Actively exploited vulnerabilities
Vulnerabilities in the CISA Known Exploited Vulnerabilities catalog added in the last 180 days, with fixes and remediation deadlines.
- 4.3CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityExploitedFix availableIvanti Connect Secure
1 min read - 7.0CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityExploitedFix availableIvanti Connect Secure
1 min read - 8.6CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityExploitedVerify fixCisco Secure Firewall ASA Software and Cisco Secure FTD Software
1 min read - 10.0CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityExploitedFix availableGitLab Community Edition and Enterprise Edition
1 min read - 2.7CVE-2026-41709Broadcom VMWare ESX Insufficient Logging VulnerabilityExploitedFix availableBroadcom VMware ESX
1 min read - 7.8CVE-2026-46300Linux Kernel Missing Initialization of a Variable VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 9.2CVE-2026-111497Google Brotli Unchecked Return Value VulnerabilityExploitedFix availableGoogle Brotli
1 min read - 9.3CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityRCEExploitedVerify fixAdobe Commerce and Magento
1 min read - 9.2CVE-2026-109619PHP Stale Internal Request-State VulnerabilityRCEExploitedFix availablePHP Group PHP
1 min read - 9.2CVE-2026-109618PHP Memory Corruption VulnerabilityRCEExploitedFix availablePHP Group PHP
1 min read - 9.9CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection VulnerabilityExploitedFix availableArista VeloCloud Orchestrator
1 min read - 9.2CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityRCEExploitedFix availableCollabora Collabora Online – Built-in CODE Server
1 min read - 6.7CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element VulnerabilityRCEExploitedFix availableSiemens Software Center
1 min read - 7.8CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityExploitedVerify fixEG Secure Solutions SiteGuard Server Edition
1 min read - 8.6CVE-2026-96656Plex Media Server External Control of File Name or Path VulnerabilityExploitedFix availablePlex Media Server
1 min read - 4.3CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityExploitedFix availablePlex Media Server
1 min read - 6.9CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityExploitedFix availablePlex Media Server
1 min read - 4.3CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityExploitedFix availablePlex Media Server
1 min read - 9.3CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityExploitedVerify fixBeyondTrust Remote Support
1 min read - 5.4CVE-2025-61624Fortinet Multiple Products Path Traversal VulnerabilityExploitedVerify fixFortinet Multiple Products
1 min read - 9.3CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityExploitedVerify fixAtlassian Multiple Products
1 min read - 8.6CVE-2026-0322Palo Alto Networks PAN-OS Code Injection VulnerabilityExploitedFix availablePalo Alto Networks PAN-OS
1 min read - 9.8CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityExploitedVerify fixCisco Secure Email Gateway
1 min read - 10.0CVE-2026-105134Ahsay AhsayCBS Command Injection VulnerabilityRCEExploitedFix availableAhsay AhsayCBS
1 min read - 6.9CVE-2026-105133Ahsay AhsayCBS Improper Authentication VulnerabilityExploitedFix availableAhsay AhsayCBS
1 min read - 8.8CVE-2026-96951Microsoft Windows Command Injection VulnerabilityExploitedFix availableMicrosoft Windows
1 min read - 8.6CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityExploitedVerify fixIvanti Connect Secure
1 min read - 7.2CVE-2023-22894Strapi Cleartext Storage of Sensitive Information VulnerabilityRCEExploitedVerify fixStrapi Strapi
1 min read - 9.8CVE-2021-3199ONLYOFFICE Docs Server Path Traversal VulnerabilityRCEExploitedVerify fixONLYOFFICE Docs
1 min read - 8.1CVE-2016-3081Apache Struts Command Injection VulnerabilityExploitedVerify fixApache Struts
1 min read - 7.5CVE-2015-5477ISC BIND Data Processing Errors VulnerabilityExploitedVerify fixISC BIND
1 min read - 10.0CVE-2015-3306ProFTPD Improper Access Control VulnerabilityExploitedVerify fixProFTPD ProFTPD
1 min read - 8.7CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityExploitedFix availableCitrix NetScaler
1 min read - 8.5CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management VulnerabilityLPEExploitedFix availableZammad GmbH Zammad
