Every exploited vulnerability added to CISA KEV in 2026
All 282 bugs attackers were confirmed using this year, newest first, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
282
bugs added in 2026
All of 2025: 245.
96 of 242
remotely exploitable ones have a free VEDAS detection rule
146 don’t yet; see detection gaps. 40 need local access and are out of scope.
27
are linked to ransomware
CISA’s Known Exploited Vulnerabilities catalogue lists bugs the US government has confirmed attackers are using. US federal agencies must fix them by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-30 | CVE-2026-118527 | Ivanti Connect Secure | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | None yet | No | ||
| 2026-10-30 | CVE-2026-111357 | Ivanti Connect Secure | Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | 0.01 | 0.52 | Out of scope (local) | No |
| 2026-10-29 | CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | 0.27 | 0.98 | None yet | No |
| 2026-10-29 | CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | 0.01 | 0.74 | None yet | No |
| 2026-10-28 | CVE-2026-46300 | Linux Kernel | Linux Kernel Missing Initialization of a Variable Vulnerability | 0.16 | 0.98 | Out of scope (local) | No |
| 2026-10-28 | CVE-2026-41709 | Broadcom VMware ESX | Broadcom VMWare ESX Insufficient Logging Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-10-27 | CVE-2026-48356 | Adobe Commerce and Magento | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | 0.45 | 0.98 | None yet | No |
| 2026-10-27 | CVE-2026-111497 | Google Brotli | Google Brotli Unchecked Return Value Vulnerability | 0.83 | 0.98 | None yet | No |
| 2026-10-26 | CVE-2026-109619 | PHP Group PHP | PHP Stale Internal Request-State Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2026-10-26 | CVE-2026-109618 | PHP Group PHP | PHP Memory Corruption Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2026-10-23 | CVE-2026-114625 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator SQL Injection Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-10-23 | CVE-2026-110447 | Collabora Collabora Online, Built-in CODE Server | Collabora Online, Built-in CODE Server OS Command Injection Vulnerability | 0.73 | 0.99 | None yet | No |
| 2026-10-20 | CVE-2026-96656 | Plex Media Server | Plex Media Server External Control of File Name or Path Vulnerability | 0.02 | 0.98 | Suricata | No |
| 2026-10-20 | CVE-2026-96655 | Plex Media Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 0.02 | 0.99 | Suricata | No |
| 2026-10-20 | CVE-2026-96654 | Plex Media Server | Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-10-20 | CVE-2026-96652 | Plex Media Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-10-20 | CVE-2026-110936 | Siemens Software Center | Siemens Software Center Uncontrolled Search Path Element Vulnerability | 0.01 | 0.51 | Out of scope (local) | No |
| 2026-10-20 | CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | 0.03 | 0.51 | None yet | No |
| 2026-10-16 | CVE-2026-102764 | BeyondTrust Remote Support | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 0.19 | 0.55 | None yet | No |
| 2026-10-16 | CVE-2025-61624 | Fortinet Multiple Products | Fortinet Multiple Products Path Traversal Vulnerability | 0.01 | 0.51 | Out of scope (local) | No |
| 2026-10-15 | CVE-2026-21589 | Atlassian Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | No |
| 2026-10-14 | CVE-2026-76519 | Cisco Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-10-14 | CVE-2026-105134 | Ahsay AhsayCBS | Ahsay AhsayCBS Command Injection Vulnerability | 0.82 | 0.98 | None yet | No |
| 2026-10-14 | CVE-2026-105133 | Ahsay AhsayCBS | Ahsay AhsayCBS Improper Authentication Vulnerability | 0.79 | 0.99 | None yet | No |
| 2026-10-14 | CVE-2026-0322 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | 0.02 | 0.51 | None yet | No |
| 2026-10-13 | CVE-2026-96951 | Microsoft Windows | Microsoft Windows Command Injection Vulnerability | 0.10 | 0.97 | None yet | No |
| 2026-10-13 | CVE-2026-104935 | Ivanti Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 0.87 | 0.99 | None yet | No |
| 2026-10-08 | CVE-2023-22894 | Strapi Strapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | 0.04 | 0.98 | None yet | No |
| 2026-10-08 | CVE-2021-3199 | ONLYOFFICE Docs | ONLYOFFICE Docs Server Path Traversal Vulnerability | 0.30 | 0.59 | None yet | No |
| 2026-10-08 | CVE-2016-3081 | Apache Struts | Apache Struts Command Injection Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | No |
| 2026-10-08 | CVE-2015-5477 | ISC BIND | ISC BIND Data Processing Errors Vulnerability | 1.00 | 0.98 | None yet | No |
