Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-6433 CVE-2026-6433 HIGH N/A N/A cvelistv5
cve-2026-56033 dokan dokan Incorrect Privilege Assignment CRITICAL 9.8 N/A cvelistv5 2026-06-23
cve-2026-42589 CVE-2026-42589 HIGH N/A N/A cvelistv5
cve-2025-7443 berqier berqwp Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-06-23
cve-2025-67038 Lantronix EDS5000 Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-06-23
cve-2025-12352 The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in... CRITICAL 9.8 N/A cvelistv5 2026-10-19
cve-2024-6648 apollotheme ap_pagebuilder Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-06-23
cve-2020-36847 simplefilelist simple_file_list Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-06-23
cve-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability HIGH 8.6 N/A cvelistv5 2026-06-22
cve-2021-30128 Apache OFBiz Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2026-06-22
cve-2021-28199 ASUS asmb9-ikvm_firmware Buffer Copy without Checking Size of Input HIGH N/A N/A cvelistv5 2026-06-22
cve-2026-36356 Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-06-21
cve-2026-7515 Improper Control of Filename for Include/Require Statement in PHP Program CRITICAL 9.8 N/A cvelistv5 2026-06-19
cve-2026-56011 MapPress Maps for WordPress Cross-Site Scripting (XSS) HIGH 7.1 N/A cvelistv5 2026-06-19
cve-2026-8713 theme-fusion avada_builder Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-06-18
cve-2026-27760 opencats opencats Improper Control of Generation of Code HIGH N/A N/A cvelistv5 2026-06-17
cve-2025-11837 QNAP malware_remover Improper Control of Generation of Code HIGH N/A N/A cvelistv5 2026-06-17
cve-2016-5681 D-Link dir-868l_firmware Improper Restriction of Operations within the Bounds of a Memory Buffer HIGH N/A 11.93% cvelistv5 2026-06-17
cve-2026-10735 ShapedPlugin Pro Backdoor Compromise HIGH 7.5 N/A cvelistv5 2026-06-16
cve-2025-1055 Missing Authorization CRITICAL N/A N/A cvelistv5 2026-06-16
cve-2023-52271 Topaz Antifraud wsftprm.sys Kernel Driver Process Termination MEDIUM 6.5 N/A cvelistv5 2026-06-16
cve-2026-53435 Jenkins Jenkins Deserialization of Untrusted Data HIGH 8.8 N/A cvelistv5 2026-06-15
cve-2026-48969 really-simple-plugins really_simple_security Missing Authorization MEDIUM 6.5 N/A cvelistv5 2026-06-15
cve-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-06-15
cve-2026-39813 Fortinet FortiSandbox Path Traversal: '../filedir' CRITICAL 9.8 N/A cvelistv5 2026-06-15
cve-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability CRITICAL 9.1 N/A cvelistv5 2026-06-15
cve-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-06-15
cve-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-06-15
cve-2025-68045 CVE-2025-68045 HIGH 7.5 N/A cvelistv5
cve-2026-48907 Widget Factory Joomla Content Editor Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-06-12