Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-42442 | fit2cloud jumpserver Improper Authentication | HIGH | N/A | 63.03% | cvelistv5 | 2026-10-29 |
| cve-2019-9041 | CVE-2019-9041 | HIGH | N/A | 31.42% | cvelistv5 | |
| cve-2026-97229 | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | HIGH | N/A | N/A | cvelistv5 | 2026-10-29 |
| cve-2026-86426 | librenms librenms Improper Authentication | HIGH | N/A | 4.36% | cvelistv5 | 2026-10-28 |
| cve-2026-85688 | CVE-2026-85688 | CRITICAL | 9.3 | 2.64% | cvelistv5 | |
| cve-2026-76418 | CVE-2026-76418 | HIGH | 8.6 | 0.82% | cvelistv5 | |
| cve-2026-73181 | Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions. | HIGH | 7.5 | 0.50% | cvelistv5 | 2026-10-23 |
| cve-2026-27413 | Cozmoslabs profile_builder Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 0.38% | cvelistv5 | 2026-10-28 |
| cve-2026-25639 | axios axios Improper Check for Unusual or Exceptional Conditions | HIGH | N/A | 2.80% | cvelistv5 | 2026-10-28 |
| cve-2026-118539 | CVE-2026-118539 | MEDIUM | 6.5 | 0.30% | cvelistv5 | |
| cve-2026-116690 | CVE-2026-116690 | HIGH | N/A | 0.56% | cvelistv5 | |
| cve-2026-109432 | Improper Neutralization of Special Elements used in an OS Command | CRITICAL | 9.3 | 0.56% | cvelistv5 | 2026-10-28 |
| cve-2026-10526 | WPDeveloper embedpress Server-Side Request Forgery | HIGH | N/A | 0.33% | cvelistv5 | 2026-10-28 |
| cve-2026-103688 | Unrestricted Upload of File with Dangerous Type | CRITICAL | 9.8 | 0.61% | cvelistv5 | 2026-10-28 |
| cve-2025-54988 | CVE-2025-54988 | HIGH | N/A | 47.95% | cvelistv5 | |
| cve-2025-14657 | themewinter eventin Missing Authorization | HIGH | N/A | 0.33% | cvelistv5 | 2026-10-28 |
| cve-2026-95610 | CVE-2026-95610 | HIGH | 8.5 | N/A | cvelistv5 | |
| cve-2026-84999 | Unrestricted Upload of File with Dangerous Type | CRITICAL | 9.8 | 0.48% | cvelistv5 | 2026-10-27 |
| cve-2026-7467 | edmonsoft read_more_\&_accordion Improper Privilege Management | HIGH | N/A | 1.31% | cvelistv5 | 2026-10-27 |
| cve-2026-41709 | Broadcom VMWare ESX Insufficient Logging Vulnerability | LOW | 2.7 | 0.69% | cvelistv5 | 2026-10-28 |
| cve-2026-40281 | thecodingmachine gotenberg Improper Neutralization of Argument Delimiters in a Command | HIGH | N/A | 2.26% | cvelistv5 | 2026-10-27 |
| cve-2026-28039 | CVE-2026-28039 | HIGH | 7.5 | 0.42% | cvelistv5 | |
| cve-2026-117601 | electrum electrum Improper Verification of Cryptographic Signature | CRITICAL | 9.3 | 0.18% | cvelistv5 | 2026-10-27 |
| cve-2026-114509 | CVE-2026-114509 | CRITICAL | 9.2 | 0.78% | cvelistv5 | |
| cve-2026-112353 | CVE-2026-112353 | MEDIUM | 6.2 | 0.24% | cvelistv5 | |
| cve-2026-102785 | CVE-2026-102785 | CRITICAL | 10.0 | 0.77% | cvelistv5 | |
| cve-2026-101767 | CVE-2026-101767 | CRITICAL | 9.8 | 0.61% | cvelistv5 | |
| cve-2024-47167 | CVE-2024-47167 | HIGH | N/A | 0.48% | cvelistv5 | |
| cve-2024-3848 | CVE-2024-3848 | HIGH | 7.5 | 43.28% | cvelistv5 | |
| cve-2020-13945 | CVE-2020-13945 | HIGH | N/A | 72.98% | cvelistv5 |