CISA Known Exploited Vulnerabilities catalog (page 2)
Page 2 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 2 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2019-1068 | Microsoft Microsoft SQL Server +12 | High 8.8 | — | 1 | — | 0.573 (99.1th percentile) | A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'. | ||
CVE-2015-5287 | — | High 7.8 | — | 1 | Yes | 0.050 (92.3th percentile) | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable na… | ||
CVE-2015-3246 | Libuser Project Libuser +3 | High 7.4 | — | 1 | Yes | 0.085 (95.1th percentile) | libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (incon… | ||
CVE-2026-60004 | Gitea Gitea | Critical 9.8 | — | 16 | — | 0.240 (97.9th percentile) | Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. | ||
CVE-2026-21962 | Oracle HTTP Server +2 | Critical 10.0 | — | 12 | — | 0.732 (99.5th percentile) | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Pro… | ||
CVE-2026-73570 | Synacor Zimbra Collaboration Suite +1 | High 8.9 | — | 11 | — | 0.766 (99.5th percentile) | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. | ||
CVE-2026-69836 | Microsoft Entra Id +1 | Critical 10.0 | — | 2 | — | 0.018 (79.2th percentile) | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. | ||
CVE-2026-72530 | Trueconf Trueconf Server +1 | Critical 9.0 | — | 1 | — | 0.017 (77.2th percentile) | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script t… | ||
CVE-2026-72529 | Trueconf Trueconf Server +1 | Critical 9.8 | — | 0 | — | 0.015 (73.9th percentile) | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by c… | ||
CVE-2026-64849 | Lfprojects Mlflow +1 | Critical 9.3 | — | 6 | — | 0.100 (95.7th percentile) | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. | ||
CVE-2026-65400 | Apple macOS | Critical 9.8 | — | 4 | — | 0.181 (97.2th percentile) | An authentication issue was addressed with improved state management. | ||
CVE-2026-59310 | VMware Cloud Foundation +5 | Critical 9.8 | Known | 6 | — | 0.617 (99.2th percentile) | VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. | ||
CVE-2026-55040 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +3 | Critical 9.1 | — | 5 | — | 0.695 (99.4th percentile) | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | ||
CVE-2026-33824 | Microsoft Windows 10 1607 +28 | Critical 9.8 | — | 2 | — | 0.771 (99.6th percentile) | Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. | ||
CVE-2025-62593 | Anyscale Ray +1 | High 8.8 | — | 2 | — | 0.602 (99.1th percentile) | Ray is an AI compute engine. | ||
CVE-2026-72898 | Metabase Metabase | Critical 10.0 | — | 14 | — | 0.982 (99.9th percentile) | Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance. | ||
CVE-2026-68820 | Microsoft Windows 10 1607 +31 | High 7.0 | — | 4 | — | 0.086 (95.1th percentile) | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
CVE-2026-20349 | Cisco Adaptive Security Appliance Software +3 | High 8.6 | — | 1 | — | 0.010 (63.4th percentile) | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauth… | ||
CVE-2026-8037 | Progress Connection Manager For Objectscale +7 | Critical 9.6 | — | 2 | — | 0.998 (100.0th percentile) | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting un… | ||
CVE-2026-63077 | Jetbrains Teamcity | Critical 9.8 | Known | 7 | Yes | 0.949 (99.9th percentile) | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | ||
CVE-2026-9198 | IBM Langflow Oss +1 | Critical 9.8 | — | 11 | Yes | 0.287 (98.2th percentile) | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via ex… | ||
CVE-2026-34486 | Apache Tomcat +7 | High 7.5 | — | 8 | — | 0.985 (99.9th percentile) | Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. | ||
CVE-2026-18556 | N-Able N-Central | High 7.4 | — | 1 | — | 0.079 (94.8th percentile) | Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. | ||
CVE-2026-18577 | N-Able N-Central | High 8.1 | — | 2 | — | 0.146 (96.7th percentile) | An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1 | ||
CVE-2026-20316 | Cisco Cisco Secure Firewall Management Center (Fmc) +1 | Medium 5.3 | Known | 0 | — | 0.351 (98.5th percentile) | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged a… | ||
