Recently added to CISA KEV
Latest additions to the CISA Known Exploited Vulnerabilities catalogue: exploitation observed in the wild.
Updated : CISA KEV
Latest critical vulnerabilities · Libraries recently hit by a critical vulnerability · Most likely to be exploited · Recently added to CISA KEV
| CVE | Library / product — vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-48356 | Adobe Adobe Commerce ≤ 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18Adobe Adobe Commerce B2B ≤ 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18+2 more | Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) | CRITICAL 9.3 | 31 % | KEV | |
| CVE-2026-111497 | brotli PyPI 1.0.3 – < 1.2.1brotlicffi PyPI 1.0.3 – < 1.2.1.0 | Out-of-Bounds Write in Google Brotli Decoder | CRITICAL 9.2 | 55 % | KEV | |
| CVE-2026-109619 | PHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; … | RCE via stale global state | CRITICAL 9.2 | 100 % | KEV | |
| CVE-2026-109618 | PHP Group PHP 8.2.* – < 8.2.35 ; 8.3.* – < 8.3.36 ; 8.4.* – < 8.4.27 ; … | RCE via OOM corruption | CRITICAL 9.2 | 100 % | KEV | |
| CVE-2026-114625 | Arista Networks VeloCloud Orchestrator 5.2.0 – < 5.2.3.18 ; 6.1.0 – < 6.1.3.10 ; 6.4.0 – < 6.4.2.12 | Security Advisory 0199 | CRITICAL 9.4 | 1.0 % | KEV | |
| CVE-2026-110447 | Collabora Collabora Online - Built-in CODE Server < 26.4.303 | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in th | CRITICAL 9.2 | 12 % | KEV | |
| CVE-2026-96656 | Plex Media Server < 1.43.3.10861 | Plex Media Server arbitrary file write | HIGH 8.6 | 1.8 % | KEV | |
| CVE-2026-96655 | Plex Media Server < 1.43.3.10861 | Plex Media Server arbitrary-host SSRF | MEDIUM 5.3 | 1.6 % | KEV | |
| CVE-2026-96654 | Plex Media Server < 1.43.3.10861 | Plex Media Server URL injection | MEDIUM 6.9 | 1.9 % | KEV | |
| CVE-2026-96652 | Plex Media Server < 1.43.3.10861 | Plex Media Server SSRF | MEDIUM 5.3 | 1.8 % | KEV | |
| CVE-2026-110936 | Siemens Siemens Software Center < V4.0.9.8 | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link librar | HIGH 8.4 | 1.0 % | KEV | |
| CVE-2026-106931 | EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd Ver2.20 – < Ver8.00 Update 5EG Secure Solutions Inc. SiteGuard Server Edition for Nginx Ver2.20 – < Ver8.00 Update 5+3 more | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with r | HIGH 8.5 | 2.5 % | KEV | |
| CVE-2026-102764 | BeyondTrust Remote Support ≤ 26.2.3 | Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support | CRITICAL 9.3 | 19 % | KEV | |
| CVE-2025-61624 | Fortinet FortiOS 7.6.0 – 7.6.4 ; 7.4.0 – 7.4.9 ; 7.2.0 – 7.2.13 ; …Fortinet FortiProxy 7.6.0 – 7.6.4 ; 7.4.0 – 7.4.11 ; 7.2.0 – 7.2.16 ; …+2 more | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7 | MEDIUM 6.5 | 1.3 % | KEV | |
| CVE-2026-21589 | Atlassian Bamboo Data Center All other versionsAtlassian Bitbucket Data Center All other versions+3 more | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba | CRITICAL 9.3 | 99 % | KEV | |
| CVE-2026-76519 | Cisco Cisco Secure Email 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway Arbitrary File Write Vulnerability | CRITICAL 9.8 | 2.2 % | KEV | |
| CVE-2026-105134 | Ahsay AhsayCBS 9.15.2.0 ; 9.15.2.1 ; 9.15.2.2 ; … | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection | CRITICAL 10.0 | 82 % | KEV | |
