Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-45695 github.com/kopia/kopia: Kopia: Arbitrary code execution via unauthenticated SFTP configuration in HTTP server. MEDIUM 6.5 N/A cvelistv5 2026-07-29
cve-2026-42031 okfn ckan Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-10
cve-2026-42018 JFrog Artifactory Improper Authentication Vulnerability HIGH 7.5 N/A cvelistv5 2026-09-11
cve-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability HIGH 8.1 N/A cvelistv5 2026-09-11
cve-2026-18884 Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-10
cve-2026-11613 Improper Control of Filename for Include/Require Statement in PHP Program HIGH N/A N/A cvelistv5 2026-09-10
cve-2024-50340 sensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-09-10
cve-2024-36412 salesagility suitecrm Improper Neutralization of Special Elements used in an SQL Command CRITICAL 10.0 N/A cvelistv5 2026-09-10
cve-2022-1057 varktech pricing_deals_for_woocommerce Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-09-10
cve-2026-87827 Initialization of a Resource with an Insecure Default CRITICAL 10.0 N/A cvelistv5 2026-09-09
cve-2026-86207 N-able N-central Authentication Bypass by Primary Weakness HIGH 7.7 N/A cvelistv5 2026-09-09
cve-2026-80099 Improper Authentication HIGH 8.8 N/A cvelistv5 2026-09-09
cve-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A N/A cvelistv5 2026-09-09
cve-2026-14359 Improper Privilege Management HIGH N/A N/A cvelistv5 2026-09-09
cve-2024-2851 Tenda ac15_firmware Improper Neutralization of Special Elements used in an OS Command MEDIUM 6.5 N/A cvelistv5 2026-09-09
cve-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability HIGH N/A N/A cvelistv5 2026-09-09
cve-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability HIGH 7.8 N/A cvelistv5 2026-09-08
cve-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability CRITICAL 9.9 N/A cvelistv5 2026-09-11
cve-2026-81963 Microsoft Windows Link Following Vulnerability HIGH 7.8 N/A cvelistv5 2026-09-08
cve-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability HIGH 8.1 N/A cvelistv5 2026-09-09
cve-2023-37462 XWiki xwiki Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-09-08
cve-2017-5753 Intel atom_c Observable Discrepancy HIGH N/A N/A cvelistv5 2026-09-08
cve-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability HIGH N/A N/A cvelistv5 2026-09-08
cve-2026-60105 monstaftp monsta_ftp Server-Side Request Forgery HIGH 7.7 N/A cvelistv5 2026-09-07
cve-2025-60687 An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B2023... MEDIUM 6.5 N/A cvelistv5 2026-11-05
cve-2025-6068 fooplugins foogallery Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-09-07
cve-2025-14208 A security flaw has been discovered in D-Link DIR-823X up to 20250416 LOW 2.1 N/A cvelistv5 2026-10-14
cve-2023-37569 esds.co emagic_data_center_management Improper Neutralization of Special Elements used in an OS Command HIGH 8.8 N/A cvelistv5 2026-09-07
cve-2026-86218 N-able N-central Static Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-09-08
cve-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CRITICAL 9.2 N/A cvelistv5 2026-09-10