Top Notable Enterprise Remote Vulnerabilities
31-07-2026
A concise overview for IS leaders, emphasizing actively exploited vulnerabilities, their significance, and the critical need for remediation.
Currently Trending Enterprise Remote Vulnerabilities
Trending CVEs
Vulnerability
Notables
CVE-2026-16812
Vulnerability
Arista VeloCloud Orchestrator Unauthenticated OS Command Injection
Notables
Actively Exploited by Threat Actors
CVE-2026-20316
Vulnerability
Cisco Secure Firewall Management Center (FMC) Static-Credential Auth Bypass
Notables
Actively Exploited by Threat Actors
CVE-2025-68686
Vulnerability
Fortinet FortiOS Exposure of Sensitive Information via Symlink
Notables
Actively Exploited by Threat Actors
CVE-2026-16723
Vulnerability
Fastjson 1.x Unauthenticated RCE in Spring Boot Fat-JAR Deployments
Notables
Actively Exploited by Threat Actors
CVE-2026-35278
Vulnerability
Oracle PeopleSoft PeopleTools Pre-Auth RCE
Notables
Actively Exploited by Threat Actors
CVE-2026-60365
Vulnerability
Oracle HTTP Server / WebLogic Proxy Plug-in Second Unauthenticated Takeover
Notables
Potential Risk of Exploitation
CVE-2026-60880
Vulnerability
Oracle E-Business Suite Unauthenticated Takeover
Notables
Potential Risk of Exploitation
CVE-2026-60773
Vulnerability
Oracle Fusion Middleware Unauthenticated RCE
Notables
Potential Risk of Exploitation
CVE-2026-62549
Vulnerability
Oracle Fusion Middleware Second Unauthenticated RCE
Notables
Potential Risk of Exploitation
CVE-2026-35268
Vulnerability
Oracle Identity Manager Unauthenticated Vulnerability
Notables
Potential Risk of Exploitation
CVE-2026-63077
Vulnerability
JetBrains TeamCity On-Premises Unauthenticated RCE
Notables
Proof of Concept Available
CVE-2026-66066
Vulnerability
Ruby on Rails Active Storage Unauthenticated Arbitrary File Read via Image Upload
Notables
Proof of Concept Available
CVE-2026-60198
Vulnerability
Oracle WebLogic Server Core Unauthenticated Java Deserialization RCE via T3/IIOP
Notables
Potential Risk of Exploitation
CVE-2026-60206
Vulnerability
Oracle WebLogic Server Core Low-Privilege RCE with Scope Change over SAML
Notables
Potential Risk of Exploitation
CVE-2026-60208
Vulnerability
Oracle WebLogic Server Core Unauthenticated Confidentiality/Integrity Impact over HTTP
Notables
Potential Risk of Exploitation
CVE-2026-56159
Vulnerability
Windows DHCP Server Unauthenticated Heap Overflow RCE
Notables
Potential Risk of Exploitation
CVE-2026-50518
Vulnerability
Windows DHCP Server Second Unauthenticated Heap Overflow RCE
Notables
Potential Risk of Exploitation
CVE-2026-55008
Vulnerability
Microsoft Exchange Server Unauthenticated XSS Spoofing via Crafted Request
Notables
Potential Risk of Exploitation
CVE-2026-16221
Vulnerability
fast-uri (Node.js) SSRF/Origin Bypass
Notables
Proof of Concept Available
CVE-2026-14541
Vulnerability
WP Maps Pro (WordPress) Privilege Escalation via Administrator Account Creation
Notables
Proof of Concept Available
