Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-29059 windmill windmill Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-07-18
cve-2026-63030 WordPress Core Interpretation Conflict Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-07-21
cve-2026-60137 CVE-2026-60137 MEDIUM 5.9 N/A cvelistv5
cve-2026-46442 FlowiseAI Flowise Improper Control of Generation of Code HIGH N/A N/A cvelistv5 2026-07-17
cve-2024-36420 FlowiseAI Flowise Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH 7.5 N/A cvelistv5 2026-07-17
cve-2016-0638 Oracle WebLogic ClassFilter.class ServerChannelInputStream Bypass Java Deserialization HIGH N/A N/A cvelistv5 2026-07-17
cve-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability HIGH N/A N/A cvelistv5 2026-07-15
cve-2026-9282 BoldGrid w3_total_cache Improper Limitation of a Pathname to a Restricted Directory HIGH 7.5 N/A cvelistv5 2026-07-14
cve-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-07-16
cve-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability HIGH N/A N/A cvelistv5 2026-07-14
cve-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-07-14
cve-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability HIGH 7.2 N/A cvelistv5 2026-07-14
cve-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-07-14
cve-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability HIGH 8.1 33.87% cvelistv5 2026-07-13
cve-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-07-10
cve-2026-45586 Microsoft Windows Improper Link Resolution Before File Access HIGH N/A N/A cvelistv5 2026-07-10
cve-2026-44963 Veeam veeam_backup_\&_replication Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2026-07-10
cve-2026-2699 Progress sharefile_storage_zones_controller Improper Access Control CRITICAL 9.8 N/A cvelistv5 2026-07-10
cve-2026-57813 mailoptin mailoptin Incorrect Privilege Assignment CRITICAL 9.8 N/A cvelistv5 2026-07-09
cve-2026-3395 max-3000 maxsite_cms Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-07-09
cve-2026-31843 Improper Access Control CRITICAL 10.0 N/A cvelistv5 2026-07-09
cve-2026-14894 Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-07-09
cve-2025-7852 iqonic wpbookit Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-07-09
cve-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability HIGH 8.8 N/A cvelistv5 2026-09-02
cve-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-07-10
cve-2026-56270 FlowiseAI Flowise Missing Authentication for Critical Functionality HIGH 8.7 N/A cvelistv5 2026-07-08
cve-2026-4631 SUSE CVE CVE-2026-4631 CRITICAL 9.8 N/A cvelistv5 2026-08-05
cve-2026-59800 Improper Neutralization of Special Elements used in an OS Command CRITICAL 9.2 N/A cvelistv5 2026-07-07
cve-2020-22658 Ruckus AP Boot Image Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-07-07
cve-2020-22653 Ruckus AP Unauthorized Image Signature Vulnerability HIGH N/A N/A cvelistv5 2026-07-07