Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability HIGH N/A 0.81% cvelistv5 2026-06-15
cve-2026-5430 EUVD-2026-53822 CRITICAL 10.0 0.58% cvelistv5 Sep 25, 2026, 3:55:16 AM
cve-2026-54066 SUSE CVE CVE-2026-54066 UNKNOWN N/A 2.39% cvelistv5 2026-07-30
cve-2026-53435 jenkins: Jenkins: Arbitrary code execution via deserialization of attacker-controlled configuration HIGH 8.8 2.16% cvelistv5 2026-09-04
cve-2026-53362 kernel: kernel: ipv6 frag escape HIGH 7.8 0.71% cvelistv5 2026-08-28
cve-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability HIGH N/A 0.65% cvelistv5 2026-09-18
cve-2026-52813 SUSE CVE CVE-2026-52813 UNKNOWN N/A 1.11% cvelistv5 2026-07-30
cve-2026-5281 chromium-browser: Use after free in Dawn CRITICAL 9.0 0.70% cvelistv5 2026-06-28
cve-2026-52806 SUSE CVE CVE-2026-52806 UNKNOWN N/A 7.93% cvelistv5 2026-07-30
cve-2026-5153 Tenda CH22 WriteFacMac FormWriteFacMac command injection MEDIUM 6.3 6.47% cvelistv5 2026-06-17
cve-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability CRITICAL N/A 6.30% cvelistv5 2026-06-08
cve-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 3.04% cvelistv5 2026-07-22
cve-2026-5027 Langflow - Path Traversal Arbitrary File Write via upload_user_file HIGH 8.8 4.76% cvelistv5 2026-08-18
cve-2026-49869 Kestra OSS OS Command Injection Vulnerability CRITICAL 10.0 2.10% cvelistv5 2026-09-02
cve-2026-49049 CVE-2026-49049 HIGH 7.5 0.99% cvelistv5
cve-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 20.07% cvelistv5 2026-07-10
cve-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 88.51% cvelistv5 2026-07-07
cve-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability HIGH N/A 16.19% cvelistv5 2026-06-16
cve-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability HIGH N/A 7.06% cvelistv5 2026-09-02
cve-2026-48611 Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations. CRITICAL 9.8 2.89% cvelistv5 2026-06-17
cve-2026-48558 SimpleHelp Authentication Bypass Vulnerability HIGH N/A 5.72% cvelistv5 2026-06-29
cve-2026-48313 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted ... CRITICAL 9.3 2.95% cvelistv5 2026-08-28
cve-2026-48282 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 10.0 42.39% cvelistv5 2026-07-07
cve-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability HIGH N/A 1.01% cvelistv5 2026-05-26
cve-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability HIGH N/A 0.81% cvelistv5 2026-07-15
cve-2026-46442 Flowise: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape CRITICAL 9.9 3.41% cvelistv5 2026-07-23
cve-2026-4631 cockpit: Cockpit: Unauthenticated remote code execution due to SSH command-line argument injection CRITICAL 9.8 9.22% cvelistv5 2026-08-04
cve-2026-45498 Microsoft Defender Denial of Service Vulnerability HIGH N/A 1.27% cvelistv5 2026-05-20
cve-2026-45321 TanStack Unspecified Vulnerability CRITICAL N/A 1.05% cvelistv5 2026-05-27
cve-2026-45298 SUSE CVE CVE-2026-45298 UNKNOWN N/A 1.60% cvelistv5 2026-07-30