| CVE-2026-105133 | Ahsay AhsayCBS 9.15.2.0 ; 9.15.2.1 ; 9.15.2.2 ; … | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication | MEDIUM 6.9 | 79 % | KEV | |
| CVE-2026-0322 | Palo Alto Networks Cloud NGFW Palo Alto Networks PAN-OS 12.2.0 – < 12.2.4 ; 12.1.0 – < 12.1.10-h2 ; 11.2.0 – < 11.2.16 ; …+1 more | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface | HIGH 8.6 | 1.7 % | KEV | |
| CVE-2026-96951 | Microsoft Outlook.com 1.0.0 – < 20260925.100Microsoft Windows 10 Version 1607 10.0.14393.0 – < 10.0.14393.9612+3 more | Windows Shell Security Feature Bypass Vulnerability | HIGH 8.8 | 9.8 % | KEV | |
| CVE-2026-104935 | Ivanti Connect Secure fixed in 25.1.3.0, 25.1.3.1, 22.8R2.5, … | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. Thi | HIGH 8.6 | 87 % | KEV | |
| CVE-2023-22894 | @strapi/strapi npm 3.2.1 – < 4.8.0 | Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. Th | HIGH 7.2 | 4.1 % | KEV | |
| CVE-2021-3199 | — | Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. | CRITICAL 9.8 | 30 % | KEV | |
| CVE-2016-3081 | org.apache.struts/struts2-core Maven 2.3.19 – < 2.3.20.3 ; 2.3.21 – < 2.3.24.3 ; 2.3.25 – < 2.3.28.1 | Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attacker | HIGH 8.1 | 97 % | KEV | |
| CVE-2015-5477 | — | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa | HIGH 7.5 | 100 % | KEV | |
| CVE-2015-3306 | — | The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. | CRITICAL 10.0 | 99 % | KEV | |
| CVE-2026-88779 | NetScaler ADC < 14.1-73.41 ; < 13.1-64.28 ; < 14.1-73.41 FIPS ; …NetScaler Gateway < 14.1-73.41 ; < 13.1-64.28 | Memory overflow vulnerability leading to Denial of Service | HIGH 8.7 | 11 % | KEV | |
| CVE-2026-102490 | Zammad GmbH Zammad 1.5.0 – < 7.2.2 | Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package | CRITICAL 9.4 | 0.9 % | KEV | |
| CVE-2026-102489 | Zammad GmbH Zammad 6.3.0 – < 6.5.4 | Undisclosed RCE in Zammad v6.3 and higher | CRITICAL 9.4 | 2.0 % | KEV | |
| CVE-2026-104286 | Fortinet FortiMail 8.0.0 ; 7.6.0 – 7.6.5 ; 7.4.0 – 7.4.6 ; … | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, F | CRITICAL 9.8 | 4.6 % | KEV | |
| CVE-2026-76504 | Cisco Cisco Catalyst SD-WAN Manager 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability | CRITICAL 9.8 | 39 % | KEV | |
| CVE-2026-86950 | Apple iOS and iPadOS < 18.7.11 ; < 26.7.1Apple macOS < 15.8.1 ; < 26.7.1 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 | HIGH 8.8 | 26 % | KEV | |
| CVE-2026-88772 | Citrix NetScaler ADC < 14.1-73.37 ; < 13.1-64.23 ; < 14.1-73.37 FIPS ; …Citrix NetScaler Gateway < 14.1-73.37 ; < 13.1-64.23 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service | CRITICAL 9.5 | 78 % | KEV | |
| CVE-2026-88771 | Citrix NetScaler ADC < 14.1-73.37 ; < 13.1-64.23 ; < 14.1-73.37 FIPS ; …Citrix NetScaler Gateway < 14.1-73.37 ; < 13.1-64.23 | A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arb… | CRITICAL 9.5 | 82 % | KEV | |
| CVE-2026-87902 | WordPress WordPress < 7.1.2 | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the | HIGH 8.1 | 96 % | KEV | |
| CVE-2026-67279 | Mikrotik RouterOS 7.24 – < 7.24.2 ; 7.0.0 – < 7.23.4 ; 6.0.0 – < 6.49.21 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS | MEDIUM 6.9 | 2.3 % | KEV | |
