Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2026-04-06
cve-2021-4473 topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command HIGH N/A N/A cvelistv5 2026-04-06
cve-2025-59528 FlowiseAI Flowise Improper Control of Generation of Code CRITICAL 10.0 N/A cvelistv5 2026-04-05
cve-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability CRITICAL N/A N/A cvelistv5 2026-04-04
cve-2023-22621 Strapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-04-04
cve-2026-1557 stuartbates wp_responsive_images Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-04-02
cve-2026-1277 kaizencoders url_shortify URL Redirection to Untrusted Site HIGH N/A N/A cvelistv5 2026-04-02
cve-2025-13920 wpdirectorykit wp_directory_kit Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A N/A cvelistv5 2026-04-02
cve-2026-27971 qwik qwik Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2026-04-01
cve-2026-24477 mintplexlabs anythingllm Insertion of Sensitive Information Into Sent Data HIGH N/A N/A cvelistv5 2026-04-01
cve-2025-71257 bmc footprints Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-04-01
cve-2025-59716 ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/{email}/{token} e... MEDIUM 5.3 N/A cvelistv5 2026-11-05
cve-2025-14437 incsub hummingbird Insertion of Sensitive Information into Log File HIGH 7.5 N/A cvelistv5 2026-04-01
cve-2024-6265 ayecode userswp Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 N/A cvelistv5 2026-04-01
cve-2023-24000 gamipress gamipress Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-04-01
cve-2022-3254 strategy11 awp_classifieds Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-04-01
cve-2022-28987 Zoho ManageEngine ADSelfService Plus Username Enumeration HIGH N/A N/A cvelistv5 2026-04-01
cve-2026-5281 Google Dawn Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2026-04-01
cve-2026-4020 rocketgenius gravity_smtp Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A N/A cvelistv5 2026-03-31
cve-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability HIGH N/A N/A cvelistv5 2026-04-02
cve-2025-8266 CVE-2025-8266 HIGH N/A N/A cvelistv5
cve-2025-54726 skatox js_archive_list Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.3 N/A cvelistv5 2026-03-31
cve-2025-48281 mystyleplatform mystyle_custom_product_designer Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-31
cve-2025-32355 rocketsoftware trufusion_enterprise Server-Side Request Forgery HIGH N/A N/A cvelistv5 2026-03-31
cve-2025-32257 1clickmigration 1_click_migration Exposure of Sensitive System Information Due to Uncleared Debug Information HIGH N/A N/A cvelistv5 2026-03-31
cve-2025-11368 thimpress learnpress Exposure of Sensitive Information to an Unauthorized Actor MEDIUM 5.3 N/A cvelistv5 2026-03-31
cve-2025-10090 jinher jinher_oa Improper Neutralization of Special Elements in Output Used by a Downstream Component HIGH N/A N/A cvelistv5 2026-03-31
cve-2024-13609 1clickmigration 1_click_migration Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A N/A cvelistv5 2026-03-31
cve-2024-12025 Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-03-31
cve-2024-11868 thimpress learnpress Improper Access Control HIGH N/A N/A cvelistv5 2026-03-31