Index

All dossiers

Every published dossier and chain dossier. Filter by exploitation status or vendor.

StatusAll Active exploitation PoC public Patched, monitoring Archived

VendorAll Adobe BerriAI BeyondTrust Cisco Citrix Collabora Drupal GitLab Ivanti Linux Node.js (Google Brotli)PHP Group SonicWall WordPress

Dossiers

CVE-2026-48356CRITICAL

PolyShell: Adobe Commerce / Magento unrestricted file upload (CVE-2026-48356)

Unauthenticated polyglot file upload via the Magento guest-cart REST API leads to webshells; mass-exploited since 2026-03 and added to CISA KEV on 2026-10-27.

Updated 2026-11-09

Chain dossiers

No published chain dossiers match these filters.