Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability HIGH N/A 5.00% cvelistv5 2026-08-20
cve-2015-3246 Red Hat Libuser Race Condition Vulnerability HIGH N/A 8.50% cvelistv5 2026-08-20
cve-2026-60004 Gitea Code Injection Vulnerability HIGH N/A 23.99% cvelistv5 2026-08-19
cve-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability HIGH N/A 73.19% cvelistv5 2026-02-10
cve-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability HIGH N/A 71.66% cvelistv5 2026-08-17
cve-2026-72530 TrueConf Server Code Injection Vulnerability HIGH N/A 1.69% cvelistv5 2026-08-12
cve-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability HIGH N/A 1.46% cvelistv5 2026-08-12
cve-2026-64849 MLflow Server-Side Request Forgery Vulnerability HIGH N/A 10.02% cvelistv5 2026-08-18
cve-2026-65400 An authentication issue was addressed with improved state management CRITICAL 9.8 1.72% cvelistv5 2026-10-24
cve-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL N/A 2.56% cvelistv5 2026-08-10
cve-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CRITICAL 9.1 N/A cvelistv5 2026-08-12
cve-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability HIGH N/A 77.05% cvelistv5 2026-07-30
cve-2025-62593 Ray is an AI compute engine CRITICAL 9.4 60.15% cvelistv5 2026-10-19
cve-2026-72898 Metabase SQL Injection Vulnerability HIGH N/A 98.81% cvelistv5 2026-08-06
cve-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability HIGH 7.0 8.57% cvelistv5 2026-08-11
cve-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability HIGH 8.6 1.01% cvelistv5 2026-08-11
cve-2026-8037 OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated a... CRITICAL 9.6 N/A cvelistv5 2026-10-15
cve-2026-63077 In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pol... CRITICAL 9.8 93.56% cvelistv5 2026-10-24
cve-2026-9198 IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER t... CRITICAL 9.8 N/A cvelistv5 2026-10-24
cve-2026-34486 Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the b... HIGH 7.5 98.50% cvelistv5 2026-10-26
cve-2026-18556 Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypa... HIGH 8.2 7.88% cvelistv5 2026-10-23
cve-2026-18577 An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions th... HIGH 8.2 14.62% cvelistv5 2026-10-23
cve-2026-20316 A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthe... MEDIUM 5.3 35.10% cvelistv5 2026-10-24
cve-2026-16812 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access priv... CRITICAL 10.0 1.76% cvelistv5 2026-10-24
cve-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability HIGH N/A 29.50% cvelistv5 2026-07-27
cve-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-07-20
cve-2026-16232 An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote... CRITICAL 9.3 3.52% cvelistv5 2026-10-24
cve-2026-63030 CVE-2026-63030 CRITICAL 9.8 10.65% cvelistv5
cve-2026-60137 CVE-2026-60137 MEDIUM 5.9 5.32% cvelistv5
cve-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability HIGH N/A 62.56% cvelistv5 2026-02-14