Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-105134 | CVE-2026-105134 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2026-105133 | Ahsay AhsayCBS Improper Authentication Vulnerability | MEDIUM | 6.9 | N/A | cvelistv5 | 2026-10-09 |
| cve-2026-102255 | Unintended Proxy or Intermediary | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-10-07 |
| cve-2026-104935 | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | HIGH | 8.6 | N/A | cvelistv5 | 2026-10-13 |
| cve-2025-34469 | CVE-2025-34469 | MEDIUM | 6.9 | N/A | cvelistv5 | |
| cve-2023-22894 | Strapi Cleartext Storage of Sensitive Information Vulnerability | MEDIUM | 4.9 | N/A | cvelistv5 | 2026-10-08 |
| cve-2021-3199 | ONLYOFFICE Docs Server Path Traversal Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-08 |
| cve-2015-5477 | ISC BIND Data Processing Errors Vulnerability | HIGH | N/A | 99.58% | cvelistv5 | 2026-10-08 |
| cve-2015-3306 | SUSE CVE CVE-2015-3306 | UNKNOWN | N/A | 99.50% | cvelistv5 | 2026-10-09 |
| cve-2026-26216 | CVE-2026-26216 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2026-94504 | CVE-2026-94504 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-93836 | CVE-2026-93836 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2023-22894 | Strapi Cleartext Storage of Sensitive Information Vulnerability | MEDIUM | 4.9 | N/A | cvelistv5 | 2026-10-08 |
| cve-2021-3199 | ONLYOFFICE Docs Server Path Traversal Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-08 |
| cve-2016-3081 | Apache Struts Command Injection Vulnerability | HIGH | N/A | 96.53% | cvelistv5 | 2026-07-23 |
| cve-2015-5477 | ISC BIND Data Processing Errors Vulnerability | HIGH | N/A | 99.58% | cvelistv5 | 2026-10-08 |
| cve-2015-3306 | SUSE CVE CVE-2015-3306 | UNKNOWN | N/A | 99.50% | cvelistv5 | 2026-10-09 |
| cve-2026-21589 | CVE-2026-21589 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2023-7102 | CVE-2023-7102 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-32202 | CVE-2026-32202 | MEDIUM | 4.3 | N/A | cvelistv5 | |
| cve-2026-51886 | Langflow Langflow Improper Control of Generation of Code | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-06 |
| cve-2025-41243 | Improper Control of Generation of Code | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-10-20 |
| cve-2024-23624 | CVE-2024-23624 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-34035 | CVE-2025-34035 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2025-56520 | dify dify Server-Side Request Forgery | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-02-11 |
| cve-2025-49002 | dataease dataease Authentication Bypass by Spoofing | HIGH | N/A | N/A | cvelistv5 | 2026-10-20 |
| cve-2025-29306 | CVE-2025-29306 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-61500 | CVE-2026-61500 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2026-95675 | D-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.3 | N/A | cvelistv5 | 2026-10-05 |
| cve-2025-11913 | streamax streamax_crocus Improper Limitation of a Pathname to a Restricted Directory | HIGH | N/A | N/A | cvelistv5 | 2026-10-01 |