Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability HIGH N/A 5.07% cvelistv5 2026-02-24
cve-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A 85.80% cvelistv5 2026-01-27
cve-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL N/A 88.18% cvelistv5 2026-02-05
cve-2026-2441 Google Chromium CSS Use-After-Free Vulnerability HIGH N/A 55.10% cvelistv5 2026-02-17
cve-2026-24061 GNU InetUtils Argument Injection Vulnerability HIGH N/A 98.98% cvelistv5 2026-01-26
cve-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL N/A 96.54% cvelistv5 2026-01-26
cve-2026-23744 REC in MCPJam inspector due to HTTP Endpoint exposes CRITICAL 9.8 67.52% cvelistv5 2026-06-17
cve-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability HIGH N/A 13.35% cvelistv5 2026-02-18
cve-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability HIGH N/A 17.71% cvelistv5 2026-03-03
cve-2026-21902 Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root CRITICAL 9.8 18.00% cvelistv5 2026-06-17
cve-2026-21891 ZimaOS has Authentication Bypass via System-Level Username CRITICAL 9.4 2.35% cvelistv5 2026-06-17
cve-2026-21858 CVE-2026-21858 CRITICAL 10.0 78.45% cvelistv5
cve-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability HIGH N/A 93.72% cvelistv5 2026-04-13
cve-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability HIGH N/A 4.12% cvelistv5 2026-02-10
cve-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability HIGH N/A 4.80% cvelistv5 2026-02-10
cve-2026-21519 Microsoft Windows Type Confusion Vulnerability HIGH N/A 2.46% cvelistv5 2026-02-10
cve-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability HIGH N/A 1.54% cvelistv5 2026-02-10
cve-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability HIGH N/A 15.64% cvelistv5 2026-02-10
cve-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability HIGH N/A 26.24% cvelistv5 2026-02-10
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.87% cvelistv5 2026-01-26
cve-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability HIGH N/A 1.24% cvelistv5 2026-03-03
cve-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A 29.58% cvelistv5 2026-03-18
cve-2026-20805 Microsoft Windows Information Disclosure Vulnerability HIGH N/A 7.20% cvelistv5 2026-01-13
cve-2026-20700 Apple Multiple Buffer Overflow Vulnerability HIGH N/A 1.34% cvelistv5 2026-02-12
cve-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability MEDIUM 6.5 28.17% cvelistv5 2026-06-15
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 96.94% cvelistv5 2026-06-18
cve-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability HIGH 7.8 25.32% cvelistv5 2026-06-09
cve-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CRITICAL 10.0 91.52% cvelistv5 2026-05-14
cve-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability HIGH N/A 31.83% cvelistv5 2026-04-20
cve-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability CRITICAL N/A 42.66% cvelistv5 2026-03-19