| 2026-10-08 | CVE-2015-3306 | ProFTPD ProFTPD | ProFTPD Improper Access Control Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | No |
| 2026-10-04 | CVE-2026-88779 | Citrix NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.11 | 0.54 | None yet | No |
| 2026-10-02 | CVE-2026-102490 | Zammad GmbH Zammad | Zammad GmbH Zammad Improper Privilege Management Vulnerability | 0.11 | 0.53 | Out of scope (local) | No |
| 2026-10-02 | CVE-2026-102489 | Zammad GmbH Zammad | Zammad GmbH Zammad Session Fixation Vulnerability | 0.22 | 0.98 | None yet | No |
| 2026-10-01 | CVE-2026-104286 | Fortinet FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 0.05 | 0.75 | None yet | No |
| 2026-09-30 | CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 0.39 | 0.98 | Nuclei · Suricata | No |
| 2026-09-29 | CVE-2026-86950 | Apple Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | 0.26 | 0.97 | None yet | No |
| 2026-09-27 | CVE-2026-88772 | Citrix NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.78 | 0.98 | Nuclei · Suricata | No |
| 2026-09-27 | CVE-2026-88771 | Citrix NetScaler | Citrix NetScaler Improper Input Validation Vulnerability | 0.82 | 0.98 | Nuclei · Suricata | No |
| 2026-09-25 | CVE-2026-87902 | WordPress Core | WordPress Core Remote File Inclusion Vulnerability | 0.96 | 0.98 | Nuclei · Suricata | No |
| 2026-09-25 | CVE-2026-67279 | MikroTik RouterOS | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-09-25 | CVE-2026-65660 | Microsoft SharePoint | Microsoft SharePoint Code Injection Vulnerability | 0.08 | 0.98 | Suricata | No |
| 2026-09-24 | CVE-2026-71362 | Adobe Commerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | 0.90 | 0.98 | Nuclei · Suricata | No |
| 2026-09-24 | CVE-2026-5430 | WSO2 Multiple Products | WSO2 Multiple Products Path Traversal Vulnerability | 0.22 | 0.98 | None yet | No |
| 2026-09-22 | CVE-2026-94127 | F5 BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 0.27 | 0.98 | None yet | No |
| 2026-09-22 | CVE-2026-93952 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-09-22 | CVE-2026-93616 | Check Point Multiple Products | Check Point Multiple Products Path Traversal Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-09-22 | CVE-2026-85102 | Check Point Multiple Products | Check Point Multiple Products Improper Certificate Validation Vulnerability | 0.54 | 0.64 | None yet | No |
| 2026-09-21 | CVE-2026-7273 | Zyxel GS1900 Series Switches | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 0.03 | 0.51 | None yet | No |
| 2026-09-18 | CVE-2026-53266 | Linux Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 0.01 | 0.97 | None yet | No |
| 2026-09-18 | CVE-2025-39964 | Linux Kernel | Linux Kernel Race Condition Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-09-18 | CVE-2025-39682 | Linux Kernel | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 0.03 | 0.97 | None yet | No |
| 2026-09-16 | CVE-2026-87886 | Acronis Backup | Acronis Backup Incorrect Default Permissions Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2026-09-16 | CVE-2026-76460 | Cisco Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 0.76 | 0.98 | None yet | No |
| 2026-09-16 | CVE-2026-58704 | Google Pixel | Google Pixel Improper Authorization Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-09-14 | CVE-2026-76461 | Cisco Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | 0.30 | 0.98 | None yet | No |
| 2026-09-11 | CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | No |
| 2026-09-11 | CVE-2026-84869 | ConnectWise ScreenConnect | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-09-11 | CVE-2026-42018 | JFrog Artifactory | JFrog Artifactory Improper Authentication Vulnerability | 0.10 | 0.98 | Nuclei · Suricata | No |
| 2026-09-11 | CVE-2026-42016 | JFrog Artifactory | JFrog Artifactory Incorrect Authorization Vulnerability | 0.09 | 0.53 | None yet | No |
| 2026-09-10 | CVE-2026-86060 | MikroTik RouterOS | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | 0.06 | 0.98 | None yet | No |
| 2026-09-10 | CVE-2026-67277 | MikroTik RouterOS | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | 0.02 | 0.51 | None yet | No |
| 2026-09-09 | CVE-2026-87491 | Google Chromium V8 | Google Chromium V8 Out of Bounds Write Vulnerability | 0.04 | 0.98 | None yet | No |
| 2026-09-09 | CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.89 | 0.98 | Nuclei · Suricata | No |
| 2026-09-09 | CVE-2026-19490 | Citrix NetScaler | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.33 | 0.98 | Nuclei | No |
| 2026-09-09 | CVE-2025-25249 | Fortinet Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 0.04 | 0.52 | None yet | No |
