Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-34486 Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass HIGH 7.5 N/A cvelistv5 2026-08-07
cve-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability HIGH N/A N/A cvelistv5 2026-07-30
cve-2026-1623 TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-07-30
cve-2022-36883 Jenkins git Missing Authorization HIGH N/A N/A cvelistv5 2026-07-30
cve-2020-1013 Microsoft Windows Group Policy Elevation of Privilege Vulnerability HIGH N/A N/A cvelistv5 2026-07-30
cve-2026-67595 VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template... CRITICAL 9.2 N/A cvelistv5 2026-10-24
cve-2026-65885 Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows... CRITICAL 9.4 N/A cvelistv5 2026-10-23
cve-2026-65884 Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users prov... CRITICAL 10.0 N/A cvelistv5 2026-10-23
cve-2026-20316 A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthe... MEDIUM 5.3 N/A cvelistv5 2026-10-24
cve-2026-58138 netflix conductor Improper Control of Generation of Code CRITICAL 9.3 N/A cvelistv5 2026-07-27
cve-2026-16812 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access priv... CRITICAL 10.0 N/A cvelistv5 2026-10-24
cve-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability HIGH N/A N/A cvelistv5 2026-07-27
cve-2026-59821 LiteLLM LiteLLM Improper Control of Generation of Code LOW 2.1 N/A cvelistv5 2026-07-26
cve-2026-59553 Improper Neutralization of Input During Web Page Generation HIGH 7.1 N/A cvelistv5 2026-07-24
cve-2025-4283 oretnom23 stock_management_system Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-07-24
cve-2026-8496 Improper Neutralization of Input During Web Page Generation MEDIUM 6.1 N/A cvelistv5 2026-07-23
cve-2026-16723 alibaba fastjson Improper Input Validation CRITICAL 9.0 N/A cvelistv5 2026-07-23
cve-2025-62631 Fortinet FortiOS DEPRECATED: Insufficient Session Expiration MEDIUM 5.6 N/A cvelistv5 2026-07-23
cve-2016-3081 Apache Struts Command Injection Vulnerability HIGH 8.1 N/A cvelistv5 2026-10-08
cve-2026-44825 Apache Solr Use of Hard-coded Credentials HIGH N/A N/A cvelistv5 2026-07-22
cve-2026-58455 Improper Neutralization of Special Elements used in an OS Command CRITICAL 9.2 N/A cvelistv5 2026-07-21
cve-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-07-20
cve-2026-48611 phpbb phpbb Improper Authentication HIGH N/A N/A cvelistv5 2026-07-20
cve-2026-4480 samba: Samba: Remote Code Execution in printing subsystem via unescaped job description CRITICAL 9.0 N/A cvelistv5 2026-09-01
cve-2025-68493 Apache Struts Improper Restriction of XML External Entity Reference HIGH N/A N/A cvelistv5 2026-07-20
cve-2016-4800 jetty: path normalization UNKNOWN N/A N/A cvelistv5 2026-08-04
cve-2007-6672 Jetty directory traversal UNKNOWN N/A 3.86% cvelistv5 2025-11-21
cve-2005-0869 phpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A 5.18% cvelistv5 2026-07-20
cve-2026-16232 An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote... CRITICAL 9.3 N/A cvelistv5 2026-10-24
cve-2026-6875 Improper Control of Generation of Code CRITICAL 9.5 N/A cvelistv5 2026-07-18