Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-33017 Langflow Code Injection Vulnerability HIGH N/A 24.75% cvelistv5 2026-03-25
cve-2025-54068 Laravel Livewire Code Injection Vulnerability HIGH N/A 97.07% cvelistv5 2026-03-20
cve-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability HIGH N/A 0.43% cvelistv5 2026-03-20
cve-2025-43510 Apple Multiple Products Improper Locking Vulnerability HIGH N/A 0.36% cvelistv5 2026-03-20
cve-2025-32432 Craft CMS Code Injection Vulnerability CRITICAL 10.0 99.78% cvelistv5 2026-03-20
cve-2025-31277 webkitgtk: Processing maliciously crafted web content may lead to memory corruption HIGH 8.8 1.63% cvelistv5 2026-08-31
cve-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability CRITICAL N/A 42.66% cvelistv5 2026-03-19
cve-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A 29.58% cvelistv5 2026-03-18
cve-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability HIGH 7.2 19.56% cvelistv5 2026-03-18
cve-2025-47813 Wing FTP Server Information Disclosure Vulnerability HIGH N/A 62.97% cvelistv5 2026-03-16
cve-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability HIGH N/A 1.03% cvelistv5 2026-03-13
cve-2026-3909 chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia HIGH 8.8 0.70% cvelistv5 2026-09-04
gcve-1-2026-0020 GCVE-1-2026-0020 HIGH N/A N/A ndaal_kev 2026-03-11
cve-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability HIGH N/A 98.99% cvelistv5 2026-03-11
cve-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability HIGH N/A 87.64% cvelistv5 2026-03-09
cve-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 89.50% cvelistv5 2026-03-09
cve-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery HIGH N/A 99.68% cvelistv5 2026-03-09
cve-2023-43000 Apple Multiple products Use-After-Free Vulnerability HIGH N/A 3.90% cvelistv5 2026-03-05
cve-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability HIGH N/A 1.94% cvelistv5 2026-03-05
cve-2021-30952 SUSE CVE CVE-2021-30952 HIGH 7.8 6.96% cvelistv5 2026-09-01
cve-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability CRITICAL 9.8 63.63% cvelistv5 2026-03-05
cve-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability CRITICAL 9.8 100.00% cvelistv5 2026-03-05
cve-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability HIGH N/A 17.71% cvelistv5 2026-03-03
cve-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability HIGH N/A 1.24% cvelistv5 2026-03-03
cve-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability HIGH N/A 88.48% cvelistv5 2026-02-25
cve-2022-20775 Cisco SD-WAN Path Traversal Vulnerability HIGH 7.8 12.47% cvelistv5 2026-02-25
cve-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability HIGH N/A 5.07% cvelistv5 2026-02-24
cve-2025-68461 roundcubemail: Roundcube Webmail: Cross-Site Scripting (XSS) vulnerability via crafted SVG animate tag MEDIUM 6.1 26.84% cvelistv5 2026-06-28
cve-2025-49113 roundcubemail: Remote Code Execution in Roundcube via Unvalidated _from Parameter CRITICAL 9.9 98.90% cvelistv5 2026-06-28
cve-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability HIGH N/A 13.35% cvelistv5 2026-02-18