| CVE-2026-65660 | Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 – < 16.0.5565.1001Microsoft Microsoft SharePoint Server 2019 16.0.0 – < 16.0.10417.20198+1 more | Microsoft SharePoint Server Remote Code Execution Vulnerability | HIGH 8.8 | 8.2 % | KEV | |
| CVE-2026-71362 | Adobe Adobe Commerce ≤ 2.4.9-2026-jul, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-augAdobe Adobe Commerce B2B ≤ 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul+1 more | Adobe Commerce | Incorrect Authorization (CWE-863) | CRITICAL 9.1 | 90 % | KEV | |
| CVE-2026-5430 | WSO2 WSO2 Universal Gateway 4.5.0 – < 4.5.0.57 ; 4.6.0 – < 4.6.0.21WSO2 WSO2 Traffic Manager 4.5.0 – < 4.5.0.56 ; 4.6.0 – < 4.6.0.21+3 more | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover | CRITICAL 10.0 | 22 % | KEV | |
| CVE-2026-94127 | F5 BIG-IP 21.1.0 – < Hotfix-BIGIP-21.1.0.2.0.30.22-ENG ; 17.5.0 – < Hotfix-BIGIP-17.5.1.9.0.160.12-ENG ; 17.1.0 – < Hotfix-BIGIP-17.1.3.5.0.41.14-ENG | BIG-IP APM OAuth vulnerability | CRITICAL 9.3 | 25 % | KEV | |
| CVE-2026-93952 | Arista Networks VeloCloud Orchestrator (VCO) On-Prem 5.2.0 – 5.2.3.15 ; 6.1.0 – 6.1.3.7 ; 6.4.0 – 6.4.2.7 ; … | Security Advisory 0183 | CRITICAL 9.5 | 1.4 % | KEV | |
| CVE-2026-93616 | checkpoint Quantum Security Management R82.20 with no Jumbo Hotfix ; R82.10 with Jumbo Hotfix Take 44 or below ; R82 with Jumbo Hotfix Take 126 or below ; … | Directory Traversal and File upload allows execution of arbitrary script on the Management Server | CRITICAL 9.8 | 92 % | KEV | |
| CVE-2026-85102 | checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 43 or below ; R82 with Jumbo Hotfix Take 125 or below ; R81.20 with Jumbo Hotfix Take 165 or below | Improper Certificate Validation in Quantum Security Gateway | CRITICAL 9.8 | 54 % | KEV | |
| CVE-2026-7273 | Zyxel GS1900-48HPv2 firmware <= 2.90(ABTQ.1)C0Zyxel GS1900-8 firmware <= 2.90(AAHH.1)C0+3 more | A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a | HIGH 8.8 | 2.8 % | KEV | |
| CVE-2026-53266 | Linux Linux 63137bc5882a1882c553d389fdeeeace86ee1741 – < bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87 ; 63137bc5882a1882c553d389fdeeeace86ee1741 – < 76280b78cc9f23bdc6438e10ad6dff148ef8375b ; 63137bc5882a1882c553d389fdeeeace86ee1741 – < b7e91939ba9be805a62a257fa4e227dffbb88fa0 ; …Linux Linux 5.10 | netfilter: bridge: make ebt_snat ARP rewrite writable | HIGH 8.8 | 0.9 % | KEV | |
| CVE-2025-39964 | Linux Linux 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 – < 0f28c4adbc4a97437874c9b669fd7958a8c6d6ce ; 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 – < e4c1ec11132ec466f7362a95f36a506ce4dc08c9 ; 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 – < 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8 ; …Linux Linux 2.6.38 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | HIGH 7.8 | 1.6 % | KEV | |
| CVE-2025-39682 | Linux Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 – < 2902c3ebcca52ca845c03182000e8d71d3a5196f ; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 – < c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677 ; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 – < 3439c15ae91a517cf3c650ea15a8987699416ad9 ; …Linux Linux 6.0 | tls: fix handling of zero-length records on the rx_list | CRITICAL 9.8 | 3.3 % | KEV | |
| CVE-2026-87886 | Acronis Acronis Backup plugin for cPanel & WHM unspecified – < 1.9.3.1021Acronis Acronis Backup extension for Plesk unspecified – < 1.8.11.638+1 more | Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Li | HIGH 7.8 | 0.2 % | KEV | |
