Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2006-2492 Microsoft Word Malformed Object Pointer Vulnerability HIGH N/A 48.11% cvelistv5 2022-06-08
cve-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability HIGH N/A 54.63% cvelistv5 2022-01-21
cve-2005-2773 HP OpenView Network Node Manager Remote Code Execution Vulnerability HIGH N/A 74.59% cvelistv5 2022-03-25
cve-2004-1464 Cisco IOS Denial-of-Service Vulnerability HIGH N/A 4.84% cvelistv5 2023-05-19
cve-2004-0210 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 7.21% cvelistv5 2022-03-03
cve-2002-0367 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 4.92% cvelistv5 2022-03-03
cve-2001-0537 CVE-2001-0537 HIGH N/A 68.45% cvelistv5
cve-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2026-06-23
cve-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-06-23
cve-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-06-23
cve-2025-67038 Lantronix EDS5000 Code Injection Vulnerability CRITICAL 9.3 19.26% cvelistv5 2026-06-23
cve-2026-39813 A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests. CRITICAL 9.8 N/A cvelistv5 2026-06-18
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-06-18
cve-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-06-16
cve-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability HIGH N/A N/A cvelistv5 2026-06-15
cve-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability MEDIUM 6.5 N/A cvelistv5 2026-06-15
cve-2026-10520 Ivanti Sentry OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-06-11
cve-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL N/A N/A cvelistv5 2026-06-12
cve-2026-10520 Ivanti Sentry OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-06-11
cve-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability HIGH N/A N/A cvelistv5 2026-06-09
cve-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability HIGH 7.8 N/A cvelistv5 2026-06-09
cve-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability HIGH N/A N/A cvelistv5 2026-06-09
cve-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability CRITICAL N/A N/A cvelistv5 2026-06-08
cve-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability CRITICAL N/A N/A cvelistv5 2026-06-08
cve-2026-42271 BerriAI LiteLLM Command Injection Vulnerability HIGH N/A N/A cvelistv5 2026-06-08
cve-2025-55182 Meta React Server Components Remote Code Execution Vulnerability CRITICAL N/A 99.80% cvelistv5 2025-12-05
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-01-29
cve-2025-59719 - CRITICAL 9.1 29.22% cvelistv5