1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 1 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2026-88779citrix / netscaler_application_delivery_controllerCVE-2026-887792026-10-04
0.5%
CVE-2026-102489Zammad GmbH / ZammadZammad GmbH Zammad Session Fixation Vulnerability2026-10-02
1.4%
CVE-2026-102490Zammad GmbH / ZammadZammad GmbH Zammad Improper Privilege Management Vulnerability2026-10-02
0.6%
CVE-2026-104286Fortinet / FortiMailFortinet FortiMail Path Traversal Vulnerability2026-10-01
2.2%
CVE-2026-76504Cisco / Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability2026-09-30
1.6%
CVE-2026-86950Apple / Multiple ProductsApple Multiple Products Out-of-Bounds Write Vulnerability2026-09-29
1.2%
CVE-2026-88771Citrix / NetScalerCitrix NetScaler Improper Input Validation Vulnerability2026-09-27
1.1%
CVE-2026-88772Citrix / NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Me…2026-09-27
1.3%
CVE-2026-65660Microsoft / SharePointMicrosoft SharePoint Code Injection Vulnerability2026-09-25
2.1%
CVE-2026-67279MikroTik / RouterOSMikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability2026-09-25
1.0%
CVE-2026-87902WordPress / CoreWordPress Core Remote File Inclusion Vulnerability2026-09-25
46.1%
CVE-2026-5430WSO2 / Multiple ProductsWSO2 Multiple Products Path Traversal Vulnerability 2026-09-24
0.6%
CVE-2026-71362Adobe / Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability 2026-09-24
87.5%
CVE-2026-85102Check Point / Multiple ProductsCheck Point Multiple Products Improper Certificate Validation Vulnerability2026-09-22
7.5%
CVE-2026-93616Check Point / Multiple ProductsCheck Point Multiple Products Path Traversal Vulnerability2026-09-22
19.7%
CVE-2026-93952Arista / VeloCloud OrchestratorArista VeloCloud Orchestrator Improper Input Validation Vulnerability2026-09-22
1.1%
CVE-2026-94127F5 / BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability2026-09-22
2.2%
CVE-2026-7273Zyxel / GS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability2026-09-21
2.5%
CVE-2025-39682Linux / KernelLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability2026-09-18
2.9%
CVE-2025-39964Linux / KernelLinux Kernel Race Condition Vulnerability2026-09-18
1.3%
CVE-2026-53266Linux / KernelLinux Kernel Out-of-Bounds Write Vulnerability2026-09-18
0.8%
CVE-2026-58704Google / PixelGoogle Pixel Improper Authorization Vulnerability2026-09-16
0.6%
CVE-2026-76460Cisco / Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability2026-09-16
14.0%
CVE-2026-87886Acronis / BackupAcronis Backup Incorrect Default Permissions Vulnerability2026-09-16
0.2%
CVE-2026-76461Cisco / Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability2026-09-14
28.3%
CVE-2026-42016JFrog / ArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability2026-09-11
8.6%
CVE-2026-42018JFrog / ArtifactoryJFrog Artifactory Improper Authentication Vulnerability2026-09-11
9.8%
CVE-2026-84869ConnectWise / ScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authoriza…2026-09-11
0.9%
CVE-2026-85706GitLab / Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability2026-09-11
93.0%
CVE-2026-67277MikroTik / RouterOSMikroTik RouterOS Missing Authentication for Critical Function Vulnerability2026-09-10
1.6%
CVE-2026-86060MikroTik / RouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command…2026-09-10
6.4%
CVE-2025-25249Fortinet / Multiple ProductsFortinet Multiple Products Heap-based Buffer Overflow Vulnerability2026-09-09
3.9%
CVE-2026-19490Citrix / NetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vul…2026-09-09
23.2%
CVE-2026-20079Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Pat…2026-09-09
88.2%
CVE-2026-87491Google / Chromium V8Google Chromium V8 Out of Bounds Write Vulnerability2026-09-09
3.1%
CVE-2026-75650Adobe / Commerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used i…2026-09-08
3.9%
CVE-2026-81963Microsoft / WindowsMicrosoft Windows Link Following Vulnerability2026-09-08
0.4%
CVE-2026-85880Microsoft / WindowsMicrosoft Windows Heap-Based Buffer Overflow Vulnerability2026-09-08
3.6%
CVE-2026-86218N-able / N-centralN-able N-central Static Code Injection Vulnerability2026-09-08
12.9%
CVE-2026-85046Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2026-09-04
48.9%
CVE-2026-48710Kludex / StarletteKludex Starlette HTTP Request/Response Smuggling Vulnerability2026-09-02
7.1%
CVE-2026-49869Kestra / Kestra OSSKestra OSS OS Command Injection Vulnerability2026-09-02
2.1%
CVE-2026-59822BerriAI / LiteLLMBerriAI LiteLLM Improper Authentication Vulnerability2026-09-02
0.8%
CVE-2026-82329JFrog / ArtifactoryJFrog Artifactory Improper Authentication Vulnerability2026-09-02
14.1%
CVE-2026-83548SonicWall / SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability2026-09-02
8.8%
CVE-2026-83549SonicWall / SMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection Vulnerability2026-09-02
10.8%
CVE-2026-9586Sangoma / SwitchvoxSangoma Switchvox SQL Injection Vulnerability2026-09-02
19.0%
CVE-2026-81578PaperCut / NG/MFPaperCut NG/MF Missing Authentication for Critical Function Vulnerability2026-08-31
84.6%
CVE-2026-82078PaperCut / NG/MFPaperCut NG/MF Unsafe Reflection Vulnerability2026-08-31
61.4%
CVE-2023-49105ownCloud / ownCloudownCloud Improper Authentication Vulnerability2026-08-27
42.9%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.