| 2026-09-08 | CVE-2026-86218 | N-able N-central | N-able N-central Static Code Injection Vulnerability | 0.15 | 0.99 | Nuclei · Suricata | No |
| 2026-09-08 | CVE-2026-85880 | Microsoft Windows | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 0.00 | 0.52 | Out of scope (local) | No |
| 2026-09-08 | CVE-2026-81963 | Microsoft Windows | Microsoft Windows Link Following Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2026-09-08 | CVE-2026-75650 | Adobe Commerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 0.04 | 0.97 | None yet | No |
| 2026-09-04 | CVE-2026-85046 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-09-02 | CVE-2026-9586 | Sangoma Switchvox | Sangoma Switchvox SQL Injection Vulnerability | 0.19 | 0.98 | Nuclei · Suricata | No |
| 2026-09-02 | CVE-2026-83549 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 0.10 | 0.98 | Out of scope (local) | No |
| 2026-09-02 | CVE-2026-83548 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 0.08 | 0.99 | None yet | No |
| 2026-09-02 | CVE-2026-82329 | JFrog Artifactory | JFrog Artifactory Improper Authentication Vulnerability | 0.14 | 0.98 | Nuclei · Suricata | No |
| 2026-09-02 | CVE-2026-59822 | BerriAI LiteLLM | BerriAI LiteLLM Improper Authentication Vulnerability | 0.01 | 0.99 | Nuclei · Suricata | No |
| 2026-09-02 | CVE-2026-49869 | Kestra Kestra OSS | Kestra OSS OS Command Injection Vulnerability | 0.02 | 0.98 | Nuclei · Suricata | No |
| 2026-09-02 | CVE-2026-48710 | Kludex Starlette | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 0.70 | 0.98 | Nuclei · Suricata | No |
| 2026-08-31 | CVE-2026-82078 | PaperCut NG/MF | PaperCut NG/MF Unsafe Reflection Vulnerability | 0.63 | 0.98 | None yet | No |
| 2026-08-31 | CVE-2026-81578 | PaperCut NG/MF | PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | 0.85 | 0.99 | Nuclei · Suricata | No |
| 2026-08-27 | CVE-2026-66384 | JFrog Artifactory | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-08-27 | CVE-2026-53362 | Linux Kernel | Linux Kernel Unspecified Vulnerability | 0.01 | 0.97 | Out of scope (local) | No |
| 2026-08-27 | CVE-2023-49105 | ownCloud ownCloud | ownCloud Improper Authentication Vulnerability | 0.43 | 0.99 | None yet | No |
| 2026-08-26 | CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.01 | 0.97 | None yet | No |
| 2026-08-26 | CVE-2022-0995 | Linux Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 0.09 | 0.98 | Out of scope (local) | No |
| 2026-08-26 | CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professional | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | 0.83 | 0.98 | Suricata | No |
| 2026-08-26 | CVE-2019-1068 | Microsoft SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | 0.57 | 0.98 | None yet | No |
| 2026-08-26 | CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | 0.05 | 0.99 | Out of scope (local) | No |
| 2026-08-26 | CVE-2015-3246 | Red Hat Libuser | Red Hat Libuser Race Condition Vulnerability | 0.09 | 0.98 | Out of scope (local) | No |
| 2026-08-25 | CVE-2026-60004 | Gitea Gitea | Gitea Code Injection Vulnerability | 0.24 | 0.98 | Nuclei · Suricata | No |
| 2026-08-24 | CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 0.73 | 0.97 | None yet | No |
| 2026-08-21 | CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 0.72 | 0.98 | Nuclei · Suricata | No |
| 2026-08-20 | CVE-2026-72530 | TrueConf Server | TrueConf Server Code Injection Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-08-20 | CVE-2026-72529 | TrueConf Server | TrueConf Server Missing Authentication for Critical Function Vulnerability | 0.01 | 0.98 | None yet | No |
| 2026-08-19 | CVE-2026-64849 | MLflow MLflow | MLflow Server-Side Request Forgery Vulnerability | 0.10 | 0.99 | Nuclei · Suricata | No |
| 2026-08-18 | CVE-2026-65400 | Apple macOS | Apple macOS Improper Authentication Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-08-18 | CVE-2026-59310 | Broadcom VMware vCenter | Broadcom VMware vCenter Path Traversal Vulnerability | 0.03 | 0.99 | Suricata | Yes |
| 2026-08-18 | CVE-2026-55040 | Microsoft SharePoint | Microsoft SharePoint Weak Authentication Vulnerability | 0.70 | 0.98 | None yet | No |
| 2026-08-18 | CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 0.77 | 0.92 | None yet | No |
| 2026-08-17 | CVE-2025-62593 | Ray-Project Ray | Ray-Project Ray Code Injection Vulnerability | 0.60 | 0.99 | Nuclei · Suricata | No |
| 2026-08-11 | CVE-2026-72898 | Metabase Metabase | Metabase SQL Injection Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2026-08-11 | CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 0.09 | 0.53 | Out of scope (local) | No |
