Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability HIGH N/A 0.69% cvelistv5 2026-09-11
cve-2026-42018 JFrog Artifactory Improper Authentication Vulnerability HIGH N/A 11.04% cvelistv5 2026-09-11
cve-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability HIGH N/A 9.06% cvelistv5 2026-09-11
cve-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CRITICAL 9.2 1.06% cvelistv5 2026-09-10
cve-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability HIGH 8.8 0.87% cvelistv5 2026-09-10
cve-2026-87491 SUSE CVE CVE-2026-87491 UNKNOWN N/A N/A cvelistv5 2026-09-17
cve-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 10.0 75.75% cvelistv5 2026-09-09
cve-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 9.3 5.60% cvelistv5 2026-09-09
cve-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability HIGH 8.1 2.40% cvelistv5 2026-09-09
cve-2026-86218 N-able N-central Static Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-09-08
cve-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability HIGH 7.8 0.57% cvelistv5 2026-09-08
cve-2026-81963 Microsoft Windows Link Following Vulnerability HIGH 7.8 0.63% cvelistv5 2026-09-08
cve-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 10.0 2.15% cvelistv5 2026-09-08
cve-2026-85046 Google Chromium V8 Type Confusion Vulnerability HIGH N/A 1.46% cvelistv5 2026-09-04
cve-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 9.3 N/A cvelistv5 2026-09-02
cve-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability HIGH N/A 8.51% cvelistv5 2026-09-02
cve-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 10.0 4.67% cvelistv5 2026-09-02
cve-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CRITICAL 9.8 7.67% cvelistv5 2026-09-02
cve-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability HIGH N/A 0.87% cvelistv5 2026-09-02
cve-2026-49869 Kestra OSS OS Command Injection Vulnerability CRITICAL 10.0 1.92% cvelistv5 2026-09-02
cve-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability HIGH N/A 36.26% cvelistv5 2026-09-02
cve-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability HIGH N/A 3.57% cvelistv5 2026-08-31
cve-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability HIGH N/A 3.29% cvelistv5 2026-08-31
cve-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability MEDIUM 5.3 0.58% cvelistv5 2026-08-27
cve-2026-53362 Linux Kernel Unspecified Vulnerability HIGH N/A 0.51% cvelistv5 2026-08-27
cve-2023-49105 ownCloud Improper Authentication Vulnerability CRITICAL 9.8 43.20% cvelistv5 2026-08-27
cve-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability HIGH 8.8 N/A cvelistv5 2026-08-26
cve-2022-0995 An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system. HIGH 7.8 9.44% cvelistv5 2026-08-27
cve-2021-23758 Deserialization of Untrusted Data HIGH 8.1 83.63% cvelistv5 2026-08-27
cve-2019-1068 A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'. HIGH 8.8 52.84% cvelistv5 2026-08-27