Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-20775 Cisco SD-WAN Path Traversal Vulnerability HIGH N/A 12.47% cvelistv5 2026-02-25
cve-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability HIGH N/A 5.25% cvelistv5 2026-02-13
cve-2025-68461 roundcubemail: Roundcube Webmail: Cross-Site Scripting (XSS) vulnerability via crafted SVG animate tag MEDIUM 6.1 27.41% cvelistv5 2026-06-28
cve-2025-49113 roundcubemail: Remote Code Execution in Roundcube via Unvalidated _from Parameter CRITICAL 9.9 99.49% cvelistv5 2026-06-28
cve-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability HIGH N/A 13.53% cvelistv5 2026-02-17
cve-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability MEDIUM 6.8 53.37% cvelistv5 2025-03-11
cve-2026-2441 Google Chromium CSS Use-After-Free Vulnerability HIGH N/A 54.96% cvelistv5 2026-02-13
cve-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A 1.79% cvelistv5 2026-02-17
cve-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability HIGH N/A 93.59% cvelistv5 2023-12-12
cve-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability HIGH N/A 76.58% cvelistv5 2009-07-07
cve-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability CRITICAL N/A 93.85% cvelistv5 2026-02-09
cve-2026-20700 Apple Multiple Buffer Overflow Vulnerability HIGH N/A 1.68% cvelistv5 2026-02-11
cve-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability HIGH N/A 73.56% cvelistv5 2026-02-12
cve-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability HIGH N/A 1.75% cvelistv5 2026-02-02
cve-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability HIGH N/A 81.04% cvelistv5 2026-02-12
cve-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability HIGH N/A 4.18% cvelistv5 2026-02-10
cve-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability HIGH N/A 4.87% cvelistv5 2026-02-10
cve-2026-21519 Microsoft Windows Type Confusion Vulnerability HIGH N/A 2.48% cvelistv5 2026-02-10
cve-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability HIGH N/A 1.59% cvelistv5 2026-02-10
cve-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability HIGH N/A 15.85% cvelistv5 2026-02-10
cve-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability HIGH N/A 61.24% cvelistv5 2026-02-10
cve-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL N/A 88.18% cvelistv5 2026-01-28
cve-2025-11953 @react-native-community/cli-server-api: Command injection in React Native CLI HIGH 8.1 93.98% cvelistv5 2026-03-26
cve-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability HIGH 8.6 84.62% cvelistv5 2026-01-28
cve-2025-40551 CVE-2025-40551 CRITICAL 9.8 84.18% cvelistv5
cve-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability HIGH N/A 36.14% cvelistv5 2025-03-11
cve-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability HIGH N/A 55.95% cvelistv5 2020-11-05
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL 9.8 98.69% cvelistv5 2026-01-29
cve-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A 86.59% cvelistv5 2026-01-27
cve-2026-24061 GNU InetUtils Argument Injection Vulnerability CRITICAL N/A 98.98% cvelistv5 2026-01-22