Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-93616 | Check Point Multiple Products Path Traversal Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-09-22 |
| cve-2026-89026 | CVE-2026-89026 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-09-27 |
| cve-2026-88062 | CVE-2026-88062 | CRITICAL | 9.5 | N/A | cvelistv5 | |
| cve-2026-85706 | CVE-2026-85706 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-83548 | CVE-2026-83548 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-82329 | CVE-2026-82329 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-76504 | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-64849 | MLflow Server-Side Request Forgery Vulnerability | CRITICAL | 9.3 | N/A | cvelistv5 | 2026-08-18 |
| cve-2026-45695 | Improper Neutralization of Special Elements used in an OS Command | HIGH | N/A | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-42796 | workiva arelle Missing Authentication for Critical Functionality | HIGH | N/A | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-40242 | Arcane is an interface for managing Docker containers, images, networks, and volumes | HIGH | 7.2 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-32255 | kan kan Server-Side Request Forgery | HIGH | N/A | N/A | cvelistv5 | 2026-09-17 |
| cve-2026-27960 | CVE-2026-27960 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-21589 | CVE-2026-21589 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2026-104935 | CVE-2026-104935 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2025-8266 | CVE-2025-8266 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-61884 | CVE-2025-61884 | HIGH | 7.5 | N/A | cvelistv5 | |
| cve-2025-56520 | CVE-2025-56520 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2025-49706 | CVE-2025-49706 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-49002 | CVE-2025-49002 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-41243 | CVE-2025-41243 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2025-40551 | CVE-2025-40551 | CRITICAL | 9.8 | N/A | cvelistv5 | |
| cve-2025-32969 | XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2025-09-04 |
| cve-2025-32813 | CVE-2025-32813 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-31161 | CVE-2025-31161 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-29306 | CVE-2025-29306 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-29085 | Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | N/A | cvelistv5 | 2025-06-09 |
| cve-2025-2746 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2025-10-20 |
| cve-2025-2636 | InstaWP instawp_connect Improper Limitation of a Pathname to a Restricted Directory | HIGH | N/A | N/A | cvelistv5 | 2025-04-11 |