Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-19598 podsfoundation pods Incorrect Authorization HIGH N/A N/A cvelistv5 2026-08-15
cve-2026-15826 Cozmoslabs profile_builder Incorrect Type Conversion or Cast HIGH N/A N/A cvelistv5 2026-08-15
cve-2021-2109 Oracle WebLogic Server Console Component Remote Code Execution HIGH N/A N/A cvelistv5 2026-08-15
cve-2016-5312 Symantec messaging_gateway Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-08-15
cve-2026-59309 VMware vcenter_server Incorrect Implementation of Authentication Algorithm HIGH N/A N/A cvelistv5 2026-08-14
cve-2026-58231 SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially c... CRITICAL 10.0 N/A cvelistv5 2026-10-24
cve-2026-45298 amirraminfar dozzle Server-Side Request Forgery HIGH N/A N/A cvelistv5 2026-08-14
cve-2026-18109 BoldGrid w3_total_cache Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-08-14
cve-2026-15205 Improper Neutralization of Special Elements used in an SQL Command HIGH 8.6 N/A cvelistv5 2026-08-14
cve-2026-26190 milvus milvus Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-08-13
cve-2025-55583 D-Link dir-868l_firmware Improper Neutralization of Special Elements used in an OS Command CRITICAL 9.8 N/A cvelistv5 2026-08-13
cve-2025-10123 CVE-2025-10123 HIGH N/A N/A cvelistv5
cve-2024-58374 Improper Neutralization of Special Elements used in an SQL Command HIGH 8.7 N/A cvelistv5 2026-08-13
cve-2020-9771 macOS APFS Snapshot Mount Authorization Bypass HIGH N/A N/A cvelistv5 2026-08-13
cve-2019-25765 aspcms aspcms Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-08-13
cve-2026-72530 TrueConf Server Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-08-12
cve-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability HIGH N/A N/A cvelistv5 2026-08-12
cve-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CRITICAL 9.1 N/A cvelistv5 2026-08-12
cve-2026-68820 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges l... HIGH 7.0 N/A cvelistv5 2026-10-26
cve-2026-49049 ollyo helix3 Improper Access Control HIGH 7.5 N/A cvelistv5 2026-08-11
cve-2026-33497 Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-08-11
cve-2026-20349 A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Soft... HIGH 8.6 N/A cvelistv5 2026-10-26
cve-2026-11907 Missing Authorization HIGH N/A N/A cvelistv5 2026-08-11
cve-2022-50997 Weaver e-cology Improper Neutralization of Special Elements used in an SQL Command HIGH 8.7 N/A cvelistv5 2026-08-11
cve-2016-20097 Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad HIGH 8.7 N/A cvelistv5 2026-08-11
cve-2026-66464 Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions. MEDIUM 6.5 N/A cvelistv5 2026-10-24
cve-2026-66443 WordPress REST API Log Plugin Sensitive Data Exposure HIGH N/A N/A cvelistv5 2026-08-10
cve-2026-66441 Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions. HIGH 7.5 N/A cvelistv5 2026-10-24
cve-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL N/A N/A cvelistv5 2026-08-10
cve-2026-48294 Adobe Acrobat and Reader Improper Neutralization of Input During Web Page Generation HIGH 7.4 N/A cvelistv5 2026-08-10