Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-27834 | Apple Multiple Products Improper Authentication Vulnerability | MEDIUM | 5.5 | 0.60% | cvelistv5 | 2026-11-04 |
| cve-2026-119977 | CVE-2026-119977 | HIGH | 8.1 | 0.60% | cvelistv5 | |
| cve-2026-118527 | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | MEDIUM | 4.3 | N/A | cvelistv5 | 2026-10-30 |
| cve-2026-111357 | CVE-2026-111357 | HIGH | 7.0 | 0.53% | cvelistv5 | |
| cve-2026-97229 | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-10-29 |
| cve-2026-76418 | CVE-2026-76418 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2026-46300 | Linux Kernel Missing Initialization of a Variable Vulnerability | HIGH | 7.8 | 16.13% | cvelistv5 | 2026-10-28 |
| cve-2026-41709 | Broadcom VMWare ESX Insufficient Logging Vulnerability | LOW | 2.7 | 0.69% | cvelistv5 | 2026-10-28 |
| cve-2026-48356 | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | CRITICAL | 9.3 | 44.58% | cvelistv5 | 2026-10-27 |
| cve-2026-111497 | Google Brotli Unchecked Return Value Vulnerability | HIGH | N/A | 82.64% | cvelistv5 | 2026-10-27 |
| cve-2026-109619 | CVE-2026-109619 | HIGH | N/A | 100.00% | cvelistv5 | |
| cve-2026-109618 | CVE-2026-109618 | HIGH | N/A | 100.00% | cvelistv5 | |
| cve-2026-114625 | CVE-2026-114625 | CRITICAL | 9.4 | 1.03% | cvelistv5 | |
| cve-2026-110447 | CVE-2026-110447 | CRITICAL | 9.2 | 73.31% | cvelistv5 | |
| cve-2026-96656 | CVE-2026-96656 | HIGH | 8.6 | N/A | cvelistv5 | |
| cve-2026-96655 | CVE-2026-96655 | MEDIUM | 5.3 | N/A | cvelistv5 | |
| cve-2026-96654 | CVE-2026-96654 | MEDIUM | 6.9 | N/A | cvelistv5 | |
| cve-2026-96652 | CVE-2026-96652 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-110936 | CVE-2026-110936 | HIGH | 8.4 | 0.97% | cvelistv5 | |
| cve-2026-106931 | CVE-2026-106931 | HIGH | 8.5 | 2.53% | cvelistv5 | |
| cve-2026-102764 | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | HIGH | N/A | 18.95% | cvelistv5 | 2026-10-16 |
| cve-2025-61624 | CVE-2025-61624 | MEDIUM | 6.0 | 1.34% | cvelistv5 | |
| cve-2026-21589 | CVE-2026-21589 | HIGH | N/A | 99.48% | cvelistv5 | |
| cve-2026-76519 | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-14 |
| cve-2026-105134 | CVE-2026-105134 | CRITICAL | 10.0 | 81.76% | cvelistv5 | |
| cve-2026-105133 | CVE-2026-105133 | MEDIUM | 6.9 | 79.47% | cvelistv5 | |
| cve-2026-0322 | Palo Alto Networks PAN-OS Code Injection Vulnerability | HIGH | 8.6 | 1.74% | cvelistv5 | 2026-10-14 |
| cve-2026-96951 | CVE-2026-96951 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2026-104935 | CVE-2026-104935 | HIGH | 8.6 | 86.77% | cvelistv5 | |
| cve-2023-22894 | Strapi Cleartext Storage of Sensitive Information Vulnerability | MEDIUM | 4.9 | 4.11% | cvelistv5 | 2026-10-08 |