Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-05
cve-2025-11953 @react-native-community/cli-server-api: Command injection in React Native CLI HIGH 8.1 N/A cvelistv5 2026-03-26
cve-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability HIGH 8.6 N/A cvelistv5 2026-02-03
cve-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-02-03
cve-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability MEDIUM 6.8 N/A cvelistv5 2026-02-03
cve-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability HIGH N/A 55.95% cvelistv5 2026-02-03
cve-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2025-06-30
cve-2025-25231 Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints. HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2024-10-09
cve-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability CRITICAL 9.4 N/A cvelistv5 2024-09-19
cve-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2024-09-13
cve-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CRITICAL N/A N/A cvelistv5 2025-01-14
cve-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability CRITICAL 9.3 N/A cvelistv5 2024-03-25
cve-2023-46747 F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-10-31
cve-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2023-11-02
cve-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-07-19
cve-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability CRITICAL 9.2 N/A cvelistv5 2023-06-13
cve-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CRITICAL 10.0 N/A cvelistv5 2023-10-05
cve-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerability CRITICAL N/A 99.39% cvelistv5 2021-11-03
cve-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability HIGH 7.8 42.52% cvelistv5 2022-01-28
cve-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability CRITICAL N/A 90.71% cvelistv5 2021-12-10
cve-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability HIGH 8.8 99.23% cvelistv5 2022-02-10
cve-2015-7501 SUSE CVE CVE-2015-7501 CRITICAL 9.8 85.56% cvelistv5 2025-04-25
cve-2011-4085 Invoker servlets authentication bypass (HTTP verb tampering) UNKNOWN N/A 2.94% cvelistv5 2026-08-04
cve-2010-0738 Red Hat JBoss Authentication Bypass Vulnerability CRITICAL N/A 79.42% cvelistv5 2022-05-25
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-01-29
cve-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A N/A cvelistv5 2026-01-27
cve-2026-24061 SUSE CVE CVE-2026-24061 UNKNOWN N/A N/A cvelistv5 2026-03-13
cve-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL N/A N/A cvelistv5 2026-01-26
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26