CVE-2026-16812 | Arista Velocloud Orchestrator +1 | Critical 10.0 | — | 0 | — | 0.018 (78.2th percentile) | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. | ||
CVE-2025-68686 | Fortinet Fortios | Medium 5.9 | — | 0 | — | 0.295 (98.2th percentile) | An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, For… | ||
CVE-2026-50522 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +3 | Critical 9.8 | — | 6 | — | 0.030 (87.6th percentile) | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | ||
CVE-2026-16232 | Checkpoint Multi-Domain Security Management +3 | Critical 9.8 | — | 4 | Yes | 0.035 (89.3th percentile) | An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with ful… | ||
CVE-2026-63030 | WordPress WordPress | Critical 9.8 | — | 99 | Yes | 0.106 (95.8th percentile) | WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), cou… | ||
CVE-2026-60137 | WordPress WordPress | Medium 5.9 | — | 15 | Yes | 0.053 (92.7th percentile) | WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme pa… | ||
CVE-2026-0770 | Langflow Langflow | Critical 9.8 | — | 9 | Yes | 0.626 (99.2th percentile) | Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. | ||
CVE-2021-27137 | Dd-Wrt Dd-Wrt | High 8.1 | — | 0 | — | 0.040 (90.6th percentile) | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. | ||
CVE-2026-58644 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +3 | Critical 9.8 | — | 0 | — | 0.159 (96.9th percentile) | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | ||
CVE-2026-39808 | Fortinet Fortisandbox +1 | Critical 9.8 | — | 9 | — | 0.932 (99.8th percentile) | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code… | ||
CVE-2026-25089 | Fortinet Fortisandbox +4 | Critical 9.8 | — | 4 | — | 0.761 (99.5th percentile) | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox… | ||
CVE-2026-46817 | Oracle E-Business Suite +1 | Critical 9.8 | — | 4 | — | 0.123 (96.2th percentile) | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). | ||
CVE-2023-4346 | Knx Connection Authorization +1 | High 7.5 | — | 0 | — | 0.014 (72.0th percentile) | KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the devi… | ||
CVE-2026-56164 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +3 | Medium 5.3 | — | 2 | — | 0.010 (63.5th percentile) | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | ||
CVE-2026-56155 | Microsoft Windows 10 1607 +19 | High 7.8 | — | 0 | — | 0.003 (28.5th percentile) | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. | ||
CVE-2026-15410 | SonicWall Sma1000 +3 | High 7.2 | Known | 1 | — | 0.118 (96.1th percentile) | Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could po… | ||
CVE-2026-15409 | SonicWall Sma1000 +3 | Critical 10.0 | Known | 9 | Yes | 0.068 (94.1th percentile) | A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. | ||
CVE-2008-4128 | Cisco iOS +1 | High 8.1 | — | 0 | — | 0.339 (98.4th percentile) | Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary com… | ||
CVE-2026-56291 | Balbooa Forms +1 | Critical 9.8 | — | 5 | — | 0.149 (96.7th percentile) | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that all… | ||
CVE-2026-48939 | Icagenda.com Icagenda Extension For Joomla +1 | Critical 9.8 | — | 3 | — | 0.201 (97.5th percentile) | A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution. | ||
CVE-2026-56290 | Joomlack Page Builder Ck +1 | Critical 9.8 | — | 5 | — | 0.309 (98.3th percentile) | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that… | ||
CVE-2026-55255 | Langflow Langflow +1 | High 8.4 | — | 1 | — | 0.009 (59.6th percentile) | Langflow is a tool for building and deploying AI-powered agents and workflows. | ||
CVE-2026-48908 | Joomshaper.net Sp Page Builder Extension For Joomla +1 | Critical 9.8 | — | 16 | — | 0.892 (99.8th percentile) | A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. | ||
CVE-2026-48282 | Adobe Coldfusion +2 | Critical 10.0 | — | 4 | — | 0.424 (98.7th percentile) | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execu… | ||
