Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2024-3848 | CVE-2024-3848 | HIGH | 7.5 | 43.28% | cvelistv5 | |
| cve-2020-13945 | CVE-2020-13945 | HIGH | N/A | 72.98% | cvelistv5 | |
| cve-2026-66592 | CVE-2026-66592 | CRITICAL | 9.3 | 0.40% | cvelistv5 | |
| cve-2026-28177 | CVE-2026-28177 | HIGH | 7.1 | 0.25% | cvelistv5 | |
| cve-2026-111497 | Google Brotli Unchecked Return Value Vulnerability | HIGH | N/A | 82.64% | cvelistv5 | 2026-10-27 |
| cve-2026-109619 | CVE-2026-109619 | HIGH | N/A | 100.00% | cvelistv5 | |
| cve-2026-109618 | CVE-2026-109618 | HIGH | N/A | 100.00% | cvelistv5 | |
| cve-2026-48356 | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | CRITICAL | 9.3 | 44.58% | cvelistv5 | 2026-10-27 |
| cve-2026-115560 | CVE-2026-115560 | HIGH | N/A | N/A | cvelistv5 | 2026-10-23 |
| cve-2026-114625 | CVE-2026-114625 | CRITICAL | 9.4 | 1.03% | cvelistv5 | |
| cve-2026-110447 | CVE-2026-110447 | CRITICAL | 9.2 | 73.31% | cvelistv5 | |
| cve-2026-106173 | CVE-2026-106173 | CRITICAL | 9.8 | 1.00% | cvelistv5 | |
| cve-2021-23337 | CVE-2021-23337 | HIGH | 7.2 | 21.33% | cvelistv5 | |
| zdi-can-34076 | ZDI-CAN-34076 | HIGH | 8.6 | N/A | ndaal_kev | 2026-10-22 |
| zdi-can-34068 | ZDI-CAN-34068 | HIGH | 8.8 | N/A | ndaal_kev | 2026-10-22 |
| zdi-can-33774 | ZDI-CAN-33774 | CRITICAL | 9.0 | N/A | ndaal_kev | 2026-10-22 |
| zdi-can-33549 | ZDI-CAN-33549 | CRITICAL | 9.0 | N/A | ndaal_kev | 2026-10-22 |
| zdi-can-33367 | ZDI-CAN-33367 | HIGH | 7.8 | N/A | ndaal_kev | 2026-10-22 |
| zdi-can-32005 | ZDI-CAN-32005 | HIGH | 7.8 | N/A | ndaal_kev | 2026-10-22 |
| cve-2026-97313 | bind: bind: Denial of service via assertion failure in RPZ query processing | HIGH | 7.5 | N/A | cvelistv5 | 2026-10-22 |
| cve-2026-97237 | CVE-2026-97237 | HIGH | 7.1 | N/A | cvelistv5 | |
| cve-2026-96888 | bind: bind: Denial of Service via assertion failure during redirect processing | HIGH | 7.5 | N/A | cvelistv5 | 2026-10-22 |
| cve-2026-94300 | bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay | HIGH | 8.1 | N/A | cvelistv5 | 2026-10-22 |
| cve-2026-19630 | bind: BIND: Denial of Service via unbounded processing of crafted DNS messages | HIGH | 7.5 | 0.45% | cvelistv5 | 2026-10-22 |
| cve-2026-114625 | CVE-2026-114625 | CRITICAL | 9.4 | 1.03% | cvelistv5 | |
| cve-2025-71434 | CVE-2025-71434 | HIGH | N/A | 0.32% | cvelistv5 | |
| cve-2025-66533 | CVE-2025-66533 | MEDIUM | 6.5 | 0.30% | cvelistv5 | |
| cve-2024-58396 | CVE-2024-58396 | HIGH | 8.7 | 0.50% | cvelistv5 | |
| cve-2024-58394 | CVE-2024-58394 | MEDIUM | 5.1 | 0.20% | cvelistv5 | |
| cve-2024-58393 | CVE-2024-58393 | HIGH | 8.8 | 0.27% | cvelistv5 |