Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-4008 Smartbedded Meteobridge Command Injection Vulnerability HIGH 8.7 N/A cvelistv5 2025-10-02
cve-2025-39964 Linux Kernel Race Condition Vulnerability HIGH N/A N/A cvelistv5 2026-09-18
cve-2025-3987 TOTOLINK N150RT formWsc command injection MEDIUM 6.3 N/A cvelistv5 2026-06-17
cve-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability HIGH N/A N/A cvelistv5 2026-09-18
cve-2025-3935 ConnectWise ScreenConnect Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2025-06-02
cve-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability HIGH N/A N/A cvelistv5 2025-09-04
cve-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-01-07
cve-2025-35939 Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability MEDIUM 6.9 N/A cvelistv5 2025-06-02
cve-2025-34509 Sitecore XM and XP Hardcoded Credentials HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-34291 Langflow Origin Validation Error Vulnerability HIGH N/A N/A cvelistv5 2026-05-21
cve-2025-34152 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-3415 SUSE CVE CVE-2025-3415 MEDIUM 4.3 N/A cvelistv5 2026-08-25
cve-2025-34143 ETQ Reliance CG Authentication Bypass via Trailing Space RCE CRITICAL 9.3 N/A cvelistv5 2026-06-17
cve-2025-34068 Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters CRITICAL 9.3 N/A cvelistv5 2026-06-17
cve-2025-34067 Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34059 Dahua Smart Cloud Gateway Registration Management Platform SQL Injection HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34058 Hikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File Read HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34057 Ruijie NBR Router Administrative Credential Disclosure HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34054 AVTECH IP camera, DVR, and NVR Devices Unauthenticated Command Injection CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34049 OptiLink ONT1GEW GPON Remote Code Execution CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-34048 D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34047 Leadsec VPN Path Traversal Arbitrary File Read HIGH 8.7 N/A cvelistv5 2026-06-17
cve-2025-34046 Fanwei E-Office Unauthenticated File Upload CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34045 WeiPHP Path Traversal Arbitrary File Read HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2025-34044 WIFISKY 7-Layer Flow Control Router Remote Command Execution CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-34043 Vacron NVR Remote Command Execution CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34042 Beward N100 IP Camera Remote Command Execution CRITICAL 9.4 N/A cvelistv5 2026-06-17
cve-2025-34041 Sangfor Endpoint Detection and Response OS Command Injection CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34040 Seeyon Zhiyuan OA System Path Traversal File Upload CRITICAL 10.0 N/A cvelistv5 2026-06-17
cve-2025-34039 Yonyou NC BeanShell Command Injection CRITICAL 10.0 N/A cvelistv5 2026-06-17