Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2025-11913 | CVE-2025-11913 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2020-37214 | thecontrolgroup voyager Improper Limitation of a Pathname to a Restricted Directory | HIGH | 8.7 | 0.71% | cvelistv5 | 2026-02-11 |
| cve-2026-88779 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | HIGH | 8.7 | N/A | cvelistv5 | 2026-10-03 |
| cve-2026-88779 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | HIGH | 8.7 | N/A | cvelistv5 | 2026-10-03 |
| cve-2026-88779 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | HIGH | 8.7 | N/A | cvelistv5 | 2026-10-03 |
| cve-2023-54405 | CVE-2023-54405 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2020-37278 | CVE-2020-37278 | HIGH | 8.7 | 0.36% | cvelistv5 | |
| cve-2014-125130 | CVE-2014-125130 | HIGH | 8.7 | 0.53% | cvelistv5 | |
| cve-2026-65761 | CVE-2026-65761 | CRITICAL | 9.3 | N/A | cvelistv5 | |
| cve-2016-15047 | Improper Neutralization of Special Elements used in an OS Command | HIGH | N/A | 3.88% | cvelistv5 | 2017-03-10 |
| cve-2026-6433 | CVE-2026-6433 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-73382 | geminilabs site_reviews Improper Neutralization of Input During Web Page Generation | HIGH | 7.1 | N/A | cvelistv5 | 2026-10-02 |
| cve-2026-56005 | Melapress wp_activity_log Improper Neutralization of Input During Web Page Generation | HIGH | 7.1 | N/A | cvelistv5 | 2026-10-02 |
| cve-2026-104286 | Fortinet FortiMail Path Traversal Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-01 |
| cve-2025-3759 | CVE-2025-3759 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2024-58388 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-33605's description was updated to include the impacted endpoint as singular patch addressed both. | UNKNOWN | N/A | N/A | cvelistv5 | 2026-11-06 |
| cve-2026-1581 | CVE-2026-1581 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-100382 | CVE-2026-100382 | CRITICAL | 10.0 | N/A | cvelistv5 | |
| cve-2026-102490 | Zammad GmbH Zammad Improper Privilege Management Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-102489 | Zammad GmbH Zammad Session Fixation Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-104286 | Fortinet FortiMail Path Traversal Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-01 |
| cve-2024-58387 | CVE-2024-58387 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2023-54403 | Improper Limitation of a Pathname to a Restricted Directory | HIGH | 8.7 | N/A | cvelistv5 | 2026-09-30 |
| cve-2023-54402 | idocv idocview Server-Side Request Forgery | HIGH | 8.7 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-102490 | Zammad GmbH Zammad Improper Privilege Management Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-102489 | Zammad GmbH Zammad Session Fixation Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-76504 | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-102490 | Zammad GmbH Zammad Improper Privilege Management Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-102489 | Zammad GmbH Zammad Session Fixation Vulnerability | CRITICAL | 9.4 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-104286 | Fortinet FortiMail Path Traversal Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-01 |