Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-47892 | Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints | CRITICAL | 9.8 | N/A | cvelistv5 | 2026-09-01 |
| cve-2026-47891 | org.springframework/spring-webflux: org.springframework/spring-web: Spring WebFlux: Denial of Service due to maxInMemorySize bypass | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-02 |
| cve-2026-47078 | SUSE CVE CVE-2026-47078 | MEDIUM | 5.0 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-47025 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility) | HIGH | 8.8 | N/A | cvelistv5 | 2026-10-27 |
| cve-2026-46470 | SUSE CVE CVE-2026-46470 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-05-20 |
| cve-2026-46469 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2 | MEDIUM | 4.0 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-45292 | opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-04 |
| cve-2026-44891 | io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-13 |
| cve-2026-44598 | shiro: org.apache.shiro/shiro-jakarta-ee: Apache Shiro: Server-Side Request Forgery via forged shiroSavedRequest cookie | MEDIUM | 5.0 | N/A | cvelistv5 | 2026-06-29 |
| cve-2026-43871 | SUSE CVE CVE-2026-43871 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-28 |
| cve-2026-43870 | Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neu... | HIGH | 7.3 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-43869 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thri... | HIGH | 7.3 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-43868 | Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before... | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-10-26 |
| cve-2026-43828 | apache-shiro: Apache Shiro: Information disclosure via insecure cookie handling | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-07-01 |
| cve-2026-43827 | apache-shiro: Apache Shiro: Session fixation vulnerability due to improper session invalidation upon login | HIGH | 7.1 | N/A | cvelistv5 | 2026-08-07 |
| cve-2026-43804 | SUSE CVE CVE-2026-43804 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-15 |
| cve-2026-43745 | SUSE CVE CVE-2026-43745 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-18 |
| cve-2026-43742 | SUSE CVE CVE-2026-43742 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-18 |
| cve-2026-43740 | SUSE CVE CVE-2026-43740 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-27 |
| cve-2026-43734 | SUSE CVE CVE-2026-43734 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-18 |
| cve-2026-43732 | webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-25 |
| cve-2026-43731 | SUSE CVE CVE-2026-43731 | HIGH | 8.8 | N/A | cvelistv5 | 2026-08-18 |
| cve-2026-43727 | SUSE CVE CVE-2026-43727 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-18 |
| cve-2026-43726 | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-25 |
| cve-2026-43725 | SUSE CVE CVE-2026-43725 | HIGH | 7.1 | N/A | cvelistv5 | 2026-08-18 |
| cve-2026-43721 | SUSE CVE CVE-2026-43721 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-27 |
| cve-2026-43720 | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-25 |
| cve-2026-43716 | SUSE CVE CVE-2026-43716 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-27 |
| cve-2026-43715 | A use-after-free issue was addressed with improved memory management | HIGH | 8.8 | N/A | cvelistv5 | 2026-10-24 |
| cve-2026-43713 | SUSE CVE CVE-2026-43713 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-27 |