CVE-2026-45659 | Microsoft Microsoft Sharepoint Enterprise Server 2016 +3 | High 8.8 | Known | 5 | — | 0.802 (99.6th percentile) | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
CVE-2026-48558 | Simple-Help Simplehelp +1 | Critical 10.0 | — | 1 | Yes | 0.803 (99.6th percentile) | SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. | ||
CVE-2026-20230 | Cisco Cisco Unified Communications Manager +1 | High 8.6 | — | 3 | — | 0.885 (99.8th percentile) | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attack… | ||
CVE-2026-12569 | Ptc Flexplm +2 | Critical 9.8 | Known | 0 | — | 0.460 (98.8th percentile) | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. | ||
CVE-2026-34910 | Ubiquiti Inc Efg +61 | Critical 10.0 | — | 2 | — | 0.900 (99.8th percentile) | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. | ||
CVE-2026-34909 | Ubiquiti Inc Efg +63 | Critical 10.0 | — | 0 | — | 0.692 (99.4th percentile) | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an und… | ||
CVE-2026-34908 | Ubiquiti Inc Efg +61 | Critical 10.0 | — | 1 | — | 0.889 (99.8th percentile) | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. | ||
CVE-2025-67038 | Lantronix E210 Series +37 | Critical 9.8 | — | 1 | — | 0.211 (97.6th percentile) | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. | ||
CVE-2026-20253 | Splunk Splunk +1 | Critical 9.8 | — | 10 | — | 0.969 (99.9th percentile) | In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. | ||
CVE-2026-48907 | Joomlacontenteditor.net Joomla Content Editor (Jce) Extension For Joomla +1 | Critical 9.8 | — | 29 | Yes | 0.854 (99.7th percentile) | A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution. | ||
CVE-2026-54420 | Litespeedtech Litespeed Cpanel Plugin +2 | High 8.5 | — | 4 | — | 0.014 (73.4th percentile) | LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running Clo… | ||
CVE-2026-20262 | Cisco Catalyst Sd-Wan Manager +1 | Medium 6.5 | — | 2 | — | 0.291 (98.2th percentile) | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an a… | ||
CVE-2026-35273 | Oracle Peoplesoft Enterprise Peopletools +1 | Critical 9.8 | Known | 6 | — | 0.967 (99.9th percentile) | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). | ||
CVE-2026-10520 | Ivanti Standalone Sentry | Critical 10.0 | — | 11 | — | 0.999 (100.0th percentile) | An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution | ||
CVE-2026-7473 | Arista Eos +1 | Medium 5.8 | — | 1 | — | 0.011 (66.1th percentile) | On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is… | ||
CVE-2026-20245 | Cisco Catalyst Sd-Wan Manager +3 | High 7.8 | — | 5 | — | 0.253 (98.0th percentile) | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vB… | ||
CVE-2026-11645 | Google Chrome | High 8.8 | — | 6 | — | 0.024 (84.4th percentile) | Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. | ||
CVE-2026-50751 | Checkpoint Gaia Embedded +3 | Critical 9.3 | Known | 12 | — | 0.853 (99.7th percentile) | A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish… | ||
CVE-2026-42271 | Berriai Litellm +2 | High 8.8 | — | 3 | Yes | 0.914 (99.8th percentile) | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. | ||
CVE-2026-28318 | Solarwinds Serv-U | High 7.5 | — | 3 | — | 0.480 (98.9th percentile) | SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. | ||
CVE-2026-45247 | Mirasvit Full Page Cache Warmer +1 | Critical 9.8 | — | 2 | — | 0.262 (98.0th percentile) | Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying… | ||
CVE-2025-48595 | Google Android | High 8.4 | — | 3 | — | 0.019 (80.4th percentile) | In multiple locations, there is a possible way to achieve code execution due to an integer overflow. | ||
CVE-2022-0492 | Canonical Ubuntu Linux +27 | High 7.8 | — | 12 | Yes | 0.055 (92.9th percentile) | A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. | ||
CVE-2024-21182 | Oracle Weblogic Server +1 | High 7.5 | — | 5 | — | 0.742 (99.5th percentile) | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). | ||
CVE-2026-0257 | Palo Alto Networks Pan-Os +4 | Critical 9.1 | Known | 14 | — | 0.956 (99.9th percentile) | Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized… | ||
