Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-25
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-04
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2025-07-18
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-04
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-25
cve-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability HIGH 8.1 N/A cvelistv5 2026-09-08
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2025-07-18
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-04
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-25
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2025-07-18
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-25
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-01-29
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-04
cve-2023-37462 XWiki xwiki Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-09-08
cve-2018-17254 arkextensions jck_editor Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 82.98% cvelistv5 2025-09-14
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2025-07-18
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-25
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2023-05-25
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-04
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-01-29
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2025-07-18
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-04
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-01-29