Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2025-4009 | CVE-2025-4009 | CRITICAL | 9.3 | 71.44% | cvelistv5 | |
| cve-2025-34509 | Sitecore XM and XP Hardcoded Credentials | HIGH | 7.5 | 55.87% | cvelistv5 | 2026-06-17 |
| cve-2025-34152 | Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter | CRITICAL | 9.4 | 68.60% | cvelistv5 | 2026-06-17 |
| cve-2025-34143 | ETQ Reliance CG Authentication Bypass via Trailing Space RCE | CRITICAL | 9.3 | 32.68% | cvelistv5 | 2026-06-17 |
| cve-2025-34030 | sar2html OS Command Injection | CRITICAL | 10.0 | 54.42% | cvelistv5 | 2026-06-17 |
| cve-2025-34028 | Commvault Command Center Path Traversal Vulnerability | HIGH | N/A | 97.55% | cvelistv5 | 2025-05-02 |
| cve-2025-34027 | The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse pro... | CRITICAL | 10.0 | 45.22% | cvelistv5 | 2026-08-25 |
| cve-2025-32814 | CVE-2025-32814 | CRITICAL | 9.8 | 36.41% | cvelistv5 | |
| cve-2025-31324 | SAP NetWeaver Unrestricted File Upload Vulnerability | CRITICAL | N/A | 99.47% | cvelistv5 | 2025-04-29 |
| cve-2025-3102 | SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation | HIGH | 8.1 | 76.24% | cvelistv5 | 2026-06-17 |
| cve-2025-30567 | CVE-2025-30567 | HIGH | 7.5 | 2.79% | cvelistv5 | |
| cve-2025-30406 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | HIGH | N/A | 94.34% | cvelistv5 | 2025-04-08 |
| cve-2025-29063 | CVE-2025-29063 | CRITICAL | 9.8 | 1.08% | cvelistv5 | |
| cve-2025-2294 | CVE-2025-2294 | CRITICAL | 9.8 | 78.36% | cvelistv5 | |
| cve-2025-1302 | SUSE CVE CVE-2025-1302 | UNKNOWN | N/A | 10.39% | cvelistv5 | 2025-02-18 |
| cve-2025-0868 | Remote Code Execution in DocsGPT | CRITICAL | 9.3 | 17.09% | cvelistv5 | 2026-06-17 |
| cve-2024-8856 | CVE-2024-8856 | CRITICAL | 9.8 | 94.00% | cvelistv5 | |
| cve-2024-8752 | CVE-2024-8752 | CRITICAL | 9.3 | 11.76% | cvelistv5 | |
| cve-2024-6893 | CVE-2024-6893 | HIGH | 7.5 | 32.92% | cvelistv5 | |
| cve-2024-6670 | Progress WhatsUp Gold SQL Injection Vulnerability | CRITICAL | 9.8 | 93.00% | cvelistv5 | 2024-09-16 |
| cve-2024-6587 | CVE-2024-6587 | HIGH | 7.5 | 35.32% | cvelistv5 | |
| cve-2024-6220 | CVE-2024-6220 | CRITICAL | 9.8 | 35.46% | cvelistv5 | |
| cve-2024-6205 | CVE-2024-6205 | HIGH | 7.6 | 4.13% | cvelistv5 | |
| cve-2024-50603 | Aviatrix Controllers OS Command Injection Vulnerability | CRITICAL | 10.0 | 98.55% | cvelistv5 | 2025-01-16 |
| cve-2024-4885 | Progress WhatsUp Gold Path Traversal Vulnerability | CRITICAL | 9.8 | 99.29% | cvelistv5 | 2025-03-03 |
| cve-2024-48766 | CVE-2024-48766 | HIGH | 8.6 | 69.70% | cvelistv5 | |
| cve-2024-45309 | CVE-2024-45309 | HIGH | 8.7 | 24.53% | cvelistv5 | |
| cve-2024-4443 | CVE-2024-4443 | CRITICAL | 9.8 | 10.36% | cvelistv5 | |
| cve-2024-4358 | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | CRITICAL | 9.8 | 97.48% | cvelistv5 | 2024-06-13 |
| cve-2024-43360 | CVE-2024-43360 | CRITICAL | 9.8 | 6.22% | cvelistv5 |