Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability CRITICAL 9.1 N/A cvelistv5 2025-12-16
cve-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2025-05-19
cve-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability MEDIUM 5.3 N/A cvelistv5 2025-05-19
cve-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CRITICAL N/A 99.98% cvelistv5 2025-04-04
cve-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability HIGH N/A N/A cvelistv5 2026-06-05
cve-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-13
cve-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-06-03
cve-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH 8.8 91.94% cvelistv5 2026-05-20
cve-2025-48595 Android Framework Integer Overflow Vulnerability HIGH 8.4 N/A cvelistv5 2026-06-02
cve-2022-0492 kernel: cgroups v1 release_agent feature may allow privilege escalation HIGH 7.0 5.53% cvelistv5 2026-08-07
cve-2024-21182 Oracle WebLogic Server Unspecified Vulnerability HIGH 7.5 74.16% cvelistv5 2026-06-01
cve-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CRITICAL N/A N/A cvelistv5 2026-05-29
cve-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability HIGH N/A N/A cvelistv5 2026-05-27
cve-2026-48027 Nx Console Embedded Malicious Code Vulnerability CRITICAL N/A N/A cvelistv5 2026-05-27
cve-2026-45321 SUSE CVE CVE-2026-45321 UNKNOWN N/A N/A cvelistv5 2026-05-29
cve-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability HIGH N/A N/A cvelistv5 2026-05-26
cve-2026-9082 drupal: Drupal core: SQL Injection vulnerability allows data manipulation CRITICAL 9.8 N/A cvelistv5 2026-06-28
cve-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-04-30
cve-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-03-18
cve-2024-42009 roundcubemail: A Cross-Site Scripting vulnerability in Roundcube CRITICAL 9.3 82.88% cvelistv5 2026-02-02
cve-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-05-21
cve-2025-34291 Langflow Origin Validation Error Vulnerability HIGH N/A N/A cvelistv5 2026-05-21
cve-2026-45498 Microsoft Defender Denial of Service Vulnerability HIGH N/A N/A cvelistv5 2026-05-20
cve-2026-41091 Microsoft Defender Link Following Vulnerability HIGH N/A N/A cvelistv5 2026-05-20
cve-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH 8.8 82.17% cvelistv5 2026-05-20
cve-2009-3459 SUSE CVE CVE-2009-3459 UNKNOWN N/A 86.58% cvelistv5 2026-05-27
cve-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability HIGH 8.8 51.21% cvelistv5 2026-05-20
cve-2008-4250 Microsoft Windows Buffer Overflow Vulnerability CRITICAL 9.8 98.75% cvelistv5 2026-05-20
cve-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability HIGH N/A N/A cvelistv5 2026-05-15
cve-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-05-14