Miggo at RSAC 2026!

Miggo Logo

Miggo Predictive Vulnerability Database

Comprehensive vulnerability intelligence for security teams to gain clarity into CVEs to prioritize and respond with precision.

Concerned about an active attack path? Talk to our security experts and see Miggo in action

Contact UsArrow Right
Hero Image
New Vulnerabilities

Top 10 CVEs

CVE-2025-29927

9.1
critical
Authorization Bypass in Next.js Middleware
Public FixFix Available
-
Vulnerable Functions3 Vulnerable Functions
Published
3/21/2025
Updated
3/2/2026

CVE-2021-44228

10
critical
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
12/10/2021
Updated
2/20/2026

CVE-2025-1974

9.8
critical
ingress-nginx admission controller RCE escalation
Public FixNo Fix
-
Vulnerable Functions2 Vulnerable Functions
Published
3/25/2025
Updated
2/4/2026

CVE-2025-55182

10
critical
React Server Components are Vulnerable to RCE
Public FixFix Available
-
Vulnerable Functions7 Vulnerable Functions
Published
12/3/2025
Updated
12/3/2025

CVE-2025-3248

9.8
critical
Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
4/7/2025
Updated
4/10/2025

CVE-2025-24813

9.8
critical
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
3/10/2025
Updated
3/19/2025

CVE-2023-50164

9.8
critical
Apache Struts vulnerable to path traversal
Public FixFix Available
-
Vulnerable Functions4 Vulnerable Functions
Published
12/7/2023
Updated
2/13/2025

CVE-2024-27348

9.8
critical
Apache HugeGraph-Server: Command execution in gremlin
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
4/22/2024
Updated
2/13/2025

CVE-2022-22965

9.8
critical
Remote Code Execution in Spring Framework
Public FixFix Available
KEV Listed
Vulnerable Functions2 Vulnerable Functions
Published
3/31/2022
Updated
1/29/2025

CVE-2024-53677

9.5
critical
Apache Struts file upload logic is flawed
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
12/11/2024
Updated
1/3/2025
New Vulnerabilities

New vulnerabilities last 30 days

CVE-2026-28350: lxml_html_clean: <base> tag injection through default Cleaner configuration
lxml-html-clean default Cleaner fails to sanitize base tags, causing HTML injection that hijacks relative URLs for phishing, credential theft, and stored XSS.
Miggo AI
Analysis:
Available
6.1
medium
3/5/2026
CVE-2026-28348: lxml_html_clean: CSS @import Filter Bypass via Unicode Escapes
lxml-html-clean CSS filter bypass from improper backslash stripping of Unicode escapes in style tags grants attackers external CSS loading and potential XSS.
Miggo AI
Analysis:
Available
6.1
medium
3/5/2026
CVE-2026-29054: Traefik: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`)
Traefik auth bypass via lowercase Connection header tokens deletes trusted X-Forwarded headers, causing downstream access control bypass and IP spoofing.
Miggo AI
Analysis:
Available
7.5
high
3/5/2026
CVE-2026-29053: Ghost Vulnerable to Remote Code Execution via Malicious Themes
Ghost RCE via malicious theme uploads grants attackers arbitrary code execution within the Node.js process through insecure Handlebars template rendering.
Miggo AI
Analysis:
Available
7.6
high
3/5/2026