| 2026-08-11 | CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-08-07 | CVE-2026-8037 | Progress LoadMaster | Progress LoadMaster Command Injection Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | No |
| 2026-08-05 | CVE-2026-63077 | JetBrains TeamCity | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 0.94 | 0.99 | Nuclei · Suricata | Yes |
| 2026-08-04 | CVE-2026-9198 | IBM Langflow | IBM Langflow Code Injection Vulnerability | 0.29 | 0.99 | Nuclei · Suricata | No |
| 2026-08-04 | CVE-2026-34486 | Apache Tomcat | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 0.99 | 0.98 | None yet | No |
| 2026-08-04 | CVE-2026-18556 | N-able N-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.08 | 0.98 | None yet | No |
| 2026-08-03 | CVE-2026-18577 | N-able N-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.15 | 0.98 | Nuclei · Suricata | No |
| 2026-07-29 | CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 0.35 | 0.98 | None yet | Yes |
| 2026-07-27 | CVE-2026-16812 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-07-27 | CVE-2025-68686 | Fortinet FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-07-22 | CVE-2026-50522 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.03 | 0.98 | None yet | No |
| 2026-07-22 | CVE-2026-16232 | Check Point SmartConsole | Check Point SmartConsole Improper Authentication Vulnerability | 0.04 | 0.99 | None yet | No |
| 2026-07-21 | CVE-2026-63030 | WordPress Core | WordPress Core Interpretation Conflict Vulnerability | 0.11 | 0.98 | Nuclei · Suricata | No |
| 2026-07-21 | CVE-2026-60137 | WordPress Core | WordPress Core SQL Injection Vulnerability | 0.05 | 0.98 | None yet | No |
| 2026-07-21 | CVE-2026-0770 | Langflow Langflow | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 0.63 | 0.98 | Nuclei · Suricata | No |
| 2026-07-21 | CVE-2021-27137 | DD-WRT DD-WRT | DD-WRT Stack-Based Buffer Overflow Vulnerability | 0.04 | 0.84 | None yet | No |
| 2026-07-16 | CVE-2026-58644 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.16 | 0.98 | Nuclei · Suricata | No |
| 2026-07-16 | CVE-2026-39808 | Fortinet FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 0.93 | 0.98 | Nuclei · Suricata | No |
| 2026-07-16 | CVE-2026-25089 | Fortinet FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 0.76 | 0.68 | None yet | No |
| 2026-07-15 | CVE-2026-46817 | Oracle E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | 0.12 | 0.54 | None yet | No |
| 2026-07-15 | CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-07-14 | CVE-2026-56164 | Microsoft SharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-07-14 | CVE-2026-56155 | Microsoft Active Directory Federation Services | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 0.00 | 0.52 | Out of scope (local) | No |
| 2026-07-14 | CVE-2026-15410 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | 0.12 | 0.54 | None yet | Yes |
| 2026-07-14 | CVE-2026-15409 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 0.07 | 0.98 | None yet | Yes |
| 2026-07-13 | CVE-2008-4128 | Cisco IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | 0.34 | 0.98 | None yet | No |
| 2026-07-10 | CVE-2026-56291 | Balbooa Forms | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 0.15 | 0.99 | Nuclei · Suricata | No |
| 2026-07-10 | CVE-2026-48939 | iCagenda iCagenda | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 0.20 | 0.98 | Nuclei · Suricata | No |
| 2026-07-07 | CVE-2026-56290 | Joomlack Page Builder | Joomlack Page Builder Improper Access Control Vulnerability | 0.31 | 0.98 | Nuclei · Suricata | No |
| 2026-07-07 | CVE-2026-55255 | Langflow Langflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 0.01 | 0.97 | None yet | No |
| 2026-07-07 | CVE-2026-48908 | JoomShaper SP Page Builder | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | 0.89 | 0.99 | Nuclei · Suricata | No |
| 2026-07-07 | CVE-2026-48282 | Adobe ColdFusion | Adobe ColdFusion Path Traversal Vulnerability | 0.42 | 0.98 | Nuclei · Suricata | No |
| 2026-07-01 | CVE-2026-45659 | Microsoft SharePoint Server | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 0.80 | 0.81 | None yet | Yes |
| 2026-06-29 | CVE-2026-48558 | SimpleHelp SimpleHelp | SimpleHelp Authentication Bypass Vulnerability | 0.78 | 0.98 | Nuclei · Suricata | No |
| 2026-06-25 | CVE-2026-20230 | Cisco Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 0.89 | 0.72 | None yet | No |
| 2026-06-25 | CVE-2026-12569 | PTC Windchill and FlexPLM | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 0.46 | 0.97 | None yet | Yes |
