Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2022-23437 | xerces-j2: infinite loop when handling specially crafted XML document payloads | MEDIUM | 6.5 | 11.62% | cvelistv5 | 2026-08-04 |
| cve-2022-23305 | log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender | HIGH | 8.8 | 66.54% | cvelistv5 | 2026-09-01 |
| cve-2021-4104 | SUSE CVE CVE-2021-4104 | MEDIUM | 6.4 | 80.60% | cvelistv5 | 2026-07-28 |
| cve-2025-62593 | Ray-Project Ray Code Injection Vulnerability | HIGH | N/A | 27.29% | cvelistv5 | 2026-08-17 |
| cve-2026-72898 | Metabase SQL Injection Vulnerability | HIGH | N/A | 19.05% | cvelistv5 | 2026-08-11 |
| cve-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | HIGH | N/A | 0.33% | cvelistv5 | 2026-08-11 |
| cve-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | HIGH | 8.6 | 1.01% | cvelistv5 | 2026-08-11 |
| cve-2026-8037 | Progress LoadMaster Command Injection Vulnerability | HIGH | N/A | 77.36% | cvelistv5 | 2026-08-07 |
| cve-2026-63077 | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | CRITICAL | N/A | 9.76% | cvelistv5 | 2026-08-05 |
| cve-2026-9198 | IBM Langflow Code Injection Vulnerability | HIGH | N/A | 28.66% | cvelistv5 | 2026-08-04 |
| cve-2026-34486 | SUSE CVE CVE-2026-34486 | HIGH | 7.5 | 6.56% | cvelistv5 | 2026-09-16 |
| cve-2026-18556 | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | HIGH | N/A | 7.88% | cvelistv5 | 2026-08-04 |
| cve-2026-18577 | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | HIGH | N/A | 14.62% | cvelistv5 | 2026-08-03 |
| cve-2026-20316 | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | MEDIUM | 5.3 | 35.10% | cvelistv5 | 2026-07-29 |
| cve-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | HIGH | N/A | 1.00% | cvelistv5 | 2026-07-27 |
| cve-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | HIGH | N/A | 29.60% | cvelistv5 | 2026-07-27 |
| cve-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | HIGH | N/A | 3.04% | cvelistv5 | 2026-07-22 |
| cve-2026-16232 | Check Point SmartConsole Improper Authentication Vulnerability | HIGH | N/A | 77.97% | cvelistv5 | 2026-07-22 |
| cve-2026-63030 | WordPress Core Interpretation Conflict Vulnerability | HIGH | N/A | 10.12% | cvelistv5 | 2026-07-21 |
| cve-2026-60137 | WordPress Core SQL Injection Vulnerability | HIGH | N/A | 5.91% | cvelistv5 | 2026-07-21 |
| cve-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | HIGH | N/A | 63.84% | cvelistv5 | 2026-07-21 |
| cve-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability | HIGH | 8.1 | 4.00% | cvelistv5 | 2026-07-21 |
| cve-2026-64005 | SUSE CVE CVE-2026-64005 | UNKNOWN | N/A | 0.18% | cvelistv5 | 2026-08-06 |
| cve-2026-64207 | SUSE CVE CVE-2026-64207 | MEDIUM | 5.5 | 0.11% | cvelistv5 | 2026-08-17 |
| cve-2026-64206 | SUSE CVE CVE-2026-64206 | MEDIUM | 5.5 | 0.26% | cvelistv5 | 2026-08-17 |
| cve-2026-64205 | SUSE CVE CVE-2026-64205 | MEDIUM | 4.1 | 0.12% | cvelistv5 | 2026-08-17 |
| cve-2026-64192 | SUSE CVE CVE-2026-64192 | MEDIUM | 4.4 | 0.12% | cvelistv5 | 2026-08-17 |
| cve-2026-64191 | SUSE CVE CVE-2026-64191 | MEDIUM | 6.7 | 0.13% | cvelistv5 | 2026-09-18 |
| cve-2026-64190 | SUSE CVE CVE-2026-64190 | MEDIUM | 4.7 | 0.14% | cvelistv5 | 2026-09-18 |
| cve-2026-64189 | SUSE CVE CVE-2026-64189 | HIGH | 7.0 | 0.10% | cvelistv5 | 2026-09-18 |