1 min read - 8.7CVE-2026-102489Zammad GmbH Zammad Session Fixation VulnerabilityRCEExploitedFix availableZammad GmbH Zammad
1 min read - 9.8CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityExploitedVerify fixFortinet FortiMail
1 min read - 9.8CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN Manager
1 min read - 8.8CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityRCEExploitedFix availableApple Multiple Products
1 min read - 9.5CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityRCEExploitedFix availableCitrix NetScaler
1 min read - 9.5CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityExploitedFix availableCitrix NetScaler
1 min read - 8.1CVE-2026-87902WordPress Core Remote File Inclusion VulnerabilityRCEExploitedFix availableWordPress Core
1 min read - 6.9CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityExploitedFix availableMikroTik RouterOS
1 min read - 8.8CVE-2026-65660Microsoft SharePoint Code Injection VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 9.1CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization VulnerabilityExploitedVerify fixAdobe Commerce and Magento
1 min read - 10.0CVE-2026-5430WSO2 Multiple Products Path Traversal VulnerabilityRCEExploitedFix availableWSO2 Multiple Products
1 min read - 9.8CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityRCEExploitedFix availableF5 BIG-IP APM
1 min read - 9.8CVE-2026-93616Check Point Multiple Products Path Traversal VulnerabilityExploitedVerify fixCheck Point Multiple Products
1 min read - 10.0CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityExploitedVerify fixArista VeloCloud Orchestrator
1 min read - 9.8CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityExploitedVerify fixCheck Point Multiple Products
1 min read - 8.8CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityExploitedVerify fixZyxel GS1900 Series Switches
1 min read - 8.8CVE-2026-53266Linux Kernel Out-of-Bounds Write VulnerabilityExploitedFix availableLinux Kernel
1 min read - 7.8CVE-2025-39964Linux Kernel Race Condition VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 9.8CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 7.8CVE-2026-87886Acronis Backup Incorrect Default Permissions VulnerabilityLPEExploitedFix availableAcronis Backup
1 min read - 10.0CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityExploitedVerify fixCisco Identity Services Engine
1 min read - 8.8CVE-2026-58704Google Pixel Improper Authorization VulnerabilityLPEExploitedVerify fixGoogle Pixel
1 min read - 9.8CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityExploitedVerify fixCisco Secure Email Gateway
1 min read - 10.0CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityExploitedFix availableGitLab Community Edition and Enterprise Edition
1 min read - 9.9CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityExploitedVerify fixConnectWise ScreenConnect
1 min read - 7.5CVE-2026-42018JFrog Artifactory Improper Authentication VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 8.1CVE-2026-42016JFrog Artifactory Incorrect Authorization VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 9.2CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityExploitedFix availableMikroTik RouterOS
1 min read - 8.8CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityExploitedFix availableMikroTik RouterOS
1 min read - 8.8CVE-2026-87491Google Chromium V8 Out of Bounds Write VulnerabilityExploitedFix availableGoogle Chromium V8
1 min read - 9.3CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixCitrix NetScaler
1 min read - 10.0CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixCisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewa…
1 min read - 7.4CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityExploitedVerify fixFortinet Multiple Products
1 min read - 7.8CVE-2026-81963Microsoft Windows Link Following VulnerabilityLPEExploitedFix availableMicrosoft Windows
1 min read - 7.8CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow VulnerabilityExploitedFix availableMicrosoft Windows
1 min read - 10.0CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityExploitedVerify fixAdobe Commerce and Magento
