Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2012-20002 | CVE-2012-20002 | HIGH | 8.7 | 0.53% | cvelistv5 | |
| cve-2026-99999 | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing ... | CRITICAL | 9.3 | 0.79% | cvelistv5 | 2026-10-19 |
| cve-2026-94177 | CVE-2026-94177 | HIGH | 8.5 | 0.25% | cvelistv5 | |
| cve-2026-57727 | CVE-2026-57727 | HIGH | 7.5 | 0.39% | cvelistv5 | |
| cve-2026-112247 | CVE-2026-112247 | MEDIUM | 5.3 | 0.33% | cvelistv5 | |
| cve-2026-110936 | CVE-2026-110936 | HIGH | 8.4 | 0.97% | cvelistv5 | |
| cve-2026-96656 | CVE-2026-96656 | HIGH | 8.6 | 1.79% | cvelistv5 | |
| cve-2026-96655 | CVE-2026-96655 | MEDIUM | 5.3 | 1.64% | cvelistv5 | |
| cve-2026-96654 | CVE-2026-96654 | MEDIUM | 6.9 | 1.95% | cvelistv5 | |
| cve-2026-96652 | CVE-2026-96652 | MEDIUM | 5.3 | 1.82% | cvelistv5 | |
| cve-2026-33309 | Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory | HIGH | N/A | 13.47% | cvelistv5 | 2026-10-18 |
| cve-2020-10549 | CVE-2020-10549 | HIGH | N/A | 32.12% | cvelistv5 | |
| cve-2026-25243 | CVE-2026-25243 | HIGH | N/A | 4.03% | cvelistv5 | |
| cve-2026-97668 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persist... | CRITICAL | 9.8 | 0.45% | cvelistv5 | 2026-10-15 |
| cve-2026-94169 | CVE-2026-94169 | CRITICAL | 10.0 | 4.42% | cvelistv5 | |
| cve-2026-111357 | CVE-2026-111357 | HIGH | 7.0 | 0.53% | cvelistv5 | |
| cve-2026-110372 | CVE-2026-110372 | CRITICAL | 9.8 | 1.36% | cvelistv5 | |
| cve-2026-109515 | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc | CRITICAL | 9.8 | 0.44% | cvelistv5 | 2026-10-16 |
| cve-2026-104736 | The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 vi... | CRITICAL | 9.8 | 2.52% | cvelistv5 | 2026-10-19 |
| cve-2015-7297 | Joomla! Joomla! Improper Neutralization of Special Elements used in an SQL Command | HIGH | N/A | 99.97% | cvelistv5 | 2026-10-16 |
| cve-2026-92438 | ninjaforms ninja_forms Improper Neutralization of Input During Web Page Generation | HIGH | N/A | 0.39% | cvelistv5 | 2026-10-15 |
| cve-2026-89079 | The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to,... | CRITICAL | 9.8 | 1.63% | cvelistv5 | 2026-10-16 |
| cve-2026-74920 | The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflectin... | HIGH | 7.1 | 0.14% | cvelistv5 | 2026-10-15 |
| cve-2026-59774 | CVE-2026-59774 | CRITICAL | 9.8 | 28.31% | cvelistv5 | |
| cve-2026-39781 | CVE-2026-39781 | HIGH | 7.1 | 0.18% | cvelistv5 | |
| cve-2026-15382 | External Control of File Name or Path | HIGH | N/A | 0.37% | cvelistv5 | 2026-10-15 |
| cve-2026-103895 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Byp... | HIGH | 8.1 | 0.43% | cvelistv5 | 2026-10-16 |
| cve-2026-102764 | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | CRITICAL | 9.3 | 18.95% | cvelistv5 | 2026-10-16 |
| cve-2026-76519 | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | CRITICAL | 9.8 | 2.15% | cvelistv5 | 2026-10-14 |
| cve-2026-39949 | CVE-2026-39949 | HIGH | N/A | N/A | cvelistv5 |