Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-1994 CLavaque s2Member Improper Privilege Management HIGH N/A N/A cvelistv5 2026-02-19
cve-2025-12845 Missing Authorization HIGH N/A N/A cvelistv5 2026-02-19
cve-2026-23744 mcpjam inspector Missing Authentication for Critical Functionality HIGH N/A N/A cvelistv5 2026-02-18
cve-2026-1937 yaycommerce yaymail Missing Authorization HIGH N/A N/A cvelistv5 2026-02-18
cve-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability HIGH N/A N/A cvelistv5 2026-02-17
cve-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-02-17
cve-2025-54068 Laravel Livewire Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-02-17
cve-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability HIGH N/A N/A cvelistv5 2026-02-17
cve-2023-27032 idnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 N/A cvelistv5 2026-02-15
cve-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability HIGH N/A N/A cvelistv5 2026-02-14
cve-2021-39152 XStream XStream Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2026-02-14
cve-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2026-02-13
cve-2026-2441 Google Chromium CSS Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2026-02-13
cve-2025-55303 astro astro Improper Neutralization of Input During Web Page Generation MEDIUM 6.9 N/A cvelistv5 2026-02-12
cve-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-02-12
cve-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2026-02-12
cve-2015-5471 swim_team_project swim_team Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 32.48% cvelistv5 2026-02-12
cve-2026-21859 axllent mailpit Server-Side Request Forgery HIGH N/A N/A cvelistv5 2026-02-11
cve-2026-20700 Apple Multiple Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2026-02-11
cve-2026-1357 WPvivid migration\,_backup\,_staging Unrestricted Upload of File with Dangerous Type HIGH N/A N/A cvelistv5 2026-02-11
cve-2025-70795 CVE-2025-70795 MEDIUM 5.5 N/A cvelistv5
cve-2025-56520 CVE-2025-56520 MEDIUM 5.3 N/A cvelistv5
cve-2024-56159 astro astro Storage of File with Sensitive Data Under Web Root HIGH N/A N/A cvelistv5 2026-02-11
cve-2020-9314 Oracle iplanet_web_server Improper Neutralization of Input During Web Page Generation HIGH N/A 1.28% cvelistv5 2026-02-11
cve-2020-37214 thecontrolgroup voyager Improper Limitation of a Pathname to a Restricted Directory HIGH 8.7 0.71% cvelistv5 2026-02-11
cve-2020-19363 vtiger vtiger_crm Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A 3.40% cvelistv5 2026-02-11
cve-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21519 Microsoft Windows Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2026-02-10