| 2026-06-23 | CVE-2026-34910 | Ubiquiti UniFi OS | Ubiquiti UniFi OS Improper Input Validation Vulnerability | 0.90 | 0.99 | Nuclei · Suricata | No |
| 2026-06-23 | CVE-2026-34909 | Ubiquiti UniFi OS | Ubiquiti UniFi OS Path Traversal Vulnerability | 0.68 | 0.66 | None yet | No |
| 2026-06-23 | CVE-2026-34908 | Ubiquiti UniFi OS | Ubiquiti UniFi OS Improper Access Control Vulnerability | 0.88 | 0.98 | Nuclei · Suricata | No |
| 2026-06-23 | CVE-2025-67038 | Lantronix EDS5000 | Lantronix EDS5000 Code Injection Vulnerability | 0.20 | 0.73 | None yet | No |
| 2026-06-18 | CVE-2026-20253 | Splunk Enterprise | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | 0.97 | 0.98 | Nuclei · Suricata | No |
| 2026-06-16 | CVE-2026-48907 | Widget Factory Joomla Content Editor | Widget Factory Joomla Content Editor Improper Access Control Vulnerability | 0.85 | 0.98 | Nuclei · Suricata | No |
| 2026-06-15 | CVE-2026-54420 | LiteSpeed cPanel Plugin | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-06-15 | CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-06-12 | CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 0.97 | 0.99 | Nuclei · Suricata | Yes |
| 2026-06-11 | CVE-2026-10520 | Ivanti Sentry | Ivanti Sentry OS Command Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2026-06-09 | CVE-2026-7473 | Arista Extensible Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-06-09 | CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 0.25 | 0.57 | Out of scope (local) | No |
| 2026-06-09 | CVE-2026-11645 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-06-08 | CVE-2026-50751 | Check Point Security Gateway | Check Point Security Gateway Improper Authentication Vulnerability | 0.85 | 0.98 | None yet | Yes |
| 2026-06-08 | CVE-2026-42271 | BerriAI LiteLLM | BerriAI LiteLLM Command Injection Vulnerability | 0.91 | 0.98 | Nuclei · Suricata | No |
| 2026-06-05 | CVE-2026-28318 | SolarWinds Serv-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 0.44 | 0.62 | None yet | No |
| 2026-06-03 | CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 0.26 | 0.57 | None yet | No |
| 2026-06-02 | CVE-2025-48595 | Android Framework | Android Framework Integer Overflow Vulnerability | 0.02 | 0.51 | Out of scope (local) | No |
| 2026-06-02 | CVE-2022-0492 | Linux Kernel | Linux Kernel Improper Authentication Vulnerability | 0.06 | 0.97 | Out of scope (local) | No |
| 2026-06-01 | CVE-2024-21182 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 0.74 | 0.83 | None yet | No |
| 2026-05-29 | CVE-2026-0257 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 0.95 | 0.98 | None yet | Yes |
| 2026-05-27 | CVE-2026-8398 | Daemon Daemon Tools Lite | Daemon Tools Lite Embedded Malicious Code Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-05-27 | CVE-2026-48027 | Nx Nx Console | Nx Console Embedded Malicious Code Vulnerability | 0.02 | 0.52 | None yet | Yes |
| 2026-05-27 | CVE-2026-45321 | TanStack TanStack | TanStack Unspecified Vulnerability | 0.03 | 0.97 | None yet | Yes |
| 2026-05-26 | CVE-2026-48172 | LiteSpeed cPanel Plugin | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 0.18 | 0.55 | None yet | No |
| 2026-05-22 | CVE-2026-9082 | Drupal Core | Drupal Core SQL Injection Vulnerability | 0.89 | 0.99 | Nuclei · Suricata | No |
| 2026-05-21 | CVE-2026-34926 | Trend Micro Apex One | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 0.13 | 0.55 | Out of scope (local) | No |
| 2026-05-21 | CVE-2025-34291 | Langflow Langflow | Langflow Origin Validation Error Vulnerability | 0.93 | 0.98 | Nuclei · Suricata | No |
| 2026-05-20 | CVE-2026-45498 | Microsoft Defender | Microsoft Defender Denial of Service Vulnerability | 0.63 | 0.66 | None yet | No |
| 2026-05-20 | CVE-2026-41091 | Microsoft Defender | Microsoft Defender Link Following Vulnerability | 0.08 | 0.97 | Out of scope (local) | No |
| 2026-05-20 | CVE-2010-0806 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.82 | 0.99 | None yet | No |
| 2026-05-20 | CVE-2010-0249 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-05-20 | CVE-2009-3459 | Adobe Acrobat and Reader | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 0.87 | 0.98 | None yet | No |
| 2026-05-20 | CVE-2009-1537 | Microsoft DirectX | Microsoft DirectX NULL Byte Overwrite Vulnerability | 0.51 | 0.95 | None yet | No |
| 2026-05-20 | CVE-2008-4250 | Microsoft Windows | Microsoft Windows Buffer Overflow Vulnerability | 0.99 | 0.98 | None yet | No |
| 2026-05-15 | CVE-2026-42897 | Microsoft Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 0.71 | 0.68 | None yet | No |
