Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-25939 frangoteam fuxa Missing Authorization HIGH N/A N/A cvelistv5 2026-06-12
cve-2020-6286 SAP netweaver_application_server_java Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-06-12
cve-2026-42653 slicewp affiliate_program_suite Improper Neutralization of Input During Web Page Generation HIGH 7.1 N/A cvelistv5 2026-06-11
cve-2026-39494 wbwplugins product_filter_by_wbw Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.3 N/A cvelistv5 2026-06-11
cve-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL N/A N/A cvelistv5 2026-06-11
cve-2026-3018 tribulant newsletters Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-06-10
cve-2026-10795 updraftplus updraftplus Improper Verification of Cryptographic Signature HIGH N/A N/A cvelistv5 2026-06-10
cve-2026-10520 Ivanti Sentry OS Command Injection Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-06-10
cve-2026-39808 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortine... CRITICAL 9.8 N/A cvelistv5 2026-10-26
cve-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability HIGH N/A N/A cvelistv5 2026-06-09
cve-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-06-09
cve-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-06-09
cve-2026-7482 Ollama Ollama Out-of-bounds Read HIGH N/A N/A cvelistv5 2026-06-08
cve-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability CRITICAL N/A N/A cvelistv5 2026-06-08
cve-2026-5027 Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-06-08
cve-2026-49076 CVE-2026-49076 CRITICAL 9.3 N/A cvelistv5
cve-2026-49060 WordPress Hippoo Mobile App for WooCommerce Privilege Escalation CRITICAL 9.8 N/A cvelistv5 2026-06-08
cve-2026-42271 BerriAI LiteLLM Command Injection Vulnerability HIGH 8.7 N/A cvelistv5 2026-06-08
cve-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability HIGH N/A N/A cvelistv5 2026-06-08
cve-2026-49777 shapedpluginllc product_slider_pro_for_woocommerce Improper Validation of Specified Quantity in Input HIGH N/A N/A cvelistv5 2026-06-05
cve-2026-31816 budibase budibase Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-06-05
cve-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability HIGH 7.5 N/A cvelistv5 2026-06-05
cve-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability HIGH 7.8 N/A cvelistv5 2026-06-05
cve-2026-5073 Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-06-04
cve-2018-25270 ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled Key CRITICAL 9.8 0.89% cvelistv5 2026-06-04
cve-2026-3300 WPEverest everest_forms Improper Control of Generation of Code HIGH N/A N/A cvelistv5 2026-06-03
cve-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability HIGH 8.1 N/A cvelistv5 2026-06-03
cve-2026-8206 Themeum kirki Improper Privilege Management HIGH N/A N/A cvelistv5 2026-06-02
cve-2026-7465 brainstormforce spectra Improper Privilege Management HIGH N/A N/A cvelistv5 2026-06-02
cve-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability HIGH N/A N/A cvelistv5 2026-06-01