Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability CRITICAL 9.3 41.71% cvelistv5 2026-05-05
cve-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability HIGH N/A 98.11% cvelistv5 2026-05-01
cve-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CRITICAL 9.3 98.53% cvelistv5 2026-04-28
cve-2026-32202 CVE-2026-32202 MEDIUM 4.3 70.90% cvelistv5
cve-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability CRITICAL N/A 95.44% cvelistv5 2024-02-22
cve-2025-29635 D-Link DIR-823X Command Injection Vulnerability HIGH 7.2 87.94% cvelistv5 2026-04-21
cve-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability HIGH 8.8 91.94% cvelistv5 2025-05-05
cve-2024-57728 SimpleHelp Path Traversal Vulnerability CRITICAL N/A 64.47% cvelistv5 2025-04-17
cve-2024-57726 SimpleHelp Missing Authorization Vulnerability CRITICAL N/A 66.41% cvelistv5 2025-04-17
cve-2026-39987 Marimo Remote Code Execution Vulnerability HIGH N/A 99.56% cvelistv5 2026-04-09
cve-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability CRITICAL N/A 6.75% cvelistv5 2026-04-16
cve-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability HIGH N/A 31.48% cvelistv5 2026-04-20
cve-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability HIGH N/A 7.32% cvelistv5 2026-03-05
cve-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability HIGH N/A 25.80% cvelistv5 2026-03-05
cve-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability HIGH N/A 1.71% cvelistv5 2026-04-20
cve-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability HIGH N/A 2.49% cvelistv5 2026-03-19
cve-2025-2749 Kentico Xperience Path Traversal Vulnerability HIGH N/A 4.02% cvelistv5 2026-04-20
cve-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability HIGH 7.3 99.99% cvelistv5 2024-03-05
cve-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability HIGH 7.5 78.05% cvelistv5 2023-04-28
cve-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability HIGH 8.8 98.26% cvelistv5 2026-04-13
cve-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability MEDIUM 6.5 43.38% cvelistv5 2026-04-12
cve-2009-0238 Microsoft Office Remote Code Execution HIGH N/A 42.94% cvelistv5 2009-02-25
cve-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability HIGH 8.6 7.23% cvelistv5 2026-04-07
cve-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability CRITICAL N/A 97.73% cvelistv5 2026-03-28
cve-2025-60710 Microsoft Windows Link Following Vulnerability HIGH 7.8 4.61% cvelistv5 2026-04-13
cve-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability HIGH N/A 12.09% cvelistv5 2026-04-13
cve-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability CRITICAL N/A 59.29% cvelistv5 2026-04-06
cve-2020-9715 Adobe Acrobat Use-After-Free Vulnerability HIGH N/A 33.26% cvelistv5 2026-04-13
cve-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability HIGH N/A 20.87% cvelistv5 2012-07-10
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL N/A 98.64% cvelistv5 2026-02-04