Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability | HIGH | N/A | 82.16% | cvelistv5 | 2026-09-27 |
| cve-2026-100382 | CVE-2026-100382 | CRITICAL | 10.0 | 1.21% | cvelistv5 | |
| cve-2025-9090 | Tenda ac20_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component | HIGH | N/A | 16.65% | cvelistv5 | 2026-09-27 |
| cve-2024-5522 | CVE-2024-5522 | HIGH | N/A | 2.64% | cvelistv5 | |
| cve-2026-33057 | mesop-dev mesop Improper Control of Generation of Code | HIGH | N/A | 5.29% | cvelistv5 | 2026-09-26 |
| cve-2026-93622 | Improper Neutralization of Input During Web Page Generation | HIGH | N/A | 0.25% | cvelistv5 | 2026-09-25 |
| cve-2026-93399 | Authorization Bypass Through User-Controlled Key | HIGH | N/A | 0.58% | cvelistv5 | 2026-09-25 |
| cve-2026-88996 | Improper Neutralization of Input During Web Page Generation | HIGH | N/A | 0.39% | cvelistv5 | 2026-09-25 |
| cve-2026-62062 | elementor Website Builder Cross-Site Request Forgery | HIGH | N/A | 0.19% | cvelistv5 | 2026-09-25 |
| cve-2026-42608 | CVE-2026-42608 | HIGH | 8.8 | 0.60% | cvelistv5 | |
| cve-2026-97246 | CVE-2026-97246 | MEDIUM | 4.9 | 0.21% | cvelistv5 | |
| cve-2026-65660 | CVE-2026-65660 | HIGH | 8.8 | 8.19% | cvelistv5 | |
| cve-2026-30633 | Improper Limitation of a Pathname to a Restricted Directory | HIGH | 7.5 | 0.89% | cvelistv5 | 2026-09-24 |
| cve-2026-18322 | Improper Privilege Management | HIGH | N/A | 0.59% | cvelistv5 | 2026-09-24 |
| cve-2022-28368 | dompdf_project dompdf Improper Neutralization of Input During Web Page Generation | HIGH | N/A | 83.94% | cvelistv5 | 2026-09-24 |
| cve-2026-94127 | CVE-2026-94127 | HIGH | N/A | 26.55% | cvelistv5 | |
| cve-2026-93952 | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | HIGH | N/A | 1.38% | cvelistv5 | 2026-09-22 |
| cve-2026-93616 | Check Point Multiple Products Path Traversal Vulnerability | HIGH | N/A | 91.61% | cvelistv5 | 2026-09-22 |
| cve-2026-87902 | CVE-2026-87902 | HIGH | N/A | 95.77% | cvelistv5 | |
| cve-2026-85102 | Check Point Multiple Products Improper Certificate Validation Vulnerability | HIGH | N/A | 54.14% | cvelistv5 | 2026-09-22 |
| cve-2026-75949 | CVE-2026-75949 | CRITICAL | 10.0 | 0.43% | cvelistv5 | |
| cve-2026-66457 | CVE-2026-66457 | HIGH | 7.1 | 0.25% | cvelistv5 | |
| cve-2025-68472 | mindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory | HIGH | N/A | 20.26% | cvelistv5 | 2026-09-22 |
| cve-2016-20080 | CVE-2016-20080 | MEDIUM | 6.9 | 0.39% | cvelistv5 | |
| cve-2026-92229 | incsub forminator Improper Control of Generation of Code | CRITICAL | 9.1 | 0.73% | cvelistv5 | 2026-09-21 |
| cve-2026-88062 | CVE-2026-88062 | CRITICAL | 9.5 | 1.42% | cvelistv5 | |
| cve-2026-84750 | Unrestricted Upload of File with Dangerous Type | MEDIUM | 6.5 | 0.45% | cvelistv5 | 2026-09-21 |
| cve-2026-82901 | Themefic ultimate_addons_for_contact_form_7 Unrestricted Upload of File with Dangerous Type | CRITICAL | 9.8 | 4.33% | cvelistv5 | 2026-09-21 |
| cve-2026-79756 | CVE-2026-79756 | HIGH | 8.7 | 7.52% | cvelistv5 | |
| cve-2026-7273 | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | HIGH | 8.8 | 2.78% | cvelistv5 | 2026-09-21 |