Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-42208 LiteLLM: LiteLLM: Unauthorized data access and modification via SQL injection CRITICAL 9.8 N/A cvelistv5 2026-07-11
cve-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2026-05-07
cve-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability CRITICAL 9.3 N/A cvelistv5 2026-05-06
cve-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-... HIGH 7.8 N/A cvelistv5 2026-09-08
cve-2026-31431 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-... HIGH 7.8 N/A cvelistv5 2026-09-08
cve-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-04-30
cve-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability HIGH N/A N/A cvelistv5 2026-04-28
cve-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability CRITICAL N/A 95.44% cvelistv5 2026-04-28
cve-2025-29635 D-Link DIR-823X Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2026-04-24
cve-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability HIGH 8.8 N/A cvelistv5 2026-04-24
cve-2024-57728 SimpleHelp Path Traversal Vulnerability HIGH 7.2 N/A cvelistv5 2026-04-24
cve-2024-57726 SimpleHelp Missing Authorization Vulnerability CRITICAL 9.9 N/A cvelistv5 2026-04-24
cve-2026-39987 Marimo Remote Code Execution Vulnerability HIGH N/A N/A cvelistv5 2026-04-23
cve-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability CRITICAL N/A N/A cvelistv5 2026-04-22
cve-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2025-2749 Kentico Xperience Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability HIGH 7.3 99.99% cvelistv5 2026-04-20
cve-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability HIGH 8.2 78.05% cvelistv5 2026-04-20
cve-2026-34197 org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: Apache ActiveMQ: RCE via crafted discovery URI in Jolokia JMX-HTTP bridge HIGH 8.8 N/A cvelistv5 2026-08-17
cve-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2026-04-14
cve-2009-0238 Microsoft Office Remote Code Execution HIGH N/A 43.21% cvelistv5 2026-04-14
cve-2026-34621 Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification ... HIGH 8.6 N/A cvelistv5 2026-08-28
cve-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2026-04-13
cve-2025-60710 Microsoft Windows Link Following Vulnerability HIGH 7.8 N/A cvelistv5 2026-04-13
cve-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability HIGH 7.8 12.18% cvelistv5 2026-04-13
cve-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability CRITICAL N/A 59.29% cvelistv5 2026-04-13