Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability MEDIUM 6.7 12.68% cvelistv5 2026-05-21
cve-2025-34291 Langflow Origin Validation Error Vulnerability CRITICAL 9.4 83.63% cvelistv5 2026-05-21
cve-2026-45498 Microsoft Defender Denial of Service Vulnerability MEDIUM 4.0 63.08% cvelistv5 2026-05-20
cve-2026-41091 Microsoft Defender Link Following Vulnerability HIGH 7.8 8.20% cvelistv5 2026-05-20
cve-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH 8.8 82.17% cvelistv5 2026-05-20
cve-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH 8.8 91.94% cvelistv5 2026-05-20
cve-2009-3459 SUSE CVE CVE-2009-3459 UNKNOWN N/A 86.58% cvelistv5 2026-05-27
cve-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability HIGH 8.8 51.21% cvelistv5 2026-05-20
cve-2008-4250 Microsoft Windows Buffer Overflow Vulnerability CRITICAL 9.8 98.75% cvelistv5 2026-05-20
cve-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability HIGH N/A 71.77% cvelistv5 2026-05-15
cve-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CRITICAL 10.0 91.52% cvelistv5 2026-05-14
cve-2026-42208 LiteLLM: LiteLLM: Unauthorized data access and modification via SQL injection CRITICAL 9.8 89.42% cvelistv5 2026-07-11
cve-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability HIGH 7.2 34.45% cvelistv5 2026-05-07
cve-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability CRITICAL 9.3 31.72% cvelistv5 2026-05-06
cve-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability HIGH N/A 99.91% cvelistv5 2026-05-01
cve-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 98.53% cvelistv5 2026-04-30
cve-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability MEDIUM 4.3 63.69% cvelistv5 2026-04-28
cve-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability HIGH 8.4 95.49% cvelistv5 2026-04-28
cve-2025-29635 D-Link DIR-823X Command Injection Vulnerability HIGH 7.2 87.94% cvelistv5 2026-04-24
cve-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability HIGH 8.8 91.94% cvelistv5 2026-04-24
cve-2024-57728 SimpleHelp Path Traversal Vulnerability HIGH 7.2 6.98% cvelistv5 2026-04-24
cve-2024-57726 SimpleHelp Missing Authorization Vulnerability CRITICAL 9.9 66.60% cvelistv5 2026-04-24
cve-2026-39987 Marimo Remote Code Execution Vulnerability HIGH N/A 99.56% cvelistv5 2026-04-23
cve-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability HIGH 7.8 6.75% cvelistv5 2026-04-22
cve-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability MEDIUM 6.5 31.35% cvelistv5 2026-04-20
cve-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability HIGH N/A 7.66% cvelistv5 2026-04-20
cve-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability MEDIUM 5.4 24.59% cvelistv5 2026-04-20
cve-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability HIGH N/A 1.69% cvelistv5 2026-04-20
cve-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability HIGH N/A 2.46% cvelistv5 2026-04-20
cve-2025-2749 Kentico Xperience Path Traversal Vulnerability HIGH 7.2 3.99% cvelistv5 2026-04-20