Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2016-5312 Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream. MEDIUM 6.5 53.70% cvelistv5 2026-06-17
cve-2016-20097 Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unau... HIGH 8.7 0.47% cvelistv5 2026-09-08
cve-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2026-09-02
cve-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-09-02
cve-2023-54391 Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-con... CRITICAL 9.3 1.75% cvelistv5 2026-09-08
cve-2025-40553 CVE-2025-40553 CRITICAL 9.8 60.39% cvelistv5
cve-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 9.3 N/A cvelistv5 2026-09-02
cve-2026-78141 A vulnerability has been found in Tenda CH22 1.0.0.1 LOW 2.1 N/A cvelistv5 2026-08-27
cve-2026-5153 CVE-2026-5153 MEDIUM 6.5 N/A cvelistv5
cve-2026-1547 Totolink A7000R cstecgi.cgi setUnloadUserData command injection MEDIUM 6.3 2.88% cvelistv5 2026-06-17
cve-2025-60702 CVE-2025-60702 MEDIUM 6.5 2.54% cvelistv5
cve-2024-0250 CVE-2024-0250 MEDIUM 6.1 1.25% cvelistv5
cve-2023-39470 CVE-2023-39470 HIGH 7.2 1.76% cvelistv5
cve-2026-41948 Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access CRITICAL 9.4 N/A cvelistv5 2026-06-22
cve-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-09-02
cve-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-07-22
cve-2025-68493 org.apache.struts: Apache Struts: Information disclosure and denial of service via missing XML validation HIGH 7.1 43.34% cvelistv5 2026-06-30
cve-2023-25158 CVE-2023-25158 CRITICAL 9.8 1.09% cvelistv5
cve-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 9.3 N/A cvelistv5 2026-09-02
cve-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2026-09-02
cve-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-09-02
cve-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-09-02
cve-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2026-09-02
cve-2026-49869 Kestra OSS OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-09-02
cve-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability HIGH N/A N/A cvelistv5 2026-09-02
cve-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CRITICAL N/A 95.16% cvelistv5 2026-05-29
cve-2023-7330 CVE-2023-7330 CRITICAL 9.3 0.62% cvelistv5
cve-2022-50973 CVE-2022-50973 CRITICAL 9.8 1.52% cvelistv5
cve-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability HIGH N/A N/A cvelistv5 2026-08-31
cve-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability HIGH N/A N/A cvelistv5 2026-08-31