Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-94127 EUVD-2026-84427 CRITICAL 9.8 N/A cvelistv5 Sep 23, 2026, 3:55:44 AM
cve-2026-93952 EUVD-2026-84296 CRITICAL 10.0 0.42% cvelistv5 Sep 23, 2026, 3:55:40 AM
cve-2026-93616 EUVD-2026-84375 CRITICAL 9.8 N/A cvelistv5 Sep 23, 2026, 3:55:59 AM
cve-2026-85102 EUVD-2026-75009 CRITICAL 9.8 0.33% cvelistv5 Sep 23, 2026, 3:55:34 AM
cve-2026-7273 A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request. HIGH 8.8 1.99% cvelistv5 2026-09-22
cve-2026-53266 kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite HIGH 7.5 0.28% cvelistv5 2026-08-05
cve-2025-39964 kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg MEDIUM 5.5 0.79% cvelistv5 2026-08-21
cve-2025-39682 kernel: tls: fix handling of zero-length records on the rx_list HIGH 7.0 2.03% cvelistv5 2026-07-30
cve-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability HIGH 7.8 0.25% cvelistv5 2026-09-16
cve-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 10.0 0.78% cvelistv5 2026-09-16
cve-2026-58704 Google Pixel Improper Authorization Vulnerability HIGH N/A 0.21% cvelistv5 2026-09-16
cve-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability HIGH N/A 2.01% cvelistv5 2026-09-14
cve-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability HIGH N/A 9.29% cvelistv5 2026-09-11
cve-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability HIGH N/A 0.69% cvelistv5 2026-09-11
cve-2026-42018 JFrog Artifactory Improper Authentication Vulnerability HIGH N/A 11.04% cvelistv5 2026-09-11
cve-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability HIGH N/A 9.06% cvelistv5 2026-09-11
cve-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CRITICAL 9.2 1.06% cvelistv5 2026-09-10
cve-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability HIGH 8.8 0.87% cvelistv5 2026-09-10
cve-2026-87491 chromium-browser: Chromium-browser: Arbitrary code execution via out-of-bounds write in V8 HIGH 8.8 1.00% cvelistv5 2026-09-10
cve-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 10.0 75.75% cvelistv5 2026-09-09
cve-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 9.3 5.60% cvelistv5 2026-09-09
cve-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability HIGH 8.1 2.40% cvelistv5 2026-09-09
cve-2026-86218 N-able N-central Static Code Injection Vulnerability HIGH N/A 7.49% cvelistv5 2026-09-08
cve-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability HIGH N/A 0.57% cvelistv5 2026-09-08
cve-2026-81963 Microsoft Windows Link Following Vulnerability HIGH N/A 0.63% cvelistv5 2026-09-08
cve-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 10.0 2.15% cvelistv5 2026-09-08
cve-2026-85046 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 1.46% cvelistv5 2026-09-04
cve-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 9.3 11.85% cvelistv5 2026-09-02
cve-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability HIGH N/A 8.51% cvelistv5 2026-09-02
cve-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 10.0 4.67% cvelistv5 2026-09-02