Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-42167 ProFTPD ProFTPD Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-06-01
cve-2025-48595 Android Framework Integer Overflow Vulnerability HIGH 8.4 N/A cvelistv5 2026-06-01
cve-2024-48456 Out-of-bounds Read HIGH N/A N/A cvelistv5 2026-06-01
cve-2024-21182 Oracle WebLogic Server Unspecified Vulnerability HIGH 7.5 N/A cvelistv5 2026-06-01
cve-2022-0492 Linux Kernel Improper Authentication Vulnerability HIGH N/A N/A cvelistv5 2026-06-01
cve-2026-28414 gradio_project gradio Absolute Path Traversal HIGH N/A N/A cvelistv5 2026-05-31
cve-2026-8732 Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-05-29
cve-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-05-29
cve-2026-41089 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. CRITICAL 9.8 N/A cvelistv5 2026-10-26
cve-2026-0257 Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software... HIGH 7.8 N/A cvelistv5 2026-10-26
cve-2025-11262 linkwhisper link_whisper_free Improper Neutralization of Input During Web Page Generation HIGH 7.2 N/A cvelistv5 2026-05-29
cve-2026-48027 Nx Console Embedded Malicious Code Vulnerability CRITICAL 9.3 N/A cvelistv5 2026-05-27
cve-2026-45321 On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were p... CRITICAL 9.6 N/A cvelistv5 2026-10-26
cve-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CRITICAL N/A N/A cvelistv5 2026-05-26
cve-2026-5426 Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 ... CRITICAL 9.1 N/A cvelistv5 2026-10-26
cve-2026-9082 Drupal Core SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2026-05-22
cve-2026-39365 vitejs vite Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-05-22
cve-2017-7577 xiongmaitech uc-httpd Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 28.27% cvelistv5 2026-05-22
cve-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-05-21
cve-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-05-21
cve-2026-26980 CVE-2026-26980 HIGH N/A N/A cvelistv5
cve-2026-6664 pgbouncer pgbouncer Integer Overflow or Wraparound HIGH N/A N/A cvelistv5 2026-05-20
cve-2026-45444 wpswings ultimate_gift_cards_for_woocommerce Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-05-20
cve-2017-7692 squirrelmail squirrelmail Improper Input Validation HIGH N/A 32.16% cvelistv5 2026-05-20
cve-2026-45498 Microsoft Defender Denial of Service Vulnerability HIGH N/A N/A cvelistv5 2026-05-19
cve-2026-41091 Microsoft Defender Link Following Vulnerability HIGH N/A N/A cvelistv5 2026-05-19
cve-2026-34234 Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-05-19
cve-2025-62481 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration) CRITICAL 9.8 N/A cvelistv5 2026-10-08
cve-2025-53072 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration) CRITICAL 9.8 N/A cvelistv5 2026-10-08
cve-2024-12802 SonicWall SonicOS Authentication Bypass by Primary Weakness CRITICAL N/A N/A cvelistv5 2026-05-19