Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-21519 Microsoft Windows Type Confusion Vulnerability HIGH N/A 2.46% cvelistv5 2026-02-10
cve-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability HIGH N/A 1.54% cvelistv5 2026-02-10
cve-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability HIGH N/A 15.64% cvelistv5 2026-02-10
cve-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability HIGH N/A 26.24% cvelistv5 2026-02-10
cve-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL N/A 88.18% cvelistv5 2026-02-05
cve-2025-11953 React Native Community CLI OS Command Injection Vulnerability HIGH N/A 93.98% cvelistv5 2026-02-05
cve-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability HIGH 8.6 84.62% cvelistv5 2026-02-03
cve-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 83.62% cvelistv5 2026-02-03
cve-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability MEDIUM 6.8 35.65% cvelistv5 2026-02-03
cve-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability CRITICAL 9.8 36.61% cvelistv5 2026-02-03
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 9.4 86.09% cvelistv5 2026-01-27
cve-2026-24061 GNU InetUtils Argument Injection Vulnerability HIGH N/A 98.06% cvelistv5 2026-01-26
cve-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL N/A 96.54% cvelistv5 2026-01-26
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 85.66% cvelistv5 2026-01-26
cve-2018-14634 kernel: Integer overflow in Linux's create_elf_tables function HIGH 7.8 14.69% cvelistv5 2026-06-30
cve-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 9.8 22.38% cvelistv5 2026-01-23
cve-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability HIGH N/A 48.87% cvelistv5 2026-01-22
cve-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability HIGH N/A 4.52% cvelistv5 2026-01-22
cve-2025-34026 Versa Concerto Improper Authentication Vulnerability CRITICAL 9.2 81.94% cvelistv5 2026-01-22
cve-2025-31125 Vite Vitejs Improper Access Control Vulnerability HIGH N/A 58.46% cvelistv5 2026-01-22
cve-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability HIGH N/A 4.54% cvelistv5 2026-01-21
cve-2026-20805 Microsoft Windows Information Disclosure Vulnerability HIGH N/A 5.19% cvelistv5 2026-01-13
cve-2025-8110 Gogs Path Traversal Vulnerability HIGH N/A 82.47% cvelistv5 2026-01-12
cve-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability CRITICAL 10.0 90.19% cvelistv5 2026-01-07
cve-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability HIGH N/A 67.31% cvelistv5 2026-01-07
cve-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability HIGH 8.7 83.22% cvelistv5 2025-12-29
cve-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability HIGH 8.8 96.92% cvelistv5 2025-12-22
cve-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability CRITICAL 9.3 26.51% cvelistv5 2025-12-19