Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability HIGH N/A 1.56% cvelistv5 2026-09-10
cve-2026-67276 cve-2026-67276 HIGH 8.1 0.37% cvelistv5 unknown
cve-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability MEDIUM 5.3 0.66% cvelistv5 2026-08-27
cve-2026-65660 EUVD-2026-56431 HIGH 8.8 1.22% cvelistv5 Sep 26, 2026, 3:55:40 AM
cve-2026-65400 An authentication issue was addressed with improved state management CRITICAL 9.8 1.22% cvelistv5 2026-09-15
cve-2026-64849 MLflow Server-Side Request Forgery Vulnerability HIGH N/A 9.84% cvelistv5 2026-08-19
cve-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability HIGH 8.1 0.96% cvelistv5 2026-09-25
cve-2026-63219 GeoNetwork is a catalog application to manage spatially referenced resources HIGH 8.6 0.47% cvelistv5 2026-09-09
cve-2026-63077 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability CRITICAL N/A 9.76% cvelistv5 2026-08-05
cve-2026-63030 WordPress Core Interpretation Conflict Vulnerability HIGH N/A 10.12% cvelistv5 2026-07-21
cve-2026-61511 vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php CRITICAL 9.8 5.61% cvelistv5 2026-08-07
cve-2026-60137 WordPress Core SQL Injection Vulnerability HIGH N/A 5.91% cvelistv5 2026-07-21
cve-2026-60004 Gitea Code Injection Vulnerability HIGH N/A 23.99% cvelistv5 2026-08-25
cve-2026-59822 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format HIGH 8.8 0.84% cvelistv5 2026-09-03
cve-2026-59800 CVE-2026-59800 CRITICAL 9.8 2.04% cvelistv5
cve-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL N/A 2.56% cvelistv5 2026-08-18
cve-2026-58704 Google Pixel Improper Authorization Vulnerability HIGH N/A 0.59% cvelistv5 2026-09-16
cve-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 15.87% cvelistv5 2026-07-16
cve-2026-58457 CVE-2026-58457 CRITICAL 9.8 2.94% cvelistv5
cve-2026-58400 GeoNetwork is a catalog application to manage spatially referenced resources CRITICAL 9.1 1.19% cvelistv5 2026-09-09
cve-2026-58231 Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) CRITICAL 10.0 0.85% cvelistv5 2026-08-17
cve-2026-58138 Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators CRITICAL 9.8 14.69% cvelistv5 2026-07-14
cve-2026-57739 CVE-2026-57739 CRITICAL 9.3 0.40% cvelistv5
cve-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 14.85% cvelistv5 2026-07-10
cve-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability HIGH N/A 30.87% cvelistv5 2026-07-07
cve-2026-56270 CVE-2026-56270 HIGH 8.7 2.05% cvelistv5
cve-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability MEDIUM 5.3 1.01% cvelistv5 2026-07-14
cve-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability HIGH 7.8 0.35% cvelistv5 2026-07-14
cve-2026-55450 CVE-2026-55450 CRITICAL 9.3 1.19% cvelistv5
cve-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CRITICAL 9.1 17.54% cvelistv5 2026-08-18