tag
Cwe-288
Critical
WordPress Simple Link Directory Unauthenticated Password Reset to Admin Takeover (CVE-2025-49901)
CVE-2025-49901·
WordPress "Simple Link Directory" plugin (qc-simple-link-directory by quantumcloud)
patched
Critical
WordPress Mobile Builder Plugin JWT Authentication Bypass to Admin Account Creation (CVE-2025-68860)
CVE-2025-68860·
WordPress "Mobile Builder" plugin
unpatched
Critical
FortiWeb `cgi-bin/fwbcgi` Path Traversal Authentication Bypass Leading to Rogue Admin Creation (CVE-2025-64446)
CVE-2025-64446·
Fortinet FortiWeb (Web Application Firewall appliance)
unpatched
Critical
NVIDIA Triton Inference Server SageMaker Auth Bypass to Unauthenticated RCE (CVE-2026-24207)
CVE-2026-24207 (sibling: CVE-2026-24206, Vertex AI, analysis only)·
NVIDIA Triton Inference Server
patched
Critical
Fortinet FortiOS / FortiProxy Authentication Bypass (CVE-2024-55591)
CVE-2024-55591 (Fortinet FG-IR-24-535)·
Fortinet FortiOS/FortiProxy management interfaces
unpatched