Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability HIGH 7.8 N/A cvelistv5 2026-09-15
cve-2026-69255 FlowiseAI Flowise Improper Control of Generation of Code CRITICAL 9.2 N/A cvelistv5 2026-09-15
cve-2024-58385 Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.3 N/A cvelistv5 2026-09-15
cve-2023-54398 Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2026-09-15
cve-2026-89026 Use of Hard-coded Cryptographic Key HIGH N/A N/A cvelistv5 2026-09-15
cve-2026-39364 vitejs vite Incorrect Behavior Order: Validate Before Canonicalize HIGH N/A N/A cvelistv5 2026-09-11
cve-2025-9603 Telesquare tlr-2005ksh_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component LOW 2.1 N/A cvelistv5 2026-09-15
cve-2017-7876 QNAP QTS Improper Neutralization of Special Elements used in a Command CRITICAL 10.0 3.34% cvelistv5 2024-09-18
cve-2016-10760 seowonintech swr-300a_firmware Improper Neutralization of Special Elements used in a Command HIGH N/A 3.23% cvelistv5 2019-06-13
cve-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability HIGH 7.8 N/A cvelistv5 2026-09-15
cve-2026-76460 A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to ... CRITICAL 10.0 N/A cvelistv5 2026-10-07
cve-2026-58704 In Cellular Modem, there is a possible permission bypass due to a logic error in the code HIGH 8.8 N/A cvelistv5 2026-10-07
cve-2026-27540 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability CRITICAL 9.0 N/A cvelistv5 2026-11-05
cve-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2026-09-14
cve-2026-51990 Sogou Input Method 'biz_helper' Remote Code Execution CRITICAL 9.8 N/A cvelistv5 2026-09-10
cve-2024-8529 thimpress learnpress Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2024-09-12
cve-2024-24112 exrick xmall Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 N/A cvelistv5 2026-09-14
cve-2022-32028 car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-32026 car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-32025 car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-32024 car_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-30047 mingsoft mcms Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2022-27927 microfinance_management_system_project microfinance_management_system Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-14
cve-2018-10736 Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 41.44% cvelistv5 2026-09-14
cve-2018-10735 Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 41.44% cvelistv5 2026-09-14
cve-2017-17731 DedeCMS DedeCMS Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 13.19% cvelistv5 2024-09-19
cve-2026-55786 Improper Neutralization of Special Elements used in an OS Command HIGH 8.4 N/A cvelistv5 2026-09-14
cve-2026-23536 Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-09-14
cve-2025-32969 XWiki xwiki Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-09-04
cve-2021-24827 asgaros asgaros_forum Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2025-06-07