1 min read - 10.0CVE-2026-86218N-able N-central Static Code Injection VulnerabilityRCEExploitedFix availableN-able N-central
1 min read - 8.8CVE-2026-85046Google Chromium V8 Type Confusion VulnerabilityExploitedFix availableGoogle Chromium V8
1 min read - 7.8CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection VulnerabilityRCEExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 10.0CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 9.8CVE-2026-82329JFrog Artifactory Improper Authentication VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 9.3CVE-2026-9586Sangoma Switchvox SQL Injection VulnerabilityRCEExploitedFix availableSangoma Switchvox
1 min read - 8.8CVE-2026-59822BerriAI LiteLLM Improper Authentication VulnerabilityExploitedVerify fixBerriAI LiteLLM
1 min read - 10.0CVE-2026-49869Kestra OSS OS Command Injection VulnerabilityRCEExploitedVerify fixKestra Kestra OSS
1 min read - 6.5CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling VulnerabilityExploitedVerify fixKludex Starlette
1 min read - 9.4CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityExploitedFix availablePaperCut NG/MF
1 min read - 8.8CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityExploitedFix availablePaperCut NG/MF
1 min read - 5.3CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityExploitedFix availableJFrog Artifactory
1 min read - 7.8CVE-2026-53362Linux Kernel Unspecified VulnerabilityLPEExploitedVerify fixLinux Kernel
1 min read - 9.8CVE-2023-49105ownCloud Improper Authentication VulnerabilityExploitedVerify fixownCloud ownCloud
1 min read - 9.8CVE-2026-60004Gitea Code Injection VulnerabilityRCEExploitedFix availableGitea Gitea
1 min read - 8.8CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityExploitedFix availableCitrix NetScaler ADC and NetScaler Gateway
1 min read - 7.8CVE-2022-0995Linux Kernel Out-of-Bounds Write VulnerabilityExploitedVerify fixLinux Kernel
1 min read - 8.1CVE-2021-23758Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityRCEExploitedVerify fixAjax.NET Professional Ajax.NET Professional
1 min read - 8.8CVE-2019-1068Microsoft SQL Server Remote Code Execution VulnerabilityRCEExploitedVerify fixMicrosoft SQL Server
1 min read - 7.8CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityLPEExploitedVerify fixRed Hat Automatic Bug Reporting Tool
1 min read - 7.4CVE-2015-3246Red Hat Libuser Race Condition VulnerabilityLPEExploitedVerify fixRed Hat Libuser
1 min read - 10.0CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityExploitedVerify fixOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in
1 min read - 8.9CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityRCEExploitedFix availableSynacor Zimbra Collaboration Suite (ZCS)
1 min read - 9.0CVE-2026-72530TrueConf Server Code Injection VulnerabilityRCEExploitedFix availableTrueConf Server
1 min read - 9.8CVE-2026-72529TrueConf Server Missing Authentication for Critical Function VulnerabilityExploitedFix availableTrueConf Server
1 min read - 9.3CVE-2026-64849MLflow Server-Side Request Forgery VulnerabilityExploitedVerify fixMLflow MLflow
1 min read - 9.8CVE-2026-65400Apple macOS Improper Authentication VulnerabilityExploitedFix availableApple macOS
1 min read - 9.8CVE-2026-59310Broadcom VMware vCenter Path Traversal VulnerabilityExploitedFix availableBroadcom VMware vCenter
1 min read - 9.1CVE-2026-55040Microsoft SharePoint Weak Authentication VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 9.8CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityRCEExploitedFix availableMicrosoft Internet Key Exchange (IKE) Service Extensions
1 min read - 9.4CVE-2025-62593Ray-Project Ray Code Injection VulnerabilityRCEExploitedVerify fixRay-Project Ray
1 min read - 8.6CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityExploitedVerify fixCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat De…
1 min read - 7.0CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityExploitedFix availableMicrosoft Windows Ancillary Function Driver for WinSock
1 min read - 10.0CVE-2026-72898Metabase SQL Injection VulnerabilityExploitedFix availableMetabase Metabase
1 min read - 9.6CVE-2026-8037Progress LoadMaster Command Injection VulnerabilityExploitedFix availableProgress LoadMaster
1 min read - 9.8CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityRCEExploitedVerify fixJetBrains TeamCity
