Vulnerabilities
Summary — last 7 days
New vulnerabilities3,501▲ 857 vs. last week
Critical / high1,669▲ 268 vs. last week
New active exploitation (KEV)5→ no change vs. last week
Unscored (no CVSS)256▲ 244 vs. last week
6 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 0.64% | 💥 PoC | DTS Electronics Industry AND Trade LTD Redline Wr3200AI | 6/5/2026 | 7/23/2026 | Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8. | |
| Modified | Critical (9.8) | 0.77% | — | Redline Router Firmware | 4/14/2023 | 6/17/2026 | Authentication Bypass by Primary Weakness vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass. This issue affects Redline Router: before 7.17. | |
| Modified | Critical (9.8) | 0.77% | — | Redline Router Firmware | 4/14/2023 | 6/17/2026 | Authentication Bypass by Alternate Name vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass. This issue affects Redline Router: before 7.17. | |
| Modified | Medium (4.3) | 3.4% | 💥 Exploit | Post-scriptum Redline | 9/28/2011 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. | |
| Modified | High (7.5) | 8.0% | 💥 Exploit | Cardinal CMS Project Cardinal CMSRedlinesoft Lanai CMSSitex CMS Project Sitex CMSSyntax CMS Project Syntax CMS | 10/1/2007 | 6/16/2026 | Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown… | |
| Modified | High (7.5) | 2.9% | 💥 Exploit | Redline Software Lanai CMS | 8/8/2007 | 6/16/2026 | Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via (1) the mid parameter in an faqviewgroup action in the FAQ Modules, (2) the cid parameter in the EZSHOPINGCART Modules, or (3) the gid parameter in a view action in the GALLERY… |