| CVE-2026-76460 | Cisco Cisco Identity Services Engine Software 3.1.0 p8 ; 3.1.0 p9 ; 3.3 Patch 2 ; …Cisco Cisco ISE Passive Identity Connector 3.4.0 ; 3.5.0 | Cisco Identity Services Engine Authentication Bypass Vulnerability | CRITICAL 10.0 | 76 % | KEV | |
| CVE-2026-58704 | Google Android Android kernel | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) esc | HIGH 8.8 | 0.6 % | KEV | |
| CVE-2026-76461 | Cisco Cisco Secure Email 14.0.0-698 ; 13.5.1-277 ; 13.0.0-392 ; … | Cisco Secure Email Gateway SQL Injection Vulnerability | CRITICAL 9.8 | 30 % | KEV | |
| CVE-2026-85706 | GitLab GitLab 18.7 – < 18.11.12 ; 19.0 – < 19.0.9 ; 19.1 – < 19.1.8 ; … | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | CRITICAL 10.0 | 97 % | KEV | |
| CVE-2026-84869 | ConnectWise ScreenConnect All versions prior to 26.6.5 | ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions | CRITICAL 9.9 | 0.9 % | KEV | |
| CVE-2026-42018 | jfrog artifactory < 7.111.20 ; 7.117.0 – < 7.117.27 ; 7.125.0 – < 7.125.19 ; … | Anonymous user token generation exposure in JFrog Artifactory | HIGH 7.5 | 9.8 % | KEV | |
| CVE-2026-42016 | jfrog artifactory < 7.133.11 | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation | HIGH 8.8 | 8.6 % | KEV | |
| CVE-2026-86060 | Mikrotik RouterOS 7.24 – < 7.24.2 ; 7.0.0 – < 7.23.4 ; 6.0.0 – < 6.49.21 | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS | CRITICAL 9.2 | 6.4 % | KEV | |
| CVE-2026-67277 | Mikrotik RouterOS 7.24 – < 7.24.2 ; 7.0.0 – < 7.23.4 ; 6.0.0 – < 6.49.21 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service | HIGH 8.8 | 1.6 % | KEV | |
| CVE-2026-87491 | Google Chrome 153.0.8010.36 – < 153.0.8010.36 | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via | HIGH 8.8 | 3.5 % | KEV | |
| CVE-2026-20079 | Cisco Cisco Secure Firewall Management Center (FMC) 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability | CRITICAL 10.0 | 88 % | KEV | |
| CVE-2026-19490 | NetScaler ADC 14.1 – 73.32 ; 13.1 – 63.21NetScaler Gateway 14.1 – 73.32 ; 13.1 – 63.21 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 | CRITICAL 9.3 | 33 % | KEV | |
| CVE-2025-25249 | Fortinet FortiSwitchManager 7.2.2 – 7.2.5Fortinet FortiOS 7.6.0 – 7.6.2 ; 7.4.0 – 7.4.7 ; 7.2.4 – 7.2.11 | A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1 | CRITICAL 9.8 | 3.7 % | KEV | |
| CVE-2026-86218 | N-able N-central < 2026.3.1.14 | pre-authentication remote code execution | CRITICAL 10.0 | 15 % | KEV | |
| CVE-2026-85880 | Microsoft Windows 10 Version 1607 10.0.14393.0 – < 10.0.14393.9512Microsoft Windows 10 Version 1809 10.0.17763.0 – < 10.0.17763.9245+3 more | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | KEV | |
| CVE-2026-81963 | Microsoft Windows 11 version 23H2 10.0.22631.0 – < 10.0.22631.7582Microsoft Windows 11 Version 23H2 10.0.22631.0 – < 10.0.22631.7582+3 more | Windows Update Stack Elevation of Privilege Vulnerability | HIGH 7.8 | 0.4 % | KEV | |
| CVE-2026-75650 | Adobe Adobe Commerce ≤ 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-augAdobe Adobe Commerce B2B ≤ 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug+1 more | Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) | CRITICAL 10.0 | 3.9 % | KEV | |
