Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-4396 relevanssi relevanssi Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-02-02
cve-2025-1743 Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-02-02
cve-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability HIGH N/A N/A cvelistv5 2026-02-02
cve-2024-2053 articatech artica_proxy Relative Path Traversal HIGH 7.5 N/A cvelistv5 2026-02-02
cve-2010-0759 greatjoomla scriptegrator_plugin Improper Limitation of a Pathname to a Restricted Directory HIGH N/A 15.24% cvelistv5 2026-02-02
cve-2025-1023 churchcrm churchcrm Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-02-01
cve-2024-2862 LG lg_led_assistant Improper Authentication CRITICAL 9.1 N/A cvelistv5 2026-02-01
cve-2021-41419 qvis dvr Deserialization of Untrusted Data HIGH N/A N/A cvelistv5 2026-02-01
cve-2025-10211 chancms chancms Server-Side Request Forgery LOW 2.1 N/A cvelistv5 2026-01-31
cve-2018-11770 Apache Spark Improper Authentication HIGH N/A 66.07% cvelistv5 2026-01-31
cve-2025-21756 Linux Kernel Use After Free HIGH N/A N/A cvelistv5 2026-01-30
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-01-29
cve-2025-61155 Uncontrolled Resource Consumption CRITICAL N/A N/A cvelistv5 2026-01-29
cve-2022-30777 parallels h-sphere Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-01-29
cve-2022-2290 triliumnotes trilium Improper Neutralization of Input During Web Page Generation HIGH N/A N/A cvelistv5 2026-01-29
cve-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL N/A N/A cvelistv5 2026-01-28
cve-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability HIGH 8.6 N/A cvelistv5 2026-01-28
cve-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A N/A cvelistv5 2026-01-27
cve-2025-44846 TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command HIGH N/A N/A cvelistv5 2026-01-27
cve-2023-2806 Weaver e-cology Improper Restriction of XML External Entity Reference MEDIUM 5.5 N/A cvelistv5 2026-01-27
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2023-32117 softlabbd integrate_google_drive Missing Authorization HIGH N/A N/A cvelistv5 2026-01-26
cve-2022-40619 NETGEAR Routers FunJSQ Vulnerability HIGH N/A N/A cvelistv5 2026-01-26
cve-2020-16040 Google Chrome Improper Input Validation HIGH N/A 99.59% cvelistv5 2026-01-26
cve-2018-14634 Linux Kernel Integer Overflow Vulnerability HIGH N/A 14.69% cvelistv5 2026-01-26
cve-2016-15057 Apache continuum Improper Neutralization of Special Elements used in a Command HIGH N/A 3.89% cvelistv5 2026-01-26
cve-2023-40748 phpjabbers food_delivery_script Improper Neutralization of Special Elements used in an SQL Command HIGH N/A N/A cvelistv5 2026-01-25
cve-2021-47795 Improper Limitation of a Pathname to a Restricted Directory HIGH N/A N/A cvelistv5 2026-01-25
cve-2025-7081 belkin f9k1122_firmware Improper Neutralization of Special Elements used in a Command HIGH N/A N/A cvelistv5 2026-01-23
cve-2025-5571 D-Link dcs-932l_firmware Improper Neutralization of Special Elements used in a Command HIGH N/A N/A cvelistv5 2026-01-23