Top Notable Enterprise Remote Vulnerabilities
28-08-2026
A concise overview for IS leaders, emphasizing actively exploited vulnerabilities, their significance, and the critical need for remediation.
Currently Trending Enterprise Remote Vulnerabilities
Trending CVEs
Vulnerability
Notables
CVE-2026-60004
Vulnerability
Gitea diffpatch API Git Hook Injection RCE
Notables
Actively Exploited by Threat Actors
CVE-2026-8452
Vulnerability
Citrix NetScaler ADC / Gateway SAML Heap Overflow RCE
Notables
Actively Exploited by Threat Actors
CVE-2026-64849
Vulnerability
MLflow Unauthenticated SSRF via Webhook Redirect Bypass
Notables
Actively Exploited by Threat Actors
CVE-2026-77806
Vulnerability
SPIP CMS Unauthenticated RCE via X-Spip-Filtre Header Injection
Notables
Actively Exploited by Threat Actors
CVE-2026-69836
Vulnerability
Microsoft Entra ID Deserialization of Untrusted Data RCE
Notables
Potential Risk of Exploitation
CVE-2026-19478
Vulnerability
GitLab CE/EE GraphQL Code Injection
Notables
Proof of Concept Available
CVE-2026-42167
Vulnerability
ProFTPD mod_sql Pre-Auth SQL Injection to RCE
Notables
Proof of Concept Available
CVE-2026-14669
Vulnerability
PostgreSQL to_char() Heap Buffer Overflow RCE
Notables
Proof of Concept Available
CVE-2026-32475
Vulnerability
Elementor Pro Unrestricted File Upload to RCE (WordPress)
Notables
Proof of Concept Available
CVE-2026-18963
Vulnerability
Keycloak Unauthenticated Account Takeover via Password Reset Bypass
Notables
Actively Exploited by Threat Actors
CVE-2026-75604
Vulnerability
Next.js Windows Path Traversal to Unauthenticated RCE
Notables
Proof of Concept Available
CVE-2026-19490
Vulnerability
Citrix NetScaler ADC / Gateway Authentication Bypass
Notables
Potential Risk of Exploitation
CVE-2026-59568
Vulnerability
Zscaler Client Connector Unauthenticated Multi-Flaw RCE Chain
Notables
Potential Risk of Exploitation
CVE-2026-15748
Vulnerability
Forminator Forms Unauthenticated Arbitrary File Upload RCE (WordPress)
Notables
Proof of Concept Available
CVE-2026-61979
Vulnerability
miniOrange SAML SP SSO Signature Algorithm Confusion Auth Bypass (WordPress)
Notables
Actively Exploited by Threat Actors
CVE-2026-15981
Vulnerability
miniOrange SAML SSO Login openssl_verify Mishandling Auth Bypass (WordPress)
Notables
Actively Exploited by Threat Actors
CVE-2026-57909
Vulnerability
WatchGuard Agent Path Traversal to Unauthenticated RCE
Notables
Potential Risk of Exploitation
CVE-2026-65105
Vulnerability
NVIDIA NemoClaw Unauthenticated AI Agent Hijacking via DNS Rebinding
Notables
Proof of Concept Available
CVE-2026-19650
Vulnerability
GitLab CE/EE GraphQL CSRF via GET Mutations
Notables
Proof of Concept Available
CVE-2026-56162
Vulnerability
Azure SQL Database Authentication Weakness
Notables
Potential Risk of Exploitation
CVE-2026-19598
Vulnerability
Pods WordPress Plugin Privilege Escalation
Notables
Potential Risk of Exploitation
