Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-88779 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | HIGH | 8.7 | 11.39% | cvelistv5 | 2026-10-03 |
| cve-2026-94541 | Missing Authorization | CRITICAL | 9.8 | 0.49% | cvelistv5 | 2026-10-02 |
| cve-2026-73382 | geminilabs site_reviews Improper Neutralization of Input During Web Page Generation | HIGH | 7.1 | 0.25% | cvelistv5 | 2026-10-02 |
| cve-2026-65761 | CVE-2026-65761 | CRITICAL | 9.3 | 1.04% | cvelistv5 | |
| cve-2026-56005 | CVE-2026-56005 | HIGH | 7.1 | 0.25% | cvelistv5 | |
| cve-2023-54405 | CVE-2023-54405 | CRITICAL | 9.3 | 0.59% | cvelistv5 | |
| cve-2020-37278 | CVE-2020-37278 | HIGH | 8.7 | 0.36% | cvelistv5 | |
| cve-2014-125130 | CVE-2014-125130 | HIGH | 8.7 | 0.53% | cvelistv5 | |
| cve-2026-61500 | CVE-2026-61500 | CRITICAL | 9.3 | 1.91% | cvelistv5 | |
| cve-2026-104286 | Fortinet FortiMail Path Traversal Vulnerability | CRITICAL | 9.8 | 4.57% | cvelistv5 | 2026-10-01 |
| cve-2025-3759 | CVE-2025-3759 | HIGH | N/A | 0.26% | cvelistv5 | |
| cve-2025-11913 | A vulnerability has been found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40 | LOW | 2.1 | 0.87% | cvelistv5 | 2026-10-08 |
| cve-2024-58388 | CVE-2024-58388 | HIGH | 8.7 | 0.81% | cvelistv5 | |
| cve-2021-36580 | CVE-2021-36580 | HIGH | N/A | 1.59% | cvelistv5 | |
| cve-2026-76504 | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | CRITICAL | 9.8 | 38.93% | cvelistv5 | 2026-09-30 |
| cve-2026-102490 | Zammad GmbH Zammad Improper Privilege Management Vulnerability | CRITICAL | 9.4 | 10.94% | cvelistv5 | 2026-09-30 |
| cve-2026-102489 | Zammad GmbH Zammad Session Fixation Vulnerability | CRITICAL | 9.4 | 22.48% | cvelistv5 | 2026-09-30 |
| cve-2024-58387 | CVE-2024-58387 | HIGH | 8.7 | 0.55% | cvelistv5 | |
| cve-2024-49766 | palletsprojects werkzeug Improper Limitation of a Pathname to a Restricted Directory | CRITICAL | N/A | 0.78% | cvelistv5 | 2026-09-30 |
| cve-2023-54403 | Improper Limitation of a Pathname to a Restricted Directory | HIGH | 8.7 | 0.46% | cvelistv5 | 2026-09-30 |
| cve-2023-54402 | CVE-2023-54402 | HIGH | 8.7 | 0.45% | cvelistv5 | |
| cve-2020-22209 | 74cms 74cms Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 8.58% | cvelistv5 | 2026-09-30 |
| cve-2026-85520 | External Control of File Name or Path | CRITICAL | 9.3 | 0.99% | cvelistv5 | 2026-09-29 |
| cve-2025-62023 | Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This ... | CRITICAL | 9.0 | 0.39% | cvelistv5 | 2026-10-08 |
| cve-2023-54400 | CVE-2023-54400 | CRITICAL | 9.3 | 0.59% | cvelistv5 | |
| cve-2018-8033 | CVE-2018-8033 | HIGH | N/A | 25.74% | cvelistv5 | |
| cve-2015-20122 | CVE-2015-20122 | HIGH | 8.7 | 0.48% | cvelistv5 | |
| cve-2026-86950 | CVE-2026-86950 | HIGH | 8.8 | 26.17% | cvelistv5 | |
| cve-2026-18143 | Unrestricted Upload of File with Dangerous Type | CRITICAL | 9.8 | 2.14% | cvelistv5 | 2026-09-28 |
| cve-2026-88772 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | HIGH | N/A | 78.16% | cvelistv5 | 2026-09-27 |