tag
Cwe-20
Critical
Laravel `files.*` Wildcard Validation Bypass via Polyglot JPEG+PHP Upload (CVE-2025-27515)
CVE-2025-27515·
Laravel Framework (file upload validation using files.* wildcard rules)
unpatched
Critical
Apache Parquet-Avro Schema Deserialization RCE/SSRF — Incomplete-Fix Bypass (CVE-2025-30065)
CVE-2025-30065·
Apache Parquet Java (parquet-avro module)
patched
High
UnPoller Path Traversal / Arbitrary File Read via file:// Password Prefix (CVE-2026-36851)
CVE-2026-36851·
UnPoller (unpoller/unpoller)
unpatched
Critical
DbGate Unauthenticated RCE via JSON Script Runner (CVE-2026-47668)
CVE-2026-47668·
DbGate (dbgate-serve — web-based database management tool)
patched
Critical
Apache Solr UNC Path Validation Bypass to RCE (CVE-2026-22444)
CVE-2026-22444·
Apache Solr, standalone mode, running on Windows
unpatched