Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-09-22
cve-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CRITICAL 10.0 0.42% cvelistv5 2026-09-22
cve-2026-93616 Check Point Multiple Products Path Traversal Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-09-22
cve-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability CRITICAL 9.8 0.33% cvelistv5 2026-09-22
cve-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability HIGH N/A 1.99% cvelistv5 2026-09-21
cve-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability HIGH N/A 0.28% cvelistv5 2026-09-18
cve-2025-39964 Linux Kernel Race Condition Vulnerability HIGH N/A 0.79% cvelistv5 2026-09-18
cve-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability HIGH N/A 2.03% cvelistv5 2026-09-18
cve-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability HIGH 7.8 0.25% cvelistv5 2026-09-16
cve-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 10.0 0.78% cvelistv5 2026-09-16
cve-2026-58704 Google Pixel Improper Authorization Vulnerability HIGH N/A 0.21% cvelistv5 2026-09-16
cve-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability HIGH N/A 2.01% cvelistv5 2026-09-14
cve-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability HIGH N/A 9.29% cvelistv5 2026-09-11
cve-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability HIGH N/A 0.69% cvelistv5 2026-09-11
cve-2026-42018 JFrog Artifactory Improper Authentication Vulnerability HIGH N/A 11.04% cvelistv5 2026-09-11
cve-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability HIGH N/A 9.06% cvelistv5 2026-09-11
cve-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CRITICAL 9.2 1.06% cvelistv5 2026-09-10
cve-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability HIGH 8.8 0.87% cvelistv5 2026-09-10
cve-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability HIGH N/A 1.00% cvelistv5 2026-09-09
cve-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 10.0 75.75% cvelistv5 2026-09-09
cve-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 9.3 5.60% cvelistv5 2026-09-09
cve-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability HIGH 8.1 2.40% cvelistv5 2026-09-09
cve-2026-86218 N-able N-central Static Code Injection Vulnerability HIGH N/A 7.49% cvelistv5 2026-09-08
cve-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability HIGH N/A 0.57% cvelistv5 2026-09-08
cve-2026-81963 Microsoft Windows Link Following Vulnerability HIGH N/A 0.63% cvelistv5 2026-09-08
cve-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 10.0 2.15% cvelistv5 2026-09-08
cve-2026-85046 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 1.46% cvelistv5 2026-09-04
cve-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 9.3 11.85% cvelistv5 2026-09-02
cve-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability HIGH N/A 8.51% cvelistv5 2026-09-02
cve-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 10.0 4.67% cvelistv5 2026-09-02