Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability CRITICAL 9.9 N/A cvelistv5 2026-09-08
cve-2026-42018 JFrog Artifactory Improper Authentication Vulnerability HIGH N/A 9.80% cvelistv5 2026-09-10
cve-2026-42016 JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a val... HIGH 8.1 8.64% cvelistv5 2026-10-24
cve-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CRITICAL 9.2 N/A cvelistv5 2026-09-05
cve-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability HIGH 8.8 1.56% cvelistv5 2026-09-05
cve-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2026-09-08
cve-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL N/A 88.66% cvelistv5 2026-09-09
cve-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 9.3 32.65% cvelistv5 2026-09-03
cve-2025-25249 A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Fort... HIGH 8.1 3.74% cvelistv5 2026-10-07
cve-2026-86218 N-able N-central Static Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-09-06
cve-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability HIGH 7.8 N/A cvelistv5 2026-09-08
cve-2026-81963 Microsoft Windows Link Following Vulnerability HIGH 7.8 0.39% cvelistv5 2026-09-08
cve-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 10.0 3.95% cvelistv5 2026-09-07
cve-2026-85046 Google Chromium V8 Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2026-09-03
cve-2026-9586 An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoin... CRITICAL 9.3 N/A cvelistv5 2026-10-24
cve-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability HIGH N/A 9.89% cvelistv5 2026-09-01
cve-2026-83548 CVE-2026-83548 HIGH N/A 8.04% cvelistv5
cve-2026-82329 CVE-2026-82329 HIGH N/A 14.37% cvelistv5
cve-2026-59822 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format HIGH 8.8 0.84% cvelistv5 2026-10-25
cve-2026-49869 Kestra is an open-source, event-driven orchestration platform CRITICAL 10.0 2.10% cvelistv5 2026-10-25
cve-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CRITICAL N/A 70.29% cvelistv5 2026-05-26
cve-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability HIGH N/A 63.05% cvelistv5 2026-08-28
cve-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability HIGH N/A 84.73% cvelistv5 2026-08-28
cve-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability MEDIUM 5.3 0.66% cvelistv5 2026-08-27
cve-2026-53362 In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocatio... HIGH 7.8 0.71% cvelistv5 2026-10-15
cve-2023-49105 ownCloud Improper Authentication Vulnerability HIGH N/A 43.19% cvelistv5 2026-08-26
cve-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability HIGH 8.8 N/A cvelistv5 2026-08-17
cve-2022-0995 kernel: kernel bug in the watch_queue subsystem HIGH 7.8 8.86% cvelistv5 2026-08-27
cve-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability HIGH 8.1 82.58% cvelistv5 2026-08-20
cve-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL N/A 57.27% cvelistv5 2024-09-04