Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-8054 CVE-2026-8054 CRITICAL 10.0 1.58% cvelistv5
cve-2026-78141 A vulnerability has been found in Tenda CH22 1.0.0.1 LOW 2.1 1.07% cvelistv5 2026-08-27
cve-2026-72898 Metabase SQL Injection Vulnerability CRITICAL 10.0 94.22% cvelistv5 2026-08-11
cve-2026-54066 SUSE CVE CVE-2026-54066 UNKNOWN N/A 2.39% cvelistv5 2026-07-30
cve-2026-5153 CVE-2026-5153 MEDIUM 6.5 3.30% cvelistv5
cve-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 85.40% cvelistv5 2026-07-22
cve-2026-48313 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted ... CRITICAL 9.3 2.95% cvelistv5 2026-08-28
cve-2026-48282 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 10.0 42.39% cvelistv5 2026-07-07
cve-2026-4631 cockpit: Cockpit: Unauthenticated remote code execution due to SSH command-line argument injection CRITICAL 9.8 15.48% cvelistv5 2026-08-04
cve-2026-42271 BerriAI LiteLLM Command Injection Vulnerability HIGH N/A 83.59% cvelistv5 2026-06-08