Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-52490 pathomation pathomation Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-04-23
cve-2026-33626 LMDeploy is a toolkit for compressing, deploying, and serving large language models HIGH 7.5 N/A cvelistv5 2026-10-26
cve-2024-32114 Apache ActiveMQ Initialization of a Resource with an Insecure Default HIGH N/A N/A cvelistv5 2026-04-22
cve-2025-29635 D-Link DIR-823X Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2026-04-24
cve-2024-22927 eyoucms eyoucms Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-04-21
cve-2019-25714 IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous Type CRITICAL 9.3 0.65% cvelistv5 2026-04-21
cve-2026-5718 CodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-04-20
cve-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2025-2749 Kentico Xperience Path Traversal Vulnerability HIGH N/A N/A cvelistv5 2026-04-20
cve-2026-27174 mjdm majordomo Improper Control of Generation of Code HIGH N/A N/A cvelistv5 2026-04-18
cve-2026-5231 VeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-04-17
cve-2026-25455 pickplugins product_slider_for_woocommerce Missing Authorization HIGH N/A N/A cvelistv5 2026-04-17
cve-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability CRITICAL N/A N/A cvelistv5 2026-04-22
cve-2025-55184 next: React Server Components: Denial of Service via unsafe HTTP deserialization HIGH 7.5 N/A cvelistv5 2026-06-30
cve-2025-12548 Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-04-15
cve-2018-14028 WordPress wordpress Unrestricted Upload of File with Dangerous Type HIGH N/A 15.17% cvelistv5 2026-04-15
cve-2026-32202 CVE-2026-32202 MEDIUM 4.3 N/A cvelistv5
cve-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability HIGH 8.8 N/A cvelistv5 2026-04-16
cve-2026-33032 nginxui nginx_ui Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-04-13
cve-2026-27175 mjdm majordomo Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-04-13
cve-2026-26127 SUSE CVE CVE-2026-26127 UNKNOWN N/A N/A cvelistv5 2026-05-09
cve-2026-25187 Microsoft Windows Improper Link Resolution Before File Access HIGH N/A N/A cvelistv5 2026-04-13
cve-2026-21262 Microsoft sql_server_2016 Improper Access Control HIGH N/A N/A cvelistv5 2026-04-13
cve-2025-60710 Microsoft Windows Link Following Vulnerability HIGH 7.8 N/A cvelistv5 2026-04-13
cve-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability HIGH N/A N/A cvelistv5 2026-04-13
cve-2020-9715 Adobe Acrobat Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2026-04-13
cve-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability MEDIUM 6.5 N/A cvelistv5 2026-04-14
cve-2025-22952 usememos memos Server-Side Request Forgery HIGH N/A N/A cvelistv5 2026-04-12
cve-2024-57046 NETGEAR dgn2200_firmware Improper Authentication HIGH N/A N/A cvelistv5 2026-04-12