Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 20.07% cvelistv5 2026-07-10
cve-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability HIGH N/A 30.87% cvelistv5 2026-07-07
cve-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability HIGH 8.4 0.89% cvelistv5 2026-07-07
cve-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 88.51% cvelistv5 2026-07-07
cve-2026-48282 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 10.0 42.39% cvelistv5 2026-07-07
cve-2026-43499 SUSE CVE CVE-2026-43499 HIGH 7.8 0.28% cvelistv5 2026-08-31
cve-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability CRITICAL N/A 2.70% cvelistv5 2026-07-01
edb-48260 EDB-48260 HIGH N/A N/A ndaal_kev 2026-06-30
edb-48061 EDB-48061 HIGH N/A N/A ndaal_kev 2026-06-30
cve-2026-48558 SimpleHelp Authentication Bypass Vulnerability HIGH N/A 5.72% cvelistv5 2026-06-29
cve-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability HIGH 8.6 88.20% cvelistv5 2026-06-25
cve-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability CRITICAL N/A 46.05% cvelistv5 2026-06-25
cve-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability HIGH N/A 45.77% cvelistv5 2026-06-23
cve-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability HIGH N/A 1.79% cvelistv5 2026-06-23
cve-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability HIGH N/A 15.21% cvelistv5 2026-06-23
cve-2025-67038 Lantronix EDS5000 Code Injection Vulnerability CRITICAL 9.3 19.26% cvelistv5 2026-06-23
cve-2026-53359 kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role HIGH 7.8 0.17% cvelistv5 2026-08-31
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 96.94% cvelistv5 2026-06-18
cve-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability HIGH N/A 16.19% cvelistv5 2026-06-16
cve-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability HIGH N/A 0.81% cvelistv5 2026-06-15
cve-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability MEDIUM 6.5 28.17% cvelistv5 2026-06-15
cve-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL N/A 9.44% cvelistv5 2026-06-12
cve-2026-10520 Ivanti Sentry OS Command Injection Vulnerability CRITICAL 10.0 99.91% cvelistv5 2026-06-11
cve-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability HIGH N/A 0.65% cvelistv5 2026-06-09
cve-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability HIGH 7.8 25.32% cvelistv5 2026-06-09
cve-2026-11645 chromium-browser: Out of bounds memory access in V8 CRITICAL 9.6 2.19% cvelistv5 2026-06-28
cve-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability CRITICAL N/A 6.30% cvelistv5 2026-06-08
cve-2026-42271 BerriAI LiteLLM Command Injection Vulnerability HIGH N/A 12.75% cvelistv5 2026-06-08
cve-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability HIGH N/A 1.94% cvelistv5 2026-06-05
cve-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability HIGH N/A 2.08% cvelistv5 2026-06-03