Top Notable Enterprise Remote Vulnerabilities

10-07-2026
A concise overview for IS leaders, emphasizing actively exploited vulnerabilities, their significance, and the critical need for remediation.
Currently Trending Enterprise Remote Vulnerabilities
Trending CVEs
Vulnerability
Notables
CVE-2026-55255
Vulnerability
Langflow Cross-Tenant IDOR + RCE Chain
Notables
Actively Exploited by Threat Actors
CVE-2026-56290
Vulnerability
Joomlack Page Builder Unauthenticated File Upload
Notables
Actively Exploited by Threat Actors
CVE-2026-48908
Vulnerability
JoomShaper SP Page Builder Zero-Day File Upload
Notables
Actively Exploited by Threat Actors
CVE-2026-11405
Vulnerability
Tenda Router Hidden Backdoor in httpd Binary
Notables
Actively Exploited by Threat Actors
CVE-2026-20896
Vulnerability
Gitea Docker Reverse Proxy Header Spoofing
Notables
Actively Exploited by Threat Actors
CVE-2026-57517
Vulnerability
Control Web Panel (CWP) Blind SQLi to RCE
Notables
Proof of Concept Available
CVE-2026-33112
Vulnerability
Microsoft Office SharePoint Deserialization RCE
Notables
Proof of Concept Available
CVE-2026-42588
Vulnerability
Apache ActiveMQ Jolokia addNetworkConnector RCE (Patch Bypass)
Notables
Proof of Concept Available
CVE-2026-45504
Vulnerability
Microsoft Exchange Server SSRF/Arbitrary File Read
Notables
Proof of Concept Available
CVE-2026-44963
Vulnerability
Veeam Backup & Replication Authenticated Domain User RCE
Notables
Proof of Concept Available
CVE-2026-40138
Vulnerability
BeyondTrust Remote Support/PRA Pre-Auth Authentication Bypass
Notables
Proof of Concept Available
CVE-2026-40139
Vulnerability
BeyondTrust Remote Support Auth Bypass Companion
Notables
Proof of Concept Available
CVE-2026-50548
Vulnerability
Cursor IDE DuneSlide Sandbox Escape / RCE
Notables
Proof of Concept Available
CVE-2026-48939
Vulnerability
iCagenda Joomla Extension Arbitrary File Upload RCE
Notables
Proof of Concept Available
CVE-2026-40685
Vulnerability
Exim MTA JSON Lookup OOB Heap Write
Notables
Proof of Concept Available
CVE-2026-6896
Vulnerability
GitLab EE Privilege Escalation
Notables
Proof of Concept Available
CVE-2026-0288
Vulnerability
Palo Alto PAN-OS User-ID TSA Buffer Overflow
Notables
Potential Risk of Exploitation
CVE-2026-50746
Vulnerability
UniFi Connect Application Improper Access Control RCE
Notables
Potential Risk of Exploitation
CVE-2026-29146
Vulnerability
Apache Tomcat Padding Oracle in EncryptInterceptor
Notables
Potential Risk of Exploitation
CVE-2026-14355
Vulnerability
PHP AES-WRAP-PAD Algorithm Memory Corruption
Notables
Potential Risk of Exploitation
CVE-2026-23479
Vulnerability
Redis Use-After-Free / RCE in Unblock Client Flow
Notables
Potential Risk of Exploitation
CVE-2026-55607
Vulnerability
Claude Code Worktree Path Traversal (CI/CD Risk)
Notables
Proof of Concept Available