Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-42596 | CVE-2026-42596 | HIGH | N/A | 1.59% | cvelistv5 | |
| cve-2026-105740 | Langflow Langflow Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.9 | 1.05% | cvelistv5 | 2026-10-12 |
| cve-2026-0702 | Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 2.05% | cvelistv5 | 2026-10-12 |
| cve-2026-97670 | theme-fusion avada_builder Improper Control of Generation of Code | CRITICAL | 9.1 | 0.46% | cvelistv5 | 2026-10-09 |
| cve-2026-91136 | Improper Limitation of a Pathname to a Restricted Directory | HIGH | 7.5 | 2.86% | cvelistv5 | 2026-10-09 |
| cve-2026-105134 | CVE-2026-105134 | CRITICAL | 10.0 | 81.76% | cvelistv5 | |
| cve-2026-105133 | CVE-2026-105133 | MEDIUM | 6.9 | 79.47% | cvelistv5 | |
| cve-2026-100147 | Improper Neutralization of Input During Web Page Generation | HIGH | 7.2 | 0.30% | cvelistv5 | 2026-10-09 |
| cve-2021-41826 | CVE-2021-41826 | HIGH | N/A | 12.06% | cvelistv5 | |
| cve-2021-25033 | CVE-2021-25033 | HIGH | N/A | 2.30% | cvelistv5 | |
| cve-2026-4815 | schiocco support_board Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 0.38% | cvelistv5 | 2026-10-08 |
| cve-2026-12227 | visualcomposer visual_composer_website_builder Improper Control of Filename for Include/Require Statement in PHP Program | HIGH | N/A | 2.77% | cvelistv5 | 2026-10-08 |
| cve-2023-22894 | Strapi Cleartext Storage of Sensitive Information Vulnerability | MEDIUM | 4.9 | 4.11% | cvelistv5 | 2026-10-08 |
| cve-2021-3199 | ONLYOFFICE Docs Server Path Traversal Vulnerability | CRITICAL | 9.8 | 30.24% | cvelistv5 | 2026-10-08 |
| cve-2015-3306 | ProFTPD Improper Access Control Vulnerability | CRITICAL | 10.0 | 99.50% | cvelistv5 | 2026-10-08 |
| cve-2026-90817 | CVE-2026-90817 | HIGH | N/A | 3.75% | cvelistv5 | |
| cve-2026-85097 | CVE-2026-85097 | CRITICAL | 9.8 | 3.29% | cvelistv5 | |
| cve-2026-29058 | wwbn avideo-encoder Improper Neutralization of Special Elements used in an OS Command | HIGH | N/A | 8.94% | cvelistv5 | 2026-10-07 |
| cve-2026-26216 | CVE-2026-26216 | CRITICAL | 10.0 | 6.42% | cvelistv5 | |
| cve-2026-21589 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | CRITICAL | 9.3 | 99.48% | cvelistv5 | 2026-10-07 |
| cve-2026-102255 | Unintended Proxy or Intermediary | CRITICAL | 10.0 | 0.98% | cvelistv5 | 2026-10-07 |
| cve-2026-94504 | Improper Neutralization of Input During Web Page Generation | HIGH | N/A | 0.62% | cvelistv5 | 2026-10-06 |
| cve-2026-93836 | CVE-2026-93836 | HIGH | N/A | 0.39% | cvelistv5 | |
| cve-2026-51886 | CVE-2026-51886 | CRITICAL | 9.8 | 0.60% | cvelistv5 | |
| cve-2026-95675 | D-Link dap-1360_firmware Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.3 | 2.06% | cvelistv5 | 2026-10-05 |
| cve-2024-23625 | D-Link dap-1650_firmware Improper Neutralization of Special Elements used in a Command | HIGH | N/A | 7.29% | cvelistv5 | 2026-10-05 |
| cve-2026-94503 | CVE-2026-94503 | CRITICAL | 10.0 | 0.35% | cvelistv5 | |
| cve-2026-97359 | Rejetto hfs2 Improper Neutralization of Special Elements Used in a Template Engine | CRITICAL | 10.0 | 5.52% | cvelistv5 | 2026-10-03 |
| cve-2026-96331 | CVE-2026-96331 | CRITICAL | 9.3 | 0.24% | cvelistv5 | |
| cve-2026-88779 | CVE-2026-88779 | HIGH | 8.7 | 11.39% | cvelistv5 |