a targeted device. A successful exploit could allow the attacker to remotely execute code with root privileges or cause a reload of an affected IP phone, resulting in a DoS condition.

    Drop everything exploited Denial of service Network gear Cisco Ip Phone 8865 Firmware

    9.8 CRITICAL 84% exploit odds Fix listed
  3. CVE-2007-1435

    Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request, which triggers memory corruption. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

    Drop everything Denial of service Network gear D-Link Tftp Server

    10.0 HIGH 46% exploit odds Fix listed

A CVE is listed as major when it is critical (CVSS 9.0 or higher) and either confirmed exploited in the wild with a real chance of more, or very likely to be exploited (EPSS 40% or more).