Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59888 | SUSE CVE CVE-2026-59888 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-07-27 |
| cve-2026-59739 | zookeeper: Apache ZooKeeper: Information disclosure via SetWatches reconnect replay | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-28 |
| cve-2026-59696 | SUSE CVE CVE-2026-59696 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-09-02 |
| cve-2026-59652 | SUSE CVE CVE-2026-59652 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59651 | SUSE CVE CVE-2026-59651 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59650 | SUSE CVE CVE-2026-59650 | CRITICAL | 9.1 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59649 | SUSE CVE CVE-2026-59649 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59647 | SUSE CVE CVE-2026-59647 | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59645 | SUSE CVE CVE-2026-59645 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59642 | SUSE CVE CVE-2026-59642 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59639 | SUSE CVE CVE-2026-59639 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-59314 | Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response sp... | LOW | 3.7 | N/A | cvelistv5 | 2026-09-01 |
| cve-2026-59313 | org.springframework/spring-webmvc: Spring MVC: Stream corruption via Server-Sent Events (SSE) | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-30 |
| cve-2026-59283 | org.springframework:spring-expression: Spring Framework: Safety Guard Bypass via SpEL Expression Compilation | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-59282 | org.springframework:spring-beans: Spring Framework: Denial of Service via unbounded list growth in data binding | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-22 |
| cve-2026-59281 | org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Cross-site Scripting in MVC and WebFlux applications | MEDIUM | 5.4 | N/A | cvelistv5 | 2026-09-24 |
| cve-2026-59280 | org.springframework/spring-webmvc: Spring Framework: Path Traversal via untrusted input in FreeMarker integration | MEDIUM | 4.3 | N/A | cvelistv5 | 2026-10-07 |
| cve-2026-5928 | glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings | MEDIUM | 5.0 | N/A | cvelistv5 | 2026-09-01 |
| cve-2026-59251 | SUSE CVE CVE-2026-59251 | HIGH | 8.6 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-59250 | megaco: Erlang/OTP Megaco Flex Scanner: Remote code execution or denial of service via oversized message | HIGH | 8.2 | N/A | cvelistv5 | 2026-08-19 |
| cve-2026-58389 | SUSE CVE CVE-2026-58389 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-28 |
| cve-2026-58227 | SUSE CVE CVE-2026-58227 | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-58063 | SUSE CVE CVE-2026-58063 | MEDIUM | 4.3 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-58062 | org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP response | HIGH | 7.4 | N/A | cvelistv5 | 2026-09-02 |
| cve-2026-58061 | org.bouncycastle/bc-java: org.bouncycastle/bc-fja: Bouncy Castle for Java: Integrity bypass in CCM-family modes | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-09 |
| cve-2026-58060 | SUSE CVE CVE-2026-58060 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-58059 | SUSE CVE CVE-2026-58059 | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-58051 | SUSE CVE CVE-2026-58051 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-21 |
| cve-2026-58050 | SUSE CVE CVE-2026-58050 | HIGH | 8.1 | N/A | cvelistv5 | 2026-09-21 |
| cve-2026-58045 | A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `nod... | MEDIUM | 6.2 | N/A | cvelistv5 | 2026-10-23 |