Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-34509 Sitecore XM and XP Hardcoded Credentials HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-34291 Langflow Origin Validation Error Vulnerability HIGH N/A N/A cvelistv5 2026-05-21
cve-2025-34152 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-3415 SUSE CVE CVE-2025-3415 MEDIUM 4.3 N/A cvelistv5 2026-08-25
cve-2025-34143 ETQ Reliance CG Authentication Bypass via Trailing Space RCE CRITICAL 9.3 N/A cvelistv5 2026-06-17
cve-2025-34068 Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters CRITICAL 9.3 N/A cvelistv5 2026-06-17
cve-2025-34067 Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34059 Dahua Smart Cloud Gateway Registration Management Platform SQL Injection HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34058 Hikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File Read HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34057 Ruijie NBR Router Administrative Credential Disclosure HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34054 AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34049 OptiLink ONT1GEW GPON Remote Code Execution CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-34048 D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34047 Leadsec VPN Path Traversal Arbitrary File Read HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34046 Fanwei E-Office Unauthenticated File Upload CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34045 WeiPHP Path Traversal Arbitrary File Read HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-34044 WIFISKY 7-Layer Flow Control Router Remote Command Execution CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-34043 Vacron NVR Remote Command Execution CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34042 Beward N100 IP Camera Remote Command Execution CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-34041 Sangfor Endpoint Detection and Response OS Command Injection CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34040 Seeyon Zhiyuan OA System Path Traversal File Upload CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34039 Yonyou NC BeanShell Command Injection CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34038 Weaver E-cology SQL Injection HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-34037 Linksys Routers E/WAG/WAP/WES/WET/WRT-Series CRITICAL 10.0 N/A cvelistv5 2026-07-22
cve-2025-34036 Shenzhen TVT CCTV-DVR Command Injection CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2025-34033 5VTechnologies Blue Angel Software Suite OS Command Injection HIGH 8.8 N/A cvelistv5 2026-06-17
cve-2025-34031 Moodle LMS Jmol Plugin Path Traversal HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-34030 sar2html OS Command Injection CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34028 Commvault Command Center Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2025-05-02
cve-2025-34027 The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse pro... CRITICAL 10.0 N/A cvelistv5 2026-08-25