Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2001-0537 | CVE-2001-0537 | HIGH | N/A | 68.45% | cvelistv5 | |
| cve-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-07-22 |
| cve-2026-16232 | Check Point SmartConsole Improper Authentication Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-07-22 |
| cve-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-07-21 |
| cve-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability | HIGH | 8.1 | N/A | cvelistv5 | 2026-07-21 |
| cve-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-07-22 |
| cve-2025-68493 | org.apache.struts: Apache Struts: Information disclosure and denial of service via missing XML validation | HIGH | 7.1 | N/A | cvelistv5 | 2026-06-30 |
| cve-2026-41176 | Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-07-15 |
| cve-2026-34197 | Apache ActiveMQ Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-04-16 |
| cve-2026-1603 | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-03-09 |
| cve-2026-10520 | Ivanti Sentry OS Command Injection Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-06-11 |
| cve-2025-71284 | CVE-2025-71284 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2025-55190 | github.com/argoproj/argo-cd: Project API Token Exposes Repository Credentials | HIGH | 8.8 | N/A | cvelistv5 | 2026-06-28 |
| cve-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | MEDIUM | 5.3 | N/A | cvelistv5 | 2025-05-19 |
| cve-2025-34067 | Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-34049 | OptiLink ONT1GEW GPON Remote Code Execution | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-34044 | WIFISKY 7-Layer Flow Control Router Remote Command Execution | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-34026 | Versa Concerto Improper Authentication Vulnerability | CRITICAL | 9.2 | N/A | cvelistv5 | 2026-01-22 |
| cve-2025-34022 | Selea Targa IP OCR-ANPR Camera Path Traversal | CRITICAL | 9.3 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-34021 | Selea Targa IP OCR-ANPR Camera Server-Side Request Forgery | HIGH | 7.8 | N/A | cvelistv5 | 2026-06-17 |
| cve-2025-0107 | CVE-2025-0107 | HIGH | 7.7 | N/A | cvelistv5 | |
| cve-2024-9463 | Palo Alto Networks Expedition OS Command Injection Vulnerability | CRITICAL | 9.9 | N/A | cvelistv5 | 2024-11-14 |
| cve-2024-38653 | CVE-2024-38653 | HIGH | 8.2 | N/A | cvelistv5 | |
| cve-2024-36858 | CVE-2024-36858 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2024-36857 | CVE-2024-36857 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2024-36111 | CVE-2024-36111 | MEDIUM | 6.3 | N/A | cvelistv5 | |
| cve-2024-35219 | openapi-generator-online: Path traversal via outputFolder option | HIGH | 8.3 | N/A | cvelistv5 | 2025-11-21 |
| cve-2024-32739 | CVE-2024-32739 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2024-32738 | CVE-2024-32738 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2024-29895 | SUSE CVE CVE-2024-29895 | UNKNOWN | N/A | N/A | cvelistv5 | 2025-02-16 |