| 2026-05-14 | CVE-2026-20182 | Cisco Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-05-08 | CVE-2026-42208 | BerriAI LiteLLM | BerriAI LiteLLM SQL Injection Vulnerability | 0.89 | 0.98 | Nuclei · Suricata | No |
| 2026-05-07 | CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 0.34 | 0.59 | None yet | No |
| 2026-05-06 | CVE-2026-0300 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 0.42 | 0.98 | None yet | No |
| 2026-05-01 | CVE-2026-31431 | Linux Kernel | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 0.98 | 0.99 | Out of scope (local) | No |
| 2026-04-30 | CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | Yes |
| 2026-04-28 | CVE-2026-32202 | Microsoft Windows | Microsoft Windows Protection Mechanism Failure Vulnerability | 0.71 | 0.98 | None yet | No |
| 2026-04-28 | CVE-2024-1708 | ConnectWise ScreenConnect | ConnectWise ScreenConnect Path Traversal Vulnerability | 0.95 | 0.99 | Nuclei · Suricata | Yes |
| 2026-04-24 | CVE-2025-29635 | D-Link DIR-823X | D-Link DIR-823X Command Injection Vulnerability | 0.88 | 0.98 | Nuclei · Suricata | No |
| 2026-04-24 | CVE-2024-7399 | Samsung MagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 0.92 | 0.99 | Nuclei · Suricata | No |
| 2026-04-24 | CVE-2024-57728 | SimpleHelp SimpleHelp | SimpleHelp Path Traversal Vulnerability | 0.64 | 0.98 | Nuclei · Suricata | Yes |
| 2026-04-24 | CVE-2024-57726 | SimpleHelp SimpleHelp | SimpleHelp Missing Authorization Vulnerability | 0.66 | 0.98 | Nuclei · Suricata | Yes |
| 2026-04-23 | CVE-2026-39987 | Marimo Marimo | Marimo Remote Code Execution Vulnerability | 1.00 | 0.99 | None yet | No |
| 2026-04-22 | CVE-2026-33825 | Microsoft Defender | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 0.07 | 0.52 | Out of scope (local) | Yes |
| 2026-04-20 | CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 0.31 | 0.58 | None yet | No |
| 2026-04-20 | CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 0.07 | 0.53 | Out of scope (local) | No |
| 2026-04-20 | CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 0.26 | 0.57 | None yet | No |
| 2026-04-20 | CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-04-20 | CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-04-20 | CVE-2025-2749 | Kentico Kentico Xperience | Kentico Xperience Path Traversal Vulnerability | 0.04 | 0.52 | None yet | No |
| 2026-04-20 | CVE-2024-27199 | JetBrains TeamCity | JetBrains TeamCity Relative Path Traversal Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2026-04-20 | CVE-2023-27351 | PaperCut NG/MF | PaperCut NG/MF Improper Authentication Vulnerability | 0.78 | 0.99 | Nuclei · Suricata | Yes |
| 2026-04-16 | CVE-2026-34197 | Apache ActiveMQ | Apache ActiveMQ Improper Input Validation Vulnerability | 0.98 | 0.99 | Nuclei · Suricata | No |
| 2026-04-14 | CVE-2026-32201 | Microsoft SharePoint Server | Microsoft SharePoint Server Improper Input Validation Vulnerability | 0.43 | 0.61 | None yet | No |
| 2026-04-14 | CVE-2009-0238 | Microsoft Office | Microsoft Office Remote Code Execution | 0.43 | 0.98 | None yet | No |
| 2026-04-13 | CVE-2026-34621 | Adobe Acrobat and Reader | Adobe Acrobat and Reader Prototype Pollution Vulnerability | 0.07 | 0.76 | Out of scope (local) | No |
| 2026-04-13 | CVE-2026-21643 | Fortinet FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | 0.98 | 0.98 | Nuclei · Suricata | No |
| 2026-04-13 | CVE-2025-60710 | Microsoft Windows | Microsoft Windows Link Following Vulnerability | 0.05 | 0.75 | Out of scope (local) | Yes |
| 2026-04-13 | CVE-2023-36424 | Microsoft Windows | Microsoft Windows Out-of-Bounds Read Vulnerability | 0.12 | 0.98 | None yet | No |
| 2026-04-13 | CVE-2023-21529 | Microsoft Exchange Server | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | 0.59 | 0.98 | None yet | Yes |
| 2026-04-13 | CVE-2020-9715 | Adobe Acrobat | Adobe Acrobat Use-After-Free Vulnerability | 0.33 | 0.99 | Out of scope (local) | No |
| 2026-04-13 | CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | 0.21 | 0.56 | Out of scope (local) | No |
| 2026-04-08 | CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2026-04-06 | CVE-2026-35616 | Fortinet FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | 0.94 | 0.98 | Nuclei · Suricata | No |
| 2026-04-02 | CVE-2026-3502 | TrueConf Client | TrueConf Client Download of Code Without Integrity Check Vulnerability | 0.06 | 0.53 | None yet | No |
| 2026-04-01 | CVE-2026-5281 | Google Dawn | Google Dawn Use-After-Free Vulnerability | 0.14 | 0.98 | None yet | No |
| 2026-03-30 | CVE-2026-3055 | Citrix NetScaler | Citrix NetScaler Out-of-Bounds Read Vulnerability | 0.91 | 0.99 | Nuclei · Suricata | No |