1 min read - 8.2CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixN-able N-central
1 min read - 9.8CVE-2026-9198IBM Langflow Code Injection VulnerabilityRCEExploitedFix availableIBM Langflow
1 min read - 7.5CVE-2026-34486Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityExploitedVerify fixApache Tomcat
1 min read - 8.2CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityExploitedVerify fixN-able N-central
1 min read - 5.3CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityExploitedVerify fixCisco Secure Firewall Management Center (FMC)
1 min read - 10.0CVE-2026-16812Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityRCEExploitedFix availableArista VeloCloud Orchestrator
1 min read - 5.3CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityExploitedVerify fixFortinet FortiOS
1 min read - 9.3CVE-2026-16232Check Point SmartConsole Improper Authentication VulnerabilityExploitedVerify fixCheck Point SmartConsole
1 min read - 9.8CVE-2026-50522Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 5.9CVE-2026-60137WordPress Core SQL Injection VulnerabilityRCEExploitedFix availableWordPress Core
1 min read - 9.8CVE-2026-63030WordPress Core Interpretation Conflict VulnerabilityRCEExploitedFix availableWordPress Core
1 min read - 8.1CVE-2021-27137DD-WRT Stack-Based Buffer Overflow VulnerabilityExploitedFix availableDD-WRT DD-WRT
1 min read - 9.8CVE-2026-0770Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 9.8CVE-2026-58644Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityExploitedFix availableMicrosoft SharePoint
1 min read - 9.1CVE-2026-25089Fortinet FortiSandbox OS Command Injection VulnerabilityExploitedVerify fixFortinet FortiSandbox
1 min read - 9.1CVE-2026-39808Fortinet FortiSandbox OS Command Injection VulnerabilityExploitedVerify fixFortinet FortiSandbox
1 min read - 9.8CVE-2026-46817Oracle E-Business Suite Improper Privilege Management VulnerabilityExploitedVerify fixOracle E-Business Suite
1 min read - 7.5CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityExploitedVerify fixKNX Association KNX Protocol Connection Authorization Option 1
1 min read - 7.2CVE-2026-15410SonicWall SMA1000 Appliances Code Injection VulnerabilityRCEExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 10.0CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityExploitedVerify fixSonicWall SMA1000 Appliances
1 min read - 5.3CVE-2026-56164Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityExploitedFix availableMicrosoft SharePoint Server
1 min read - 7.8CVE-2026-56155Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityExploitedFix availableMicrosoft Active Directory Federation Services
1 min read - 8.1CVE-2008-4128Cisco IOS Cross-Site Request Forgery VulnerabilityExploitedVerify fixCisco IOS
1 min read - 10.0CVE-2026-56291Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityRCEExploitedVerify fixBalbooa Forms
1 min read - 10.0CVE-2026-48939iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityExploitedFix availableiCagenda iCagenda
1 min read - 10.0CVE-2026-48282Adobe ColdFusion Path Traversal VulnerabilityRCEExploitedVerify fixAdobe ColdFusion
1 min read - 10.0CVE-2026-56290Joomlack Page Builder Improper Access Control VulnerabilityRCEExploitedFix availableJoomlack Page Builder
1 min read - 8.4CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 10.0CVE-2026-48908JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityExploitedFix availableJoomShaper SP Page Builder
1 min read - 8.8CVE-2026-45659Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityExploitedFix availableMicrosoft SharePoint Server
1 min read - 9.5CVE-2026-48558SimpleHelp Authentication Bypass VulnerabilityExploitedFix availableSimpleHelp SimpleHelp
1 min read - 9.3CVE-2026-12569PTC Windchill and FlexPLM Improper Input Validation VulnerabilityExploitedVerify fixPTC Windchill and FlexPLM
1 min read - 8.6CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityExploitedVerify fixCisco Unified Communications Manager
1 min read - 10.0CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation VulnerabilityExploitedFix availableUbiquiti UniFi OS
1 min read - 10.0CVE-2026-34909Ubiquiti UniFi OS Path Traversal VulnerabilityExploitedFix availableUbiquiti UniFi OS