CVE-2026-8398 | Avb Disc Soft Daemon Tools Lite +1 | Critical 9.8 | — | 0 | — | 0.015 (73.7th percentile) | A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc b… | ||
CVE-2026-48027 | Nrwl Nx-Console +1 | Critical 9.8 | Known | 0 | — | 0.018 (79.3th percentile) | Nx Console is the user interface for Nx & Lerna. | ||
CVE-2026-45321 | Abhishake1 Supersurkhet\/cli +212 | Critical 9.6 | Known | 13 | — | 0.033 (88.5th percentile) | On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. | ||
CVE-2026-48172 | Litespeedtech Litespeed Cpanel Plugin +3 | Critical 9.8 | — | 3 | — | 0.179 (97.2th percentile) | LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. | ||
CVE-2026-9082 | Drupal Drupal +1 | Critical 9.8 | — | 18 | Yes | 0.894 (99.8th percentile) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. | ||
CVE-2026-34926 | Trendmicro Apex One +2 | Medium 6.7 | — | 1 | — | 0.134 (96.5th percentile) | A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents… | ||
CVE-2025-34291 | Langflow Langflow | High 8.8 | — | 3 | — | 0.932 (99.8th percentile) | Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. | ||
CVE-2026-45498 | Microsoft Defender Antimalware Platform +1 | Medium 4.0 | — | 1 | — | 0.631 (99.2th percentile) | Microsoft Defender Denial of Service Vulnerability | ||
CVE-2026-41091 | Microsoft Malware Protection Engine +1 | High 7.8 | — | 7 | — | 0.082 (94.9th percentile) | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. | ||
CVE-2010-0806 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | Yes | 0.821 (99.7th percentile) | Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving acc… | ||
CVE-2010-0249 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | Yes | 0.919 (99.8th percentile) | Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2… | ||
CVE-2009-3459 | Adobe Acrobat +2 | High 8.8 | — | 0 | Yes | 0.865 (99.7th percentile) | Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers me… | ||
CVE-2009-1537 | Microsoft Directx +5 | High 8.8 | — | 0 | — | 0.511 (98.9th percentile) | Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 S… | ||
CVE-2008-4250 | Microsoft Windows 2000 +5 | Critical 9.8 | — | 5 | Yes | 0.988 (99.9th percentile) | The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a craf… | ||
CVE-2026-42897 | Microsoft Exchange Server +5 | High 8.1 | — | 1 | — | 0.707 (99.4th percentile) | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | ||
CVE-2026-20182 | Cisco Catalyst Sd-Wan Manager +4 | Critical 10.0 | — | 4 | Yes | 0.918 (99.8th percentile) | May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. | ||
CVE-2026-42208 | Berriai Litellm +1 | Critical 9.8 | — | 11 | Yes | 0.894 (99.8th percentile) | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. | ||
CVE-2026-6973 | Ivanti Endpoint Manager Mobile | High 7.2 | — | 0 | — | 0.345 (98.4th percentile) | An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution. | ||
CVE-2026-0300 | Palo Alto Networks Pan-Os +2 | Critical 9.8 | — | 14 | — | 0.417 (98.7th percentile) | A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code w… | ||
CVE-2026-31431 | Amazon Amazon Linux +48 | High 7.8 | — | 374 | Yes | 0.981 (99.9th percentile) | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the assoc… | ||
CVE-2026-41940 | Cpanel Cpanel +5 | Critical 9.8 | Known | 103 | Yes | 0.985 (99.9th percentile) | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. | ||
CVE-2026-32202 | Microsoft Windows 10 1607 +32 | Medium 4.3 | — | 9 | — | 0.709 (99.4th percentile) | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | ||
CVE-2024-1708 | Connectwise Screenconnect | High 8.4 | Known | 2 | Yes | 0.954 (99.9th percentile) | ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or criti… | ||
CVE-2025-29635 | Dlink Dir-823x Firmware +1 | High 7.2 | — | 0 | — | 0.879 (99.8th percentile) | A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiti… | ||
CVE-2024-7399 | Samsung Magicinfo 9 Server +1 | High 8.8 | — | 1 | Yes | 0.919 (99.8th percentile) | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. | ||
CVE-2024-57728 | — | High 7.2 | Known | 0 | — | 0.645 (99.2th percentile) | SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. |