Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CRITICAL 9.8 14.12% cvelistv5 2026-09-02
cve-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability CRITICAL 9.4 3.84% cvelistv5 2026-08-31
cve-2026-8206 Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password' CRITICAL 9.8 0.77% cvelistv5 2026-07-22
cve-2026-81963 Microsoft Windows Link Following Vulnerability HIGH 7.8 0.39% cvelistv5 2026-09-08
cve-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability HIGH 8.8 4.48% cvelistv5 2026-08-31
cve-2026-8054 Unauthenticated SQL Injection in dotCMS Publish Audit API CRITICAL 10.0 1.62% cvelistv5 2026-06-17
cve-2026-8037 Progress LoadMaster Command Injection Vulnerability HIGH N/A 77.36% cvelistv5 2026-08-07
cve-2026-78141 A vulnerability has been found in Tenda CH22 1.0.0.1 LOW 2.1 2.75% cvelistv5 2026-08-27
cve-2026-77806 SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in Aug... CRITICAL 9.8 4.48% cvelistv5 2026-09-08
cve-2026-77647 SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in Aug... CRITICAL 9.8 2.50% cvelistv5 2026-09-08
cve-2026-77136 The extension passes the raw value of a form field configured as "This field contains the name of the sender" directl... CRITICAL 9.5 0.97% cvelistv5 2026-08-26
cve-2026-76904 GeoTools is an open source Java library that provides tools for geospatial data CRITICAL 9.8 2.40% cvelistv5 2026-09-09
cve-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability HIGH N/A 28.27% cvelistv5 2026-09-14
cve-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL 10.0 14.03% cvelistv5 2026-09-16
cve-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability HIGH N/A 3.95% cvelistv5 2026-09-08
cve-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability HIGH N/A 0.65% cvelistv5 2026-06-09
cve-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability HIGH N/A 11.74% cvelistv5 2026-08-21
cve-2026-73533 Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build serv... CRITICAL 9.3 0.65% cvelistv5 2026-09-09
cve-2026-73532 Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build serve... CRITICAL 9.3 0.67% cvelistv5 2026-09-09
cve-2026-72898 Metabase SQL Injection Vulnerability HIGH N/A 19.05% cvelistv5 2026-08-11
cve-2026-7273 A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90... HIGH 8.8 1.29% cvelistv5 2026-09-22
cve-2026-72530 TrueConf Server Code Injection Vulnerability HIGH N/A 1.69% cvelistv5 2026-08-20
cve-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability HIGH N/A 1.46% cvelistv5 2026-08-20
cve-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL 9.1 89.62% cvelistv5 2026-09-24
cve-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability CRITICAL 10.0 1.53% cvelistv5 2026-09-25
cve-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability HIGH N/A 2.54% cvelistv5 2026-05-07
cve-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability HIGH 7.0 0.33% cvelistv5 2026-08-11
cve-2026-6875 Sandbox Escape in ServiceNow AI Platform CRITICAL 9.5 1.43% cvelistv5 2026-07-14
cve-2026-67595 VaahCMS 2.0.0 - 2.3.4 Malicious JavaScript Supply Chain via security-otp.blade.php CRITICAL 9.2 0.76% cvelistv5 2026-09-24
cve-2026-67279 EUVD-2026-72027 MEDIUM 6.9 0.71% cvelistv5 Sep 26, 2026, 3:55:45 AM