Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-45445 | SUSE CVE CVE-2026-45445 | MEDIUM | 6.5 | 0.40% | cvelistv5 | 2026-08-31 |
| cve-2026-44631 | SUSE CVE CVE-2026-44631 | MEDIUM | 5.9 | 0.75% | cvelistv5 | 2026-09-11 |
| cve-2026-44186 | SUSE CVE CVE-2026-44186 | MEDIUM | 6.5 | 1.06% | cvelistv5 | 2026-09-11 |
| cve-2026-44185 | Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server... | HIGH | 7.3 | 1.75% | cvelistv5 | 2026-09-14 |
| cve-2026-44119 | SUSE CVE CVE-2026-44119 | MEDIUM | 6.5 | 0.29% | cvelistv5 | 2026-08-31 |
| cve-2026-43951 | httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime | MEDIUM | 6.5 | 1.04% | cvelistv5 | 2026-09-01 |
| cve-2026-42778 | Apache MINA: deserialization of untrusted data (incomplete fix for CVE-2026-41409) | CRITICAL | 9.8 | 0.75% | cvelistv5 | 2026-08-26 |
| cve-2026-42770 | SUSE CVE CVE-2026-42770 | MEDIUM | 5.0 | 0.26% | cvelistv5 | 2026-09-20 |
| cve-2026-42767 | NULL Pointer Dereference in CRMF EncryptedValue Decryption | MEDIUM | 5.9 | 0.43% | cvelistv5 | 2026-07-23 |
| cve-2026-42766 | SUSE CVE CVE-2026-42766 | MEDIUM | 5.7 | 1.11% | cvelistv5 | 2026-08-31 |
| cve-2026-42764 | SUSE CVE CVE-2026-42764 | MEDIUM | 5.3 | 0.78% | cvelistv5 | 2026-09-18 |
| cve-2026-42586 | SUSE CVE CVE-2026-42586 | HIGH | 8.2 | 0.18% | cvelistv5 | 2026-06-26 |
| cve-2026-42585 | netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing | MEDIUM | 6.5 | 0.29% | cvelistv5 | 2026-09-02 |
| cve-2026-42584 | Netty is an asynchronous, event-driven network application framework | HIGH | 7.3 | 0.72% | cvelistv5 | 2026-09-18 |
| cve-2026-42583 | SUSE CVE CVE-2026-42583 | HIGH | 7.5 | 0.49% | cvelistv5 | 2026-06-23 |
| cve-2026-42581 | SUSE CVE CVE-2026-42581 | HIGH | 7.3 | 0.68% | cvelistv5 | 2026-09-18 |
| cve-2026-42580 | SUSE CVE CVE-2026-42580 | HIGH | 7.3 | 0.36% | cvelistv5 | 2026-07-10 |
| cve-2026-42579 | Netty is an asynchronous, event-driven network application framework | HIGH | 7.5 | 0.85% | cvelistv5 | 2026-09-18 |
| cve-2026-42578 | Netty is an asynchronous, event-driven network application framework | LOW | 2.9 | 1.15% | cvelistv5 | 2026-09-18 |
| cve-2026-42536 | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted conte... | HIGH | 7.5 | 2.69% | cvelistv5 | 2026-09-14 |
| cve-2026-42535 | SUSE CVE CVE-2026-42535 | MEDIUM | 5.5 | 0.71% | cvelistv5 | 2026-08-31 |
| cve-2026-41417 | netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection | MEDIUM | 6.5 | 0.34% | cvelistv5 | 2026-09-02 |
| cve-2026-41240 | SUSE CVE CVE-2026-41240 | MEDIUM | 6.1 | 0.40% | cvelistv5 | 2026-05-31 |
| cve-2026-41239 | DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions | MEDIUM | 6.8 | 0.41% | cvelistv5 | 2026-07-22 |
| cve-2026-41238 | DOMPurify: DOMPurify: Cross-Site Scripting bypass via prototype pollution | MEDIUM | 6.8 | 0.35% | cvelistv5 | 2026-07-22 |
| cve-2026-34356 | httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers | HIGH | 7.5 | 1.21% | cvelistv5 | 2026-09-01 |
| cve-2026-34355 | SUSE CVE CVE-2026-34355 | MEDIUM | 6.5 | 2.66% | cvelistv5 | 2026-09-15 |
| cve-2026-34182 | openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages | HIGH | 7.4 | 0.20% | cvelistv5 | 2026-09-01 |
| cve-2026-34180 | SUSE CVE CVE-2026-34180 | LOW | 3.7 | 1.31% | cvelistv5 | 2026-07-27 |
| cve-2026-33929 | SUSE CVE CVE-2026-33929 | MEDIUM | 6.5 | 0.96% | cvelistv5 | 2026-07-15 |