Miggo Logo

Miggo Predictive Vulnerability Database

Comprehensive vulnerability intelligence for security teams to gain clarity into CVEs to prioritize and respond with precision.

Concerned about an active attack path? Talk to our security experts and see Miggo in action

Contact UsArrow Right
Hero Image
New Vulnerabilities

Top 10 CVEs

CVE-2025-3248

9.8
critical
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
4/7/2025
Updated
10/8/2026

CVE-2025-55182

10
critical
React Server Components are Vulnerable to RCE
Public FixFix Available
KEV Listed
Vulnerable Functions7 Vulnerable Functions
Published
12/3/2025
Updated
10/8/2026

CVE-2021-44228

10
critical
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
12/10/2021
Updated
8/11/2026

CVE-2025-29927

9.1
critical
Authorization Bypass in Next.js Middleware
Public FixFix Available
-
Vulnerable Functions3 Vulnerable Functions
Published
3/21/2025
Updated
6/17/2026

CVE-2025-24813

9.8
critical
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
3/10/2025
Updated
6/17/2026

CVE-2025-1974

9.8
critical
ingress-nginx admission controller RCE escalation
Public FixNo Fix
-
Vulnerable Functions2 Vulnerable Functions
Published
3/25/2025
Updated
6/17/2026

CVE-2024-53677

9.5
critical
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
12/11/2024
Updated
6/17/2026

CVE-2024-27348

9.8
critical
Apache HugeGraph-Server: Command execution in gremlin
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
4/22/2024
Updated
6/17/2026

CVE-2022-22965

9.8
critical
Remote Code Execution in Spring Framework
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
4/1/2022
Updated
6/17/2026

CVE-2023-50164

9.8
critical
Apache Struts vulnerable to path traversal
Public FixFix Available
-
Vulnerable Functions4 Vulnerable Functions
Published
12/7/2023
Updated
2/13/2025
New Vulnerabilities

New vulnerabilities last 30 days

CVE-2026-96620: Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
The Claude Agent SDK for Python passed the `resume` option to the Claude CLI without validation, allowing a value beginning with `-` to be interpreted as a
Miggo AI
Analysis:
Available
9.2
critical
10/16/2026
CVE-2026-102834: JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS
### Summary `IPCameraFrameGrabber` parses the `Content-Length` value from the multipart MJPEG HTTP stream returned by the configured IP camera without any
Miggo AI
Analysis:
Available
7.5
high
10/16/2026
CVE-2026-105192: LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport
### Summary LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport ###
Miggo AI
Analysis:
Available
9.8
critical
10/16/2026
GHSA-6fj4-rcr3-r7rr: lopdf has a stack overflow via deeply nested PDF objects
`lopdf::Document::load_mem` (and the other `load*` entry points) parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose
Miggo AI
Analysis:
Available
7.5
high
10/16/2026