Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106173 | CVE-2026-106173 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2026-89026 | CVE-2026-89026 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-88062 | CVE-2026-88062 | CRITICAL | 9.5 | N/A | cvelistv5 | |
| cve-2026-83548 | CVE-2026-83548 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-42796 | workiva arelle Missing Authentication for Critical Functionality | HIGH | N/A | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-40242 | Arcane is an interface for managing Docker containers, images, networks, and volumes | HIGH | 7.2 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-32255 | kan kan Server-Side Request Forgery | HIGH | N/A | N/A | cvelistv5 | 2026-09-17 |
| cve-2026-27960 | citeum opencti Improper Authentication | HIGH | N/A | N/A | cvelistv5 | 2026-09-21 |
| cve-2026-21589 | CVE-2026-21589 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2026-109619 | CVE-2026-109619 | CRITICAL | 9.2 | N/A | cvelistv5 | |
| cve-2026-109618 | php: OOM bailout during request parsing leads to memory corruption and RCE | HIGH | 8.1 | N/A | cvelistv5 | 2026-10-21 |
| cve-2026-104935 | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | HIGH | 8.6 | N/A | cvelistv5 | 2026-10-13 |
| cve-2025-61884 | CVE-2025-61884 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2025-49706 | CVE-2025-49706 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-40551 | CVE-2025-40551 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2025-32813 | CVE-2025-32813 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-29306 | CVE-2025-29306 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-11913 | CVE-2025-11913 | LOW | 2.1 | N/A | cvelistv5 | |
| cve-2025-10035 | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2025-09-29 |
| cve-2024-58388 | Improper Limitation of a Pathname to a Restricted Directory | HIGH | 8.7 | N/A | cvelistv5 | 2026-10-01 |
| cve-2024-58387 | CVE-2024-58387 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2024-53900 | mongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2025-11-27 |
| cve-2024-29198 | CVE-2024-29198 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-54402 | CVE-2023-54402 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2023-54400 | Improper Neutralization of Special Elements used in an SQL Command | CRITICAL | 9.3 | N/A | cvelistv5 | 2026-09-29 |
| cve-2023-54399 | hrp2000 e-hr Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2023-10-14 |
| cve-2023-50917 | CVE-2023-50917 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-46359 | hardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-18 |
| cve-2023-38203 | CVE-2023-38203 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2022-35405 | CVE-2022-35405 | HIGH | N/A | N/A | cvelistv5 |