| 2026-03-27 | CVE-2025-53521 | F5 BIG-IP | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-03-26 | CVE-2026-33634 | Aquasecurity Trivy | Aquasecurity Trivy Embedded Malicious Code Vulnerability | 0.60 | 0.97 | None yet | No |
| 2026-03-25 | CVE-2026-33017 | Langflow Langflow | Langflow Code Injection Vulnerability | 0.96 | 0.99 | Nuclei · Suricata | No |
| 2026-03-20 | CVE-2025-54068 | Laravel Livewire | Laravel Livewire Code Injection Vulnerability | 0.96 | 0.99 | Nuclei · Suricata | No |
| 2026-03-20 | CVE-2025-43520 | Apple Multiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2026-03-20 | CVE-2025-43510 | Apple Multiple Products | Apple Multiple Products Improper Locking Vulnerability | 0.00 | 0.51 | Out of scope (local) | No |
| 2026-03-20 | CVE-2025-32432 | Craft CMS Craft CMS | Craft CMS Code Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2026-03-20 | CVE-2025-31277 | Apple Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-03-19 | CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | 0.44 | 0.98 | Suricata | Yes |
| 2026-03-18 | CVE-2026-20963 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-03-18 | CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 0.20 | 0.56 | None yet | No |
| 2026-03-16 | CVE-2025-47813 | Wing FTP Server Wing FTP Server | Wing FTP Server Information Disclosure Vulnerability | 0.63 | 0.98 | Nuclei · Suricata | No |
| 2026-03-13 | CVE-2026-3910 | Google Chromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 0.03 | 0.98 | None yet | No |
| 2026-03-13 | CVE-2026-3909 | Google Skia | Google Skia Out-of-Bounds Write Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-03-11 | CVE-2025-68613 | n8n n8n | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2026-03-09 | CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 0.88 | 0.98 | Nuclei · Suricata | No |
| 2026-03-09 | CVE-2025-26399 | SolarWinds Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 0.91 | 0.99 | Nuclei · Suricata | Yes |
| 2026-03-09 | CVE-2021-22054 | Omnissa Workspace One UEM | Omnissa Workspace ONE Server-Side Request Forgery | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2026-03-05 | CVE-2023-43000 | Apple Multiple Products | Apple Multiple products Use-After-Free Vulnerability | 0.04 | 0.53 | None yet | No |
| 2026-03-05 | CVE-2023-41974 | Apple iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability | 0.02 | 0.97 | Out of scope (local) | No |
| 2026-03-05 | CVE-2021-30952 | Apple Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 0.07 | 0.97 | None yet | No |
| 2026-03-05 | CVE-2021-22681 | Rockwell Multiple Products | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | 0.64 | 0.93 | None yet | No |
| 2026-03-05 | CVE-2017-7921 | Hikvision Multiple Products | Hikvision Multiple Products Improper Authentication Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | No |
| 2026-03-03 | CVE-2026-22719 | Broadcom VMware Aria Operations | Broadcom VMware Aria Operations Command Injection Vulnerability | 0.18 | 0.56 | None yet | No |
| 2026-03-03 | CVE-2026-21385 | Qualcomm Multiple Chipsets | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 0.01 | 0.75 | Out of scope (local) | No |
| 2026-02-25 | CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 0.89 | 0.98 | None yet | No |
| 2026-02-25 | CVE-2022-20775 | Cisco SD-WAN | Cisco SD-WAN Path Traversal Vulnerability | 0.12 | 0.54 | Out of scope (local) | No |
| 2026-02-24 | CVE-2026-25108 | Soliton Systems K.K FileZen | Soliton Systems K.K FileZen OS Command Injection Vulnerability | 0.05 | 0.97 | None yet | No |
| 2026-02-20 | CVE-2025-68461 | Roundcube Webmail | RoundCube Webmail Cross-site Scripting Vulnerability | 0.27 | 0.98 | Nuclei · Suricata | No |
| 2026-02-20 | CVE-2025-49113 | Roundcube Webmail | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | 0.99 | 0.99 | Nuclei · Suricata | No |
| 2026-02-18 | CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 0.14 | 0.54 | None yet | No |
| 2026-02-18 | CVE-2021-22175 | GitLab GitLab | GitLab Server-Side Request Forgery (SSRF) Vulnerability | 0.53 | 0.98 | Nuclei · Suricata | No |
| 2026-02-17 | CVE-2026-2441 | Google Chromium | Google Chromium CSS Use-After-Free Vulnerability | 0.55 | 0.98 | None yet | No |
| 2026-02-17 | CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-02-17 | CVE-2020-7796 | Synacor Zimbra Collaboration Suite | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | 0.94 | 0.98 | Nuclei · Suricata | No |
| 2026-02-17 | CVE-2008-0015 | Microsoft Windows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 0.77 | 0.98 | None yet | No |
| 2026-02-13 | CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 0.94 | 0.98 | None yet | Yes |
