Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-17103 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability HIGH N/A N/A cvelistv5 2026-05-19
cve-2025-1448 Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-05-18
cve-2018-5999 AsusWRT 'handle_request' Function Authentication Bypass HIGH N/A 87.53% cvelistv5 2026-05-17
cve-2026-42945 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module CRITICAL 9.2 N/A cvelistv5 2026-10-26
cve-2025-67303 An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuratio... HIGH 7.5 N/A cvelistv5 2026-11-04
cve-2024-45309 onedev_project onedev Exposure of Sensitive Information to an Unauthorized Actor HIGH 8.7 N/A cvelistv5 2026-05-16
cve-2022-28290 welaunch wordpress_country_selector Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-05-16
cve-2026-8181 burst-statistics burst_statistics Improper Authentication HIGH N/A N/A cvelistv5 2026-05-14
cve-2026-47100 FunnelKit funnel_builder Missing Authorization HIGH N/A N/A cvelistv5 2026-05-14
cve-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability HIGH 8.1 N/A cvelistv5 2026-05-15
cve-2026-28517 opendcim opendcim Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-05-14
cve-2026-28515 opendcim opendcim Missing Authorization HIGH N/A N/A cvelistv5 2026-05-14
cve-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CRITICAL 10.0 N/A cvelistv5 2026-05-14
cve-2026-41176 SUSE CVE CVE-2026-41176 CRITICAL 9.8 N/A cvelistv5 2026-07-31
cve-2026-32661 Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS... CRITICAL 9.3 N/A cvelistv5 2026-10-26
cve-2023-2523 e-office e-office Unrestricted Upload of File with Dangerous Type HIGH 7.5 N/A cvelistv5 2026-05-13
cve-2026-44338 praison praisonai Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-05-12
cve-2026-43500 Linux Kernel Out-of-bounds Write HIGH N/A N/A cvelistv5 2026-05-11
cve-2019-13396 getflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 62.57% cvelistv5 2026-05-11
cve-2025-40600 SonicWall SonicOS Use of Externally-Controlled Format String HIGH N/A N/A cvelistv5 2026-05-10
cve-2025-32818 SonicWall SonicOS NULL Pointer Dereference HIGH N/A N/A cvelistv5 2026-05-10
cve-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability CRITICAL 9.3 N/A cvelistv5 2026-05-27
cve-2026-43284 Linux Kernel Write-what-where Condition HIGH N/A N/A cvelistv5 2026-05-08
cve-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability HIGH 7.2 N/A cvelistv5 2026-05-07
cve-2026-6692 themepunch slider_revolution Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-05-07
cve-2026-44742 SUSE CVE CVE-2026-44742 MEDIUM 6.1 N/A cvelistv5 2026-08-21
cve-2026-40466 Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ... HIGH 8.8 N/A cvelistv5 2026-10-26
cve-2025-9501 The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc fun... CRITICAL 9.0 N/A cvelistv5 2026-10-19
cve-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability MEDIUM 6.9 N/A cvelistv5 2026-06-09
cve-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability CRITICAL 9.3 N/A cvelistv5 2026-05-06