Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-3199 | ONLYOFFICE Docs Server Path Traversal Vulnerability | CRITICAL | 9.8 | 30.24% | cvelistv5 | 2026-10-08 |
| cve-2016-3081 | Apache Struts Command Injection Vulnerability | HIGH | N/A | 96.53% | cvelistv5 | 2026-10-08 |
| cve-2015-5477 | ISC BIND Data Processing Errors Vulnerability | HIGH | N/A | 99.58% | cvelistv5 | 2026-10-08 |
| cve-2015-3306 | ProFTPD Improper Access Control Vulnerability | HIGH | N/A | 99.50% | cvelistv5 | 2026-10-08 |
| cve-2026-88779 | CVE-2026-88779 | HIGH | 8.7 | N/A | cvelistv5 | |
| cve-2026-102490 | CVE-2026-102490 | CRITICAL | 9.4 | 10.94% | cvelistv5 | |
| cve-2026-102489 | CVE-2026-102489 | CRITICAL | 9.4 | 22.48% | cvelistv5 | |
| cve-2026-104286 | CVE-2026-104286 | CRITICAL | 9.8 | 4.57% | cvelistv5 | |
| cve-2026-76504 | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-86950 | CVE-2026-86950 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2026-88772 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | CRITICAL | 9.5 | N/A | cvelistv5 | 2026-09-27 |
| cve-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-09-27 |
| cve-2026-87902 | CVE-2026-87902 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-67279 | CVE-2026-67279 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-65660 | CVE-2026-65660 | HIGH | 8.8 | N/A | cvelistv5 | |
| cve-2026-71362 | Adobe Commerce and Magento Incorrect Authorization Vulnerability | CRITICAL | 9.1 | N/A | cvelistv5 | 2026-09-24 |
| cve-2026-5430 | WSO2 Multiple Products Path Traversal Vulnerability | HIGH | N/A | 22.39% | cvelistv5 | 2026-09-24 |
| cve-2026-94127 | CVE-2026-94127 | HIGH | N/A | N/A | cvelistv5 | |
| cve-2026-93952 | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-09-22 |
| cve-2026-93616 | Check Point Multiple Products Path Traversal Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-09-22 |
| cve-2026-85102 | Check Point Multiple Products Improper Certificate Validation Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-09-22 |
| cve-2026-7273 | A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90... | HIGH | 8.8 | N/A | cvelistv5 | 2026-10-25 |
| cve-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | UNKNOWN | 8.8 | 0.93% | cvelistv5 | unknown |
| cve-2025-39964 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | UNKNOWN | 7.8 | 1.61% | cvelistv5 | unknown |
| cve-2025-39682 | tls: fix handling of zero-length records on the rx_list | UNKNOWN | 9.8 | 3.25% | cvelistv5 | unknown |
| cve-2026-87886 | Acronis Backup Incorrect Default Permissions Vulnerability | HIGH | 7.8 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-76460 | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | CRITICAL | 10.0 | N/A | cvelistv5 | 2026-09-16 |
| cve-2026-58704 | Google Pixel Improper Authorization Vulnerability | HIGH | 8.8 | 0.62% | cvelistv5 | 2026-09-15 |
| cve-2026-76461 | Cisco Secure Email Gateway SQL Injection Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-09-14 |
| cve-2026-85706 | CVE-2026-85706 | HIGH | N/A | N/A | cvelistv5 |