Top Notable Enterprise Remote Vulnerabilities
06-03-2026
A concise overview for IS leaders, emphasizing actively exploited vulnerabilities, their significance, and the critical need for remediation.
Currently Trending Enterprise Remote Vulnerabilities
Trending CVEs
Vulnerability
Notables
CVE-2026-22719
Vulnerability
VMware Aria Operation Command Injection
Notables
Potential Risk of Exploitation
CVE-2026-20079
Vulnerability
Cisco Secure Firewall Management Code Execution
Notables
Potential Risk of Exploitation
CVE-2026-20131
Vulnerability
Cisco Secure Firewall Management Code Execution
Notables
Potential Risk of Exploitation
CVE-2026-20122
Vulnerability
Cisco Catalyst SD-WAN Manager API Arbitrary File Overwrite
Notables
Actively Exploited by Threat Actors
CVE-2026-20128
Vulnerability
Cisco Catalyst SD-WAN Manager Privilege Escalation
Notables
Actively Exploited by Threat Actors
CVE-2026-28289
Vulnerability
FreeScout Helpdesk Authenticated RCE
Notables
Proof of Concept Available, Actively Exploited
CVE-2026-27971
Vulnerability
Qwik Framework Code Execution
Notables
Limited Public Information Available
CVE-2025-14500
Vulnerability
IceWarp14 X-File-Operation Header Command Injection
Notables
Actively Exploited by Threat Actors
CVE-2026-2329
Vulnerability
Grandstream VoIP Phone RCE
Notables
Limited Public Information Available
CVE-2026-3180
Vulnerability
Contest Gallery WordPress Plugin Blind SQL Injection
Notables
Limited Public Information Available
CVE-2026-27739
Vulnerability
Angular SSR Server-Side Request Forgery
Notables
Limited Public Information Available
CVE-2026-2256
Vulnerability
ModelScope ms-agent Command Injection
Notables
Limited Public Information Available
CVE-2026-1492
Vulnerability
User Registration and Membership WordPress Plugin Privilege Escalation
Notables
Potential Risk of Exploitation
CVE-2026-27699
Vulnerability
Node.js Basic-ftp client Path Traversal
Notables
Potential Risk of Exploitation
CVE-2025-12543
Vulnerability
Undertow HTTP Server Core Host Header Validation Vulnerability
Notables
Limited Public Information Available
CVE-2026-25755
Vulnerability
jsPDF Library Arbitrary Object Injection
Notables
Proof of Concept Available, Actively Exploited
CVE-2026-27822
Vulnerability
RustFS Console Stored XSS
Notables
Proof of Concept Available, Actively Exploited
CVE-2026-26119
Vulnerability
Windows Admin Center Privilege Escalation
Notables
Actively Exploited by Threat Actors
CVE-2026-25611
Vulnerability
MongoDB Server DoS
Notables
Potential Risk of Exploitation
CVE-2026-29000
Vulnerability
pac4j-jwt Authentication Bypass
Notables
Potential Risk of Exploitation
