Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-31
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-01-29
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2025-07-20
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-31
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-04-08
cve-2026-63219 GeoNetwork is a catalog application to manage spatially referenced resources HIGH 8.6 N/A cvelistv5 2026-09-09
cve-2026-58400 GeoNetwork is a catalog application to manage spatially referenced resources CRITICAL 9.1 N/A cvelistv5 2026-09-09
cve-2014-3704 drupal7: SQL injection leading to code execution and privilege escalation (SA-CORE-2014-005) UNKNOWN N/A 99.97% cvelistv5 2025-11-21
cve-2026-8054 CVE-2026-8054 CRITICAL 10.0 N/A cvelistv5
cve-2026-8037 Progress LoadMaster Command Injection Vulnerability CRITICAL 9.6 N/A cvelistv5 2026-08-07
cve-2026-78141 A vulnerability has been found in Tenda CH22 1.0.0.1 LOW 2.1 N/A cvelistv5 2026-08-27
cve-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability HIGH 8.9 N/A cvelistv5 2026-08-21
cve-2026-72898 Metabase SQL Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-08-11
cve-2026-5153 CVE-2026-5153 MEDIUM 6.5 N/A cvelistv5
cve-2026-48282 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-07-07
cve-2026-4631 cockpit: Cockpit: Unauthenticated remote code execution due to SSH command-line argument injection CRITICAL 9.8 N/A cvelistv5 2026-08-04
cve-2026-42271 litellm: LiteLLM: Authenticated command execution via MCP stdio test endpoints HIGH 8.8 N/A cvelistv5 2026-06-30
cve-2026-3836 dnf5: dnf5: Denial of Service via path traversal in D-Bus locale configuration MEDIUM 5.5 N/A cvelistv5 2026-06-28
cve-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-06-12
cve-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-06-23
cve-2026-29059 CVE-2026-29059 MEDIUM 6.9 N/A cvelistv5
cve-2026-28496 CVE-2026-28496 CRITICAL 9.4 N/A cvelistv5
cve-2026-28409 CVE-2026-28409 CRITICAL 10.0 N/A cvelistv5
cve-2026-2699 CVE-2026-2699 CRITICAL 9.8 N/A cvelistv5
cve-2026-2652 mlflow: mlflow: Authentication bypass allows unauthorized job management and data injection HIGH 8.6 N/A cvelistv5 2026-07-08
cve-2026-22679 CVE-2026-22679 CRITICAL 9.8 N/A cvelistv5
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-06-18