Skip to content
THREATWIRE

Tracker

Exploit Radar

PoC, exploit, and active exploitation are separate statuses. If it is not confirmed, the record says Unknown or No PoC.

Filters match the recorded status. Active exploitation is not implied by a proof of concept.

CriticalNo PoC

CVE-2026-59265

OpenOffice Java document code execution

RCE

Published 3d ago

CriticalPoC Available

CVE-2026-94545

Satori SVG injection affecting Next.js ImageResponse

RCE

Published 6d ago

CriticalNo PoC

CVE-2026-96760

Authlib JSON signature list treated as verified

Auth bypass

Published 7d ago

CriticalActive ExploitationKEV0-day

CVE-2026-88771

NetScaler unauthenticated command execution

RCE

Published 8d ago

CriticalPoC Available

CVE-2026-12227

Visual Composer unauthenticated local file inclusion

Other

Published 11d ago

CriticalActive ExploitationKEV

CVE-2026-60004

Gitea diffpatch Git hook code execution

RCE

Published 27 Jul 2026

CriticalPoC Available

CVE-2026-40281

Gotenberg ExifTool argument injection

Other

Published 6 May 2026

CriticalNo PoC

CVE-2026-27962

Authlib accepts a key embedded in the token

Auth bypass

Published 16 Mar 2026

CriticalActive ExploitationKEV0-day

CVE-2024-3400

PAN-OS GlobalProtect command injection

RCE

Published 12 Apr 2024

CriticalExploit Available

CVE-2024-3094

xz Utils supply-chain backdoor

Supply chain

Published 29 Mar 2024

CriticalActive ExploitationKEV

CVE-2021-44228

Apache Log4j JNDI remote code execution

RCE

Published 10 Dec 2021