1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 3 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2026-48908JoomShaper / SP Page BuilderJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vu…2026-07-07
88.5%
CVE-2026-55255Langflow / LangflowLangflow Authorization Bypass Through User-Controlled Key Vulnerability2026-07-07
0.9%
CVE-2026-56290Joomlack / Page BuilderJoomlack Page Builder Improper Access Control Vulnerability2026-07-07
30.9%
CVE-2026-45659Microsoft / SharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data Vulnerability2026-07-01
2.7%
CVE-2026-48558SimpleHelp / SimpleHelpSimpleHelp Authentication Bypass Vulnerability2026-06-29
5.7%
CVE-2026-12569PTC / Windchill and FlexPLMPTC Windchill and FlexPLM Improper Input Validation Vulnerability2026-06-25
46.0%
CVE-2026-20230Cisco / Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulne…2026-06-25
88.2%
CVE-2025-67038Lantronix / EDS5000Lantronix EDS5000 Code Injection Vulnerability2026-06-23
19.3%
CVE-2026-34908Ubiquiti / UniFi OSUbiquiti UniFi OS Improper Access Control Vulnerability2026-06-23
15.2%
CVE-2026-34909Ubiquiti / UniFi OSUbiquiti UniFi OS Path Traversal Vulnerability2026-06-23
1.8%
CVE-2026-34910Ubiquiti / UniFi OSUbiquiti UniFi OS Improper Input Validation Vulnerability2026-06-23
45.8%
CVE-2026-20253Splunk / EnterpriseSplunk Enterprise Missing Authentication for Critical Function Vulnerability2026-06-18
96.9%
CVE-2026-48907Widget Factory / Joomla Content Editor Widget Factory Joomla Content Editor Improper Access Control Vulnerability2026-06-16
16.2%
CVE-2026-20262Cisco / Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability2026-06-15
28.2%
CVE-2026-54420LiteSpeed / cPanel PluginLiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability2026-06-15
0.8%
CVE-2026-35273Oracle / PeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical …2026-06-12
9.4%
CVE-2026-10520Ivanti / SentryIvanti Sentry OS Command Injection Vulnerability2026-06-11
99.9%
CVE-2026-11645Google / Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability2026-06-09
2.4%
CVE-2026-20245Cisco / Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnera…2026-06-09
25.3%
CVE-2026-7473Arista / Extensible Operating SystemArista Extensible Operating System Incomplete Comparison with Missing Factors…2026-06-09
0.6%
CVE-2026-42271BerriAI / LiteLLMBerriAI LiteLLM Command Injection Vulnerability2026-06-08
92.6%
CVE-2026-50751Check Point / Security GatewayCheck Point Security Gateway Improper Authentication Vulnerability2026-06-08
6.4%
CVE-2026-28318SolarWinds / Serv-USolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability2026-06-05
1.9%
CVE-2026-45247Mirasvit / Mirasvit Full Page Cache WarmerMirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability2026-06-03
2.1%
CVE-2022-0492Linux / KernelLinux Kernel Improper Authentication Vulnerability2026-06-02
5.5%
CVE-2025-48595Android / FrameworkAndroid Framework Integer Overflow Vulnerability2026-06-02
1.7%
CVE-2024-21182Oracle / WebLogic ServerOracle WebLogic Server Unspecified Vulnerability2026-06-01
74.2%
CVE-2026-0257Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability2026-05-29
96.4%
CVE-2026-45321TanStack / TanStackTanStack Unspecified Vulnerability2026-05-27
1.1%
CVE-2026-48027Nx / Nx ConsoleNx Console Embedded Malicious Code Vulnerability2026-05-27
1.3%
CVE-2026-8398Daemon / Daemon Tools LiteDaemon Tools Lite Embedded Malicious Code Vulnerability2026-05-27
1.0%
CVE-2026-48172LiteSpeed / cPanel PluginLiteSpeed cPanel Plugin Privilege Escalation Vulnerability2026-05-26
1.0%
CVE-2026-9082Drupal / CoreDrupal Core SQL Injection Vulnerability2026-05-22
15.7%
CVE-2025-34291Langflow / LangflowLangflow Origin Validation Error Vulnerability2026-05-21
92.8%
CVE-2026-34926Trend Micro / Apex OneTrend Micro Apex One (On-Premise) Directory Traversal Vulnerability2026-05-21
0.5%
CVE-2008-4250Microsoft / WindowsMicrosoft Windows Buffer Overflow Vulnerability2026-05-20
98.8%
CVE-2009-1537Microsoft / DirectXMicrosoft DirectX NULL Byte Overwrite Vulnerability2026-05-20
51.2%
CVE-2009-3459Adobe / Acrobat and ReaderAdobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability2026-05-20
86.6%
CVE-2010-0249Microsoft / Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability2026-05-20
91.9%
CVE-2010-0806Microsoft / Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability2026-05-20
82.2%
CVE-2026-41091Microsoft / DefenderMicrosoft Defender Link Following Vulnerability2026-05-20
0.4%
CVE-2026-45498Microsoft / DefenderMicrosoft Defender Denial of Service Vulnerability2026-05-20
1.3%
CVE-2026-42897Microsoft / MicrosoftMicrosoft Exchange Server Cross-Site Scripting Vulnerability2026-05-15
0.5%
CVE-2026-20182Cisco / Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability2026-05-14
91.5%
CVE-2026-42208BerriAI / LiteLLMBerriAI LiteLLM SQL Injection Vulnerability2026-05-08
5.8%
CVE-2026-6973Ivanti / Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability2026-05-07
2.5%
CVE-2026-0300Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Out-of-bounds Write Vulnerability2026-05-06
31.7%
CVE-2026-31431Linux / KernelLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability2026-05-01
3.4%
CVE-2026-41940WebPros / cPanel & WHM and WP2 (WordPress Squared)WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for C…2026-04-30
98.5%
CVE-2024-1708ConnectWise / ScreenConnectConnectWise ScreenConnect Path Traversal Vulnerability2026-04-28
95.4%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.