Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability HIGH 8.8 76.08% cvelistv5 2026-07-01
cve-2026-48558 SimpleHelp Authentication Bypass Vulnerability HIGH N/A 64.31% cvelistv5 2026-06-29
cve-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability HIGH 8.6 88.20% cvelistv5 2026-06-25
cve-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability CRITICAL 9.3 40.59% cvelistv5 2026-06-25
cve-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability CRITICAL 10.0 87.47% cvelistv5 2026-06-23
cve-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability HIGH N/A 65.04% cvelistv5 2026-06-23
cve-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability CRITICAL 10.0 85.19% cvelistv5 2026-06-23
cve-2025-67038 Lantronix EDS5000 Code Injection Vulnerability CRITICAL 9.3 19.26% cvelistv5 2026-06-23
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 96.94% cvelistv5 2026-06-18
cve-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability CRITICAL 10.0 78.10% cvelistv5 2026-06-16
cve-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability HIGH 8.5 1.44% cvelistv5 2026-06-15
cve-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability MEDIUM 6.5 28.17% cvelistv5 2026-06-15
cve-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 95.47% cvelistv5 2026-06-12
cve-2026-10520 Ivanti Sentry OS Command Injection Vulnerability CRITICAL 10.0 99.91% cvelistv5 2026-06-11
cve-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability MEDIUM 6.9 1.11% cvelistv5 2026-06-09
cve-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability HIGH 7.8 25.32% cvelistv5 2026-06-09
cve-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability HIGH N/A 2.19% cvelistv5 2026-06-09
cve-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability CRITICAL 9.3 83.77% cvelistv5 2026-06-08
cve-2026-42271 BerriAI LiteLLM Command Injection Vulnerability HIGH N/A 83.59% cvelistv5 2026-06-08
cve-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability HIGH 7.5 40.01% cvelistv5 2026-06-05
cve-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 27.55% cvelistv5 2026-06-03
cve-2025-48595 Android Framework Integer Overflow Vulnerability HIGH 8.4 1.71% cvelistv5 2026-06-02
cve-2022-0492 Linux Kernel Improper Authentication Vulnerability HIGH N/A 5.53% cvelistv5 2026-06-02
cve-2024-21182 Oracle WebLogic Server Unspecified Vulnerability HIGH 7.5 74.16% cvelistv5 2026-06-01
cve-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CRITICAL N/A 95.16% cvelistv5 2026-05-29
cve-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability CRITICAL 9.3 1.46% cvelistv5 2026-05-27
cve-2026-48027 Nx Console Embedded Malicious Code Vulnerability CRITICAL 9.3 1.85% cvelistv5 2026-05-27
cve-2026-45321 TanStack Unspecified Vulnerability CRITICAL N/A 2.34% cvelistv5 2026-05-27
cve-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability CRITICAL 10.0 18.91% cvelistv5 2026-05-26
cve-2026-9082 Drupal Core SQL Injection Vulnerability HIGH N/A 89.99% cvelistv5 2026-05-22