| CVE-2026-85046 | Google Chrome 152.0.7977.82 – < 152.0.7977.82 | Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr | HIGH 8.8 | 1.8 % | KEV | |
| CVE-2026-9586 | Sangoma Switchvox SMB Edition 8.3 (104997) – < 8.4.0.2 | Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB | CRITICAL 9.3 | 19 % | KEV | |
| CVE-2026-83549 | SonicWall SMA1000 12.4.3-03453 (platform-hotfix) and older versions ; 12.5.0-02835 (platform-hotfix) and older versions | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi | HIGH 7.8 | 9.9 % | KEV | |
| CVE-2026-83548 | SonicWall SMA1000 12.4.3-03453 (platform-hotfix) and older versions ; 12.5.0-02835 (platform-hotfix) and older versions | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A r | CRITICAL 10.0 | 8.0 % | KEV | |
| CVE-2026-82329 | jfrog artifactory < 7.111.21 ; 7.117.0 – < 7.117.28 ; 7.125.0 – < 7.125.20 ; … | Potential authentication bypass leading to administrative access in Artifactory | CRITICAL 9.8 | 14 % | KEV | |
| CVE-2026-59822 | litellm PyPI < 1.84.0 | LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback | HIGH 8.8 | 0.8 % | KEV | |
| CVE-2026-49869 | kestra-io kestra < 1.0.45 ; >= 1.1.0, < 1.3.21 | Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter` | CRITICAL 10.0 | 2.1 % | KEV | |
| CVE-2026-48710 | starlette PyPI < 1.0.1 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks | MEDIUM 6.5 | 70 % | KEV | |
| CVE-2026-82078 | PaperCut PaperCut MF/NG < 24.1.10 ; 25.0.0 – < 25.0.13 ; 26.0.0 – < 26.0.5 | PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector | CRITICAL 9.4 | 61 % | KEV | |
| CVE-2026-81578 | PaperCut PaperCut MF/NG < 24.1.10 ; 25.0.0 – < 25.0.13 ; 26.0.0 – < 26.0.5 | PaperCut MF/NG: Authentication Bypass | HIGH 8.8 | 84 % | KEV | |
| CVE-2026-66384 | jfrog artifactory < 7.146.35 ; 7.161.0 – < 7.161.16 | Authenticated users may write data outside the intended Docker cache path | MEDIUM 5.3 | 0.7 % | KEV | |
| CVE-2026-53362 | Linux Linux 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 – < 14200d435af9a9eeb444f529fc2f689a236b7962 ; 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 – < 65fb14cbebb0cd0eff903a22d33537ddc8b95769 ; 773ba4fe9104a64a54d1c00f0fb6ffb95def2b03 – < 46f201f8b4c39633a1fa3dc12459f506d470993d ; …Linux Linux 6.0 | ipv6: account for fraggap on the paged allocation path | HIGH 7.8 | 0.7 % | KEV | |
| CVE-2023-49105 | — | An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication | CRITICAL 9.8 | 43 % | KEV | |
| CVE-2026-8452 | NetScaler ADC 14.1 – < 72.61 ; 13.1 – < 63.18 ; 14.1 FIPS – < 72.61 ; …NetScaler Gateway 14.1 – < 72.61 ; 13.1 – < 63.18 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service | HIGH 8.8 | 1.0 % | KEV | |
| CVE-2022-0995 | kernel kernel 5.17 rc8 | An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite p | HIGH 7.8 | 8.9 % | KEV | |
| CVE-2021-23758 | ajaxnetprofessional NuGet < 21.11.29.1 | Deserialization of Untrusted Data | CRITICAL 9.8 | 83 % | KEV | |
| CVE-2019-1068 | Microsoft Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) unspecifiedMicrosoft Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (CU) ; 2014 Service Pack 2 for x64-based Systems (CU) ; 2016 for x64-based Systems Service Pack 1 (CU) ; …+3 more | A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Micr | HIGH 8.8 | 57 % | KEV | |
