Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-58457 Improper Neutralization of Special Elements used in an OS Command CRITICAL 9.3 N/A cvelistv5 2026-09-04
cve-2026-5153 Tenda ch22_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-09-01
cve-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-07-20
cve-2026-48313 Adobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory CRITICAL 9.3 N/A cvelistv5 2026-08-01
cve-2026-42271 BerriAI LiteLLM Command Injection Vulnerability HIGH 8.7 N/A cvelistv5 2026-06-08
cve-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2026-06-09
cve-2026-29059 windmill windmill Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-07-18
cve-2026-2699 Progress sharefile_storage_zones_controller Improper Access Control CRITICAL 9.8 N/A cvelistv5 2026-07-10
cve-2026-2652 lfprojects MLflow Authentication Bypass by Primary Weakness HIGH N/A N/A cvelistv5 2026-08-07
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-06-15
cve-2026-1547 TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-09-01
cve-2026-1207 djangoproject django Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-02-26
cve-2025-60702 TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in a Command MEDIUM 6.5 N/A cvelistv5 2026-09-01
cve-2025-60698 D-Link dir-882_firmware Improper Neutralization of Special Elements used in a Command HIGH 7.3 N/A cvelistv5 2026-09-05
cve-2025-60687 TOTOLINK lr1200gb_firmware Improper Neutralization of Special Elements used in a Command MEDIUM 6.5 N/A cvelistv5 2026-09-07
cve-2025-6068 fooplugins foogallery Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-09-07
cve-2025-14208 D-Link dir-823x_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component LOW 2.1 N/A cvelistv5 2026-09-07
cve-2025-10164 lmsys sglang Improper Input Validation HIGH N/A N/A cvelistv5 2026-08-22
cve-2024-12912 ASUS asus_firmware Improper Input Validation HIGH N/A N/A cvelistv5 2025-11-19
cve-2023-37569 esds.co emagic_data_center_management Improper Neutralization of Special Elements used in an OS Command HIGH 8.8 N/A cvelistv5 2026-09-07
cve-2022-50992 Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory HIGH 8.7 N/A cvelistv5 2026-04-30
cve-2021-27691 Tenda g0_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A 25.37% cvelistv5 2026-08-22
cve-2019-12725 zeroshell zeroshell Improper Neutralization of Special Elements used in an OS Command HIGH N/A 89.95% cvelistv5 2021-06-03
cve-2019-10655 Grandstream gac2500_firmware Improper Neutralization of Special Elements used in an OS Command HIGH N/A 15.47% cvelistv5 2020-10-14
cve-2016-5312 Symantec messaging_gateway Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 53.98% cvelistv5 2026-08-15
cve-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2026-09-08
cve-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL N/A N/A cvelistv5 2026-09-09
cve-2026-19490 Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 ... CRITICAL 9.3 N/A cvelistv5 2026-10-26
cve-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability HIGH 8.1 N/A cvelistv5 2026-09-08
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26