Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-65905 | SUSE CVE CVE-2026-65905 | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-65637 | Apache Tomcat: Apache Tomcat: Improper Input Validation allows HTTP/2 no-authority bypass of strict SNI validation | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-65183 | tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition | LOW | 2.5 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-65182 | Apache Tomcat: Apache Tomcat: Security constraint bypass due to improper access control | HIGH | 8.2 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-64787 | SUSE CVE CVE-2026-64787 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-64783 | SUSE CVE CVE-2026-64783 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-64757 | SUSE CVE CVE-2026-64757 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-64730 | SUSE CVE CVE-2026-64730 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-64728 | SUSE CVE CVE-2026-64728 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-64719 | SUSE CVE CVE-2026-64719 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-64713 | SUSE CVE CVE-2026-64713 | MEDIUM | 4.3 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-64607 | org.apache.httpcomponents/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-6429 | SUSE CVE CVE-2026-6429 | MEDIUM | 5.9 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-64194 | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::D... | HIGH | 7.5 | N/A | cvelistv5 | 2026-10-24 |
| cve-2026-64193 | Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT:... | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-10-24 |
| cve-2026-63639 | SUSE CVE CVE-2026-63639 | HIGH | 8.8 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-6357 | pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation | MEDIUM | 5.8 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-63388 | SUSE CVE CVE-2026-63388 | HIGH | 8.4 | N/A | cvelistv5 | 2026-09-19 |
| cve-2026-63387 | Libevent is an event notification library | HIGH | 7.0 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-63385 | Libevent is an event notification library | CRITICAL | 9.2 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-63382 | Libevent is an event notification library | CRITICAL | 9.2 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-63076 | openssl: invalid pointer dereference in CMP server via crafted protectionAlg | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-63075 | SUSE CVE CVE-2026-63075 | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-09-19 |
| cve-2026-63074 | openssl: CMP indefinite cache growth of ExtraCerts | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-63073 | SUSE CVE CVE-2026-63073 | MEDIUM | 4.7 | N/A | cvelistv5 | 2026-09-19 |
| cve-2026-63072 | SUSE CVE CVE-2026-63072 | HIGH | 8.2 | N/A | cvelistv5 | 2026-09-21 |
| cve-2026-6276 | curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers | LOW | 3.7 | N/A | cvelistv5 | 2026-09-01 |
| cve-2026-6253 | SUSE CVE CVE-2026-6253 | MEDIUM | 5.9 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-62380 | Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain ... | MEDIUM | 6.3 | N/A | cvelistv5 | 2026-10-14 |
| cve-2026-61674 | fluent-bit: Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler | HIGH | 8.1 | N/A | cvelistv5 | 2026-10-16 |