| CVE-2015-5287 | — | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain priv | HIGH 7.8 | 5.0 % | KEV | |
| CVE-2015-3246 | — | libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, w | HIGH 7.4 | 8.5 % | KEV | |
| CVE-2026-60004 | gitea.dev Go 1.17.0 – < 1.27.1code.gitea.io/gitea Go ≥ 1.17.0 | Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. | CRITICAL 9.8 | 24 % | KEV | |
| CVE-2026-21962 | Oracle Corporation Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in 12.2.1.4.0 ; 14.1.1.0.0 ; 14.1.2.0.0 | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Serve | CRITICAL 10.0 | 73 % | KEV | |
| CVE-2026-73570 | Zimbra Collaboration < 10.1.20 | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed | HIGH 8.9 | 72 % | KEV | |
| CVE-2026-72530 | TrueConf TrueConf Server * – < 5.3 ; 5.3 – < 5.3.9 ; 5.4 – < 5.4.9 ; … | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t | CRITICAL 9.5 | 1.7 % | KEV | |
| CVE-2026-72529 | TrueConf TrueConf Server * – < 5.3 ; 5.3 – < 5.3.9 ; 5.4 – < 5.4.9 ; … | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t | CRITICAL 9.3 | 1.5 % | KEV | |
| CVE-2026-64849 | mlflow PyPI 3.3.0 – < 3.15.0 | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebind… | CRITICAL 9.3 | 10 % | KEV | |
| CVE-2026-65400 | Apple macOS < 14.8.9 ; < 15.7.9 ; < 26.6.1 ; … | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, mac | CRITICAL 9.8 | 1.7 % | KEV | |
| CVE-2026-59310 | VMware Cloud Foundation 9.1.x.x ; 9.0.x.x ; 5.xVMware vSphere Foundation 9.1.x.x ; 9.0.x.x+3 more | vCenter directory-traversal vulnerability | CRITICAL 9.8 | 2.6 % | KEV | |
| CVE-2026-55040 | Microsoft Microsoft SharePoint Enterprise Server 2016 16.0.0 – < 16.0.5561.1001Microsoft Microsoft SharePoint Server 2019 16.0.0 – < 16.0.10417.20175+1 more | Microsoft SharePoint Server Security Feature Bypass Vulnerability | CRITICAL 9.1 | 70 % | KEV | |
| CVE-2026-33824 | Microsoft Windows 10 Version 1607 10.0.14393.0 – < 10.0.14393.9060Microsoft Windows 10 Version 1809 10.0.17763.0 – < 10.0.17763.8644+3 more | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | CRITICAL 9.8 | 77 % | KEV | |
| CVE-2025-62593 | ray PyPI < 2.52.0 | Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack | CRITICAL 9.4 | 60 % | KEV | |
| CVE-2026-72898 | Metabase Metabase x.58.0 – < x.58.24 ; x.59.0 – < x.59.21 ; x.60.0 – < x.60.17 ; … | Metabase SQL injection via password reset endpoint | CRITICAL 10.0 | 99 % | KEV | |
| CVE-2026-68820 | Microsoft Windows 10 Version 1607 10.0.14393.0 – < 10.0.14393.9418Microsoft Windows 10 Version 1809 10.0.17763.0 – < 10.0.17763.9121+3 more | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | HIGH 7.0 | 0.3 % | KEV | |
| CVE-2026-20349 | Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.16.1 ; 9.16.1.28 ; 9.16.2 ; …Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.0.0 ; 7.0.0.1 ; 7.0.1 ; … | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vul… | HIGH 8.6 | 1.0 % | KEV | |
| CVE-2026-8037 | Progress Software LoadMaster V7.2.60.0 – < V7.2.63.2 ; V7.2.54.12 – < V7.2.54.18Progress Software ECS Connections Manager V7.2.60.0 – < V7.2.63.2+2 more | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager … | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2026-63077 | JetBrains TeamCity < 2026.1.3, 2025.11.7 | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | CRITICAL 9.8 | 94 % | KEV |