Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability HIGH 8.1 4.00% cvelistv5 2026-06-03
cve-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A 15.87% cvelistv5 2026-07-14
cve-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability CRITICAL 9.8 93.19% cvelistv5 2026-06-09
cve-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability CRITICAL 9.1 76.11% cvelistv5 2026-06-15
cve-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL N/A 12.31% cvelistv5 2026-06-29
cve-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability HIGH N/A 1.36% cvelistv5 2026-07-15
cve-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability HIGH N/A 1.01% cvelistv5 2026-07-14
cve-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability HIGH N/A 0.35% cvelistv5 2026-07-14
cve-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability HIGH 7.2 11.79% cvelistv5 2026-07-14
cve-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 10.0 6.79% cvelistv5 2026-07-14
cve-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability HIGH 8.1 33.87% cvelistv5 2026-07-13
cve-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 14.85% cvelistv5 2026-07-08
cve-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 20.07% cvelistv5 2026-07-10
cve-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability CRITICAL 10.0 30.87% cvelistv5 2026-06-27
cve-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability HIGH 8.4 0.89% cvelistv5 2026-06-26
cve-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 88.51% cvelistv5 2026-06-15
cve-2026-48282 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 10.0 42.39% cvelistv5 2026-07-07
cve-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability CRITICAL N/A 80.24% cvelistv5 2026-07-01
cve-2026-48558 SimpleHelp Authentication Bypass Vulnerability CRITICAL 9.5 77.66% cvelistv5 2026-06-29
cve-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability HIGH 8.6 88.53% cvelistv5 2026-06-22
cve-2026-12569 PTC Windchill and FlexPLM Improper Input Validation Vulnerability CRITICAL N/A 46.05% cvelistv5 2026-06-25
cve-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability HIGH N/A 90.03% cvelistv5 2026-06-09
cve-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability HIGH N/A 68.03% cvelistv5 2026-06-09
cve-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability HIGH N/A 88.29% cvelistv5 2026-06-09
cve-2025-67038 Lantronix EDS5000 Code Injection Vulnerability HIGH N/A 20.29% cvelistv5 2026-06-23
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 96.94% cvelistv5 2026-06-18
cve-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability HIGH N/A 85.44% cvelistv5 2026-06-12
cve-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability HIGH N/A 1.44% cvelistv5 2026-06-01
cve-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability HIGH N/A 29.12% cvelistv5 2026-06-15
cve-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL N/A 96.68% cvelistv5 2026-06-11