1 min read - 10.0CVE-2026-34908Ubiquiti UniFi OS Improper Access Control VulnerabilityExploitedFix availableUbiquiti UniFi OS
1 min read - 9.8CVE-2025-67038Lantronix EDS5000 Code Injection VulnerabilityRCEExploitedFix availableLantronix EDS5000
1 min read - 9.8CVE-2026-20253Splunk Enterprise Missing Authentication for Critical Function VulnerabilityExploitedFix availableSplunk Enterprise
1 min read - 10.0CVE-2026-48907Widget Factory Joomla Content Editor Improper Access Control VulnerabilityExploitedVerify fixWidget Factory Joomla Content Editor
1 min read - 6.5CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN Manager
1 min read - 8.5CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityExploitedFix availableLiteSpeed cPanel Plugin
1 min read - 9.8CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityExploitedVerify fixOracle PeopleSoft Enterprise PeopleTools
1 min read - 10.0CVE-2026-10520Ivanti Sentry OS Command Injection VulnerabilityRCEExploitedVerify fixIvanti Sentry
1 min read - 8.8CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityExploitedFix availableGoogle Chromium V8
1 min read - 5.8CVE-2026-7473Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityExploitedVerify fixArista Extensible Operating System
1 min read - 7.8CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN Manager
1 min read - 9.3CVE-2026-50751Check Point Security Gateway Improper Authentication VulnerabilityExploitedVerify fixCheck Point Security Gateway
1 min read - 8.7CVE-2026-42271BerriAI LiteLLM Command Injection VulnerabilityExploitedVerify fixBerriAI LiteLLM
1 min read - 7.5CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityExploitedVerify fixSolarWinds Serv-U
1 min read - 9.3CVE-2026-45247Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityRCEExploitedFix availableMirasvit Mirasvit Full Page Cache Warmer
1 min read - 8.4CVE-2025-48595Android Framework Integer Overflow VulnerabilityLPEExploitedVerify fixAndroid Framework
1 min read - 7.8CVE-2022-0492Linux Kernel Improper Authentication VulnerabilityLPEExploitedVerify fixLinux Kernel
1 min read - 7.5CVE-2024-21182Oracle WebLogic Server Unspecified VulnerabilityExploitedVerify fixOracle WebLogic Server
1 min read - 7.8CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityExploitedFix availablePalo Alto Networks PAN-OS
1 min read - 9.3CVE-2026-48027Nx Console Embedded Malicious Code VulnerabilityExploitedVerify fixNx Nx Console
1 min read - 9.8CVE-2026-8398Daemon Tools Lite Embedded Malicious Code VulnerabilityExploitedVerify fixDaemon Daemon Tools Lite
1 min read - 9.6CVE-2026-45321TanStack Unspecified VulnerabilityExploitedVerify fixTanStack TanStack
1 min read - 10.0CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityExploitedFix availableLiteSpeed cPanel Plugin
1 min read - 9.8CVE-2026-9082Drupal Core SQL Injection VulnerabilityRCEExploitedFix availableDrupal Core
1 min read - 6.7CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityExploitedFix availableTrend Micro Apex One
1 min read - 9.4CVE-2025-34291Langflow Origin Validation Error VulnerabilityExploitedVerify fixLangflow Langflow
1 min read - 7.8CVE-2026-41091Microsoft Defender Link Following VulnerabilityExploitedFix availableMicrosoft Defender
1 min read - 4.0CVE-2026-45498Microsoft Defender Denial of Service VulnerabilityExploitedFix availableMicrosoft Defender
1 min read - 8.8CVE-2010-0806Microsoft Internet Explorer Use-After-Free VulnerabilityExploitedVerify fixMicrosoft Internet Explorer
1 min read - 8.8CVE-2010-0249Microsoft Internet Explorer Use-After-Free VulnerabilityExploitedVerify fixMicrosoft Internet Explorer
1 min read - 8.8CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityExploitedVerify fixAdobe Acrobat and Reader
1 min read - 8.8CVE-2009-1537Microsoft DirectX NULL Byte Overwrite VulnerabilityExploitedVerify fixMicrosoft DirectX
1 min read - 9.8CVE-2008-4250Microsoft Windows Buffer Overflow VulnerabilityExploitedVerify fixMicrosoft Windows
1 min read - 8.1CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting VulnerabilityExploitedFix availableMicrosoft Microsoft
1 min read - 10.0CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityExploitedVerify fixCisco Catalyst SD-WAN
1 min read - 9.3CVE-2026-42208BerriAI LiteLLM SQL Injection VulnerabilityExploitedVerify fixBerriAI LiteLLM
1 min read