| 2026-02-12 | CVE-2026-20700 | Apple Multiple Products | Apple Multiple Buffer Overflow Vulnerability | 0.02 | 0.97 | Out of scope (local) | No |
| 2026-02-12 | CVE-2025-40536 | SolarWinds Web Help Desk | SolarWinds Web Help Desk Security Control Bypass Vulnerability | 0.74 | 0.99 | Nuclei · Suricata | No |
| 2026-02-12 | CVE-2025-15556 | Notepad++ Notepad++ | Notepad++ Download of Code Without Integrity Check Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-02-12 | CVE-2024-43468 | Microsoft Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | 0.81 | 0.83 | None yet | No |
| 2026-02-10 | CVE-2026-21533 | Microsoft Windows | Microsoft Windows Improper Privilege Management Vulnerability | 0.04 | 0.52 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21525 | Microsoft Windows | Microsoft Windows NULL Pointer Dereference Vulnerability | 0.05 | 0.52 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21519 | Microsoft Windows | Microsoft Windows Type Confusion Vulnerability | 0.02 | 0.52 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21514 | Microsoft Office | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 0.02 | 0.51 | Out of scope (local) | No |
| 2026-02-10 | CVE-2026-21513 | Microsoft Windows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 0.16 | 0.98 | None yet | No |
| 2026-02-10 | CVE-2026-21510 | Microsoft Windows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 0.61 | 0.66 | None yet | No |
| 2026-02-05 | CVE-2026-24423 | SmarterTools SmarterMail | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability | 0.88 | 0.99 | Nuclei · Suricata | Yes |
| 2026-02-05 | CVE-2025-11953 | React Native Community CLI | React Native Community CLI OS Command Injection Vulnerability | 0.94 | 0.99 | Nuclei · Suricata | No |
| 2026-02-03 | CVE-2025-64328 | Sangoma FreePBX | Sangoma FreePBX OS Command Injection Vulnerability | 0.85 | 0.99 | Nuclei · Suricata | No |
| 2026-02-03 | CVE-2025-40551 | SolarWinds Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 0.84 | 0.98 | Nuclei · Suricata | No |
| 2026-02-03 | CVE-2021-39935 | GitLab Community and Enterprise Editions | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | 0.36 | 0.98 | None yet | No |
| 2026-02-03 | CVE-2019-19006 | Sangoma FreePBX | Sangoma FreePBX Improper Authentication Vulnerability | 0.56 | 0.97 | None yet | No |
| 2026-01-29 | CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2026-01-27 | CVE-2026-24858 | Fortinet Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.87 | 0.97 | None yet | No |
| 2026-01-26 | CVE-2026-24061 | GNU InetUtils | GNU InetUtils Argument Injection Vulnerability | 0.99 | 0.98 | Nuclei · Suricata | No |
| 2026-01-26 | CVE-2026-23760 | SmarterTools SmarterMail | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.96 | 0.99 | Nuclei · Suricata | Yes |
| 2026-01-26 | CVE-2026-21509 | Microsoft Office | Microsoft Office Security Feature Bypass Vulnerability | 0.71 | 0.98 | Out of scope (local) | No |
| 2026-01-26 | CVE-2025-52691 | SmarterTools SmarterMail | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | 0.86 | 0.98 | Nuclei · Suricata | Yes |
| 2026-01-26 | CVE-2018-14634 | Linux Kernel | Linux Kernel Integer Overflow Vulnerability | 0.15 | 0.99 | Out of scope (local) | No |
| 2026-01-23 | CVE-2024-37079 | Broadcom VMware vCenter Server | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | 0.22 | 0.72 | None yet | No |
| 2026-01-22 | CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability | 0.49 | 0.98 | Nuclei · Suricata | No |
| 2026-01-22 | CVE-2025-54313 | Prettier eslint-config-prettier | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability | 0.05 | 0.98 | None yet | No |
| 2026-01-22 | CVE-2025-34026 | Versa Concerto | Versa Concerto Improper Authentication Vulnerability | 0.82 | 0.98 | Nuclei · Suricata | No |
| 2026-01-22 | CVE-2025-31125 | Vite Vitejs | Vite Vitejs Improper Access Control Vulnerability | 0.75 | 0.99 | Nuclei · Suricata | No |
| 2026-01-21 | CVE-2026-20045 | Cisco Unified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | 0.05 | 0.97 | None yet | No |
| 2026-01-13 | CVE-2026-20805 | Microsoft Windows | Microsoft Windows Information Disclosure Vulnerability | 0.07 | 0.98 | Out of scope (local) | No |
| 2026-01-12 | CVE-2025-8110 | Gogs Gogs | Gogs Path Traversal Vulnerability | 0.85 | 0.99 | Nuclei · Suricata | No |
| 2026-01-07 | CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability | 0.90 | 0.98 | Nuclei · Suricata | No |
| 2026-01-07 | CVE-2009-0556 | Microsoft Office | Microsoft Office PowerPoint Code Injection Vulnerability | 0.67 | 0.98 | None yet | No |