Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-56271 | CVE-2026-56271 | CRITICAL | 9.3 | 0.66% | cvelistv5 | |
| cve-2026-54569 | CVE-2026-54569 | CRITICAL | 9.8 | 1.16% | cvelistv5 | |
| cve-2026-48842 | CVE-2026-48842 | HIGH | N/A | 1.70% | cvelistv5 | |
| cve-2026-27960 | CVE-2026-27960 | HIGH | N/A | 7.09% | cvelistv5 | |
| cve-2021-30134 | CVE-2021-30134 | HIGH | N/A | 1.32% | cvelistv5 | |
| cve-2018-13980 | CVE-2018-13980 | HIGH | N/A | 6.90% | cvelistv5 | |
| cve-2026-93485 | CVE-2026-93485 | HIGH | 7.1 | 0.75% | cvelistv5 | |
| cve-2026-86124 | Missing Authentication for Critical Functionality | CRITICAL | 9.3 | 0.98% | cvelistv5 | 2026-09-18 |
| cve-2026-84434 | Unrestricted Upload of File with Dangerous Type | CRITICAL | 9.8 | 3.91% | cvelistv5 | 2026-09-18 |
| cve-2026-53266 | kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite | HIGH | 7.5 | 0.93% | cvelistv5 | 2026-08-05 |
| cve-2026-42796 | workiva arelle Missing Authentication for Critical Functionality | HIGH | N/A | 2.75% | cvelistv5 | 2026-09-18 |
| cve-2025-39964 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in a... | HIGH | 7.8 | 1.61% | cvelistv5 | 2026-10-19 |
| cve-2025-39682 | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | CRITICAL | 9.8 | 3.25% | cvelistv5 | 2026-09-18 |
| cve-2023-46359 | hardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.8 | 87.61% | cvelistv5 | 2026-09-18 |
| cve-2023-29827 | ejs ejs Improper Neutralization of Special Elements in Output Used by a Downstream Component | CRITICAL | 9.8 | 5.55% | cvelistv5 | 2026-09-18 |
| cve-2017-20284 | CVE-2017-20284 | HIGH | N/A | 1.17% | cvelistv5 | |
| cve-2026-89013 | dolibarr dolibarr_erp\/crm Incorrect Authorization | HIGH | 8.7 | 1.56% | cvelistv5 | 2026-09-17 |
| cve-2026-86538 | Improper Limitation of a Pathname to a Restricted Directory | HIGH | 8.7 | 0.98% | cvelistv5 | 2026-09-17 |
| cve-2026-40242 | getarcane arcane Server-Side Request Forgery | HIGH | 7.2 | 0.62% | cvelistv5 | 2026-09-17 |
| cve-2026-32255 | kan kan Server-Side Request Forgery | HIGH | N/A | 26.38% | cvelistv5 | 2026-09-17 |
| cve-2022-45362 | paytm payment_gateway Server-Side Request Forgery | HIGH | 7.2 | 41.76% | cvelistv5 | 2026-09-17 |
| cve-2022-25497 | cuppacms cuppacms Files or Directories Accessible to External Parties | HIGH | N/A | 3.64% | cvelistv5 | 2026-09-17 |
| cve-2026-76460 | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | CRITICAL | 10.0 | 75.60% | cvelistv5 | 2026-09-16 |
| cve-2026-66047 | properfraction profilepress Missing Authentication for Critical Functionality | CRITICAL | 9.2 | 0.92% | cvelistv5 | 2026-09-16 |
| cve-2026-54196 | Crocoblock jetformbuilder Incorrect Privilege Assignment | MEDIUM | 6.8 | 0.24% | cvelistv5 | 2026-09-16 |
| cve-2026-50752 | Improper Certificate Validation | CRITICAL | N/A | 5.00% | cvelistv5 | 2026-09-16 |
| cve-2026-32996 | CVE-2026-32996 | HIGH | 7.3 | 0.17% | cvelistv5 | |
| cve-2022-0412 | templateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 74.00% | cvelistv5 | 2026-09-16 |
| cve-2026-89026 | CVE-2026-89026 | HIGH | N/A | 2.70% | cvelistv5 | |
| cve-2026-87886 | Acronis Backup Incorrect Default Permissions Vulnerability | HIGH | 7.8 | 0.23% | cvelistv5 | 2026-09-15 |