[ Exploited · 1,754 CVEs ]
Exploited in the wild.
Every CVE on CISA's Known Exploited Vulnerabilities catalogue, most recently added first. If you run one of these products, patch it now.
KEV catalogue version 2026.10.21
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-68686 | 10 Feb 2026 | CVSS 5.9 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized ActorAn Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS… | Exploited |
| CVE-2026-50522 | 14 Jul 2026 | CVSS 9.8 | Microsoft SharePoint Deserialization of Untrusted DataDeserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | ExploitedFix |
| CVE-2026-16232 | 22 Jul 2026 | CVSS 9.8 | Check Point SmartConsole Improper AuthenticationAn authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an… | ExploitedFix |
| CVE-2026-63030 | 17 Jul 2026 | CVSS 9.8 | WordPress Core Interpretation ConflictWordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the… | Exploited |
| CVE-2026-60137 | 17 Jul 2026 | CVSS 5.9 | WordPress Core SQL InjectionWordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which… | Exploited |
| CVE-2026-0770 | 23 Jan 2026 | CVSS 9.8 | Langflow Inclusion of Functionality from Untrusted Control SphereLangflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote… | Exploited |
| CVE-2021-27137 | 16 Jul 2026 | CVSS 8.1 | DD-WRT Stack-Based Buffer OverflowAn issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an… | ExploitedFix |
| CVE-2026-58644 | 14 Jul 2026 | CVSS 9.8 | Microsoft SharePoint Deserialization of Untrusted DataDeserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | ExploitedFix |
| CVE-2026-39808 | 14 Apr 2026 | CVSS 9.8 | Fortinet FortiSandbox OS Command InjectionA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through… | Exploited |
| CVE-2026-25089 | 9 Jun 2026 | CVSS 9.8 | Fortinet FortiSandbox OS Command InjectionA improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through… | Exploited |
| CVE-2026-46817 | 28 May 2026 | CVSS 9.8 | Oracle E-Business Suite Improper Privilege ManagementVulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are… | Exploited |
| CVE-2023-4346 | 29 Aug 2023 | CVSS 7.5 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout MechanismKNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users… | Exploited |
| CVE-2026-56164 | 14 Jul 2026 | CVSS 9.8 | Microsoft SharePoint Server Missing Authentication for Critical FunctionMissing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | Exploited |
| CVE-2026-56155 | 14 Jul 2026 | CVSS 7.8 | Microsoft Active Directory Federation Services Insufficient Granularity of Access ControlInsufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges… | Exploited |
| CVE-2026-15410 | 14 Jul 2026 | CVSS 7.2 | SonicWall SMA1000 Appliances Code InjectionPost-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management… | Exploited |
| CVE-2026-15409 | 14 Jul 2026 | CVSS 10.0 | SonicWall SMA1000 Appliances Server-Side Request ForgeryA Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated… | Exploited |
| CVE-2008-4128 | 18 Sep 2008 | CVSS 8.1 | Cisco IOS Cross-Site Request ForgeryMultiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services… | Exploited |
| CVE-2026-56291 | 9 Jul 2026 | CVSS 9.8 | Balbooa Forms Unrestricted Upload of File with Dangerous TypeJoomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to… | Exploited |
| CVE-2026-48939 | 20 Jun 2026 | CVSS 9.8 | iCagenda Unrestricted Upload of File with Dangerous TypeA vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP… | Exploited |
| CVE-2026-56290 | 29 Jun 2026 | CVSS 9.8 | Joomlack Page Builder Improper Access ControlJoomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is… | ExploitedFix |
| CVE-2026-55255 | 23 Jun 2026 | CVSS 8.4 | Langflow Authorization Bypass Through User-Controlled KeyLangflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR)… | ExploitedFix |
| CVE-2026-48908 | 20 Jun 2026 | CVSS 9.8 | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous TypeA vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and… | Exploited |
| CVE-2026-48282 | 30 Jun 2026 | CVSS 10.0 | Adobe ColdFusion Path TraversalColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | Exploited |
| CVE-2026-45659 | 22 May 2026 | CVSS 8.8 | Microsoft SharePoint Server Deserialization of Untrusted DataDeserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Exploited |
| CVE-2026-48558 | 12 Jun 2026 | CVSS 10.0 | SimpleHelp Authentication BypassSimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow… | ExploitedFix |
| CVE-2026-20230 | 3 Jun 2026 | CVSS 8.6 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF)A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM… | Exploited |
| CVE-2026-12569 | 18 Jun 2026 | CVSS 9.8 | PTC Windchill and FlexPLM Improper Input ValidationA critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited… | Exploited |
| CVE-2026-34910 | 22 May 2026 | CVSS 10.0 | Ubiquiti UniFi OS Improper Input ValidationA malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command… | ExploitedFix |
| CVE-2026-34909 | 22 May 2026 | CVSS 10.0 | Ubiquiti UniFi OS Path TraversalA malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying… | ExploitedFix |
| CVE-2026-34908 | 22 May 2026 | CVSS 10.0 | Ubiquiti UniFi OS Improper Access ControlA malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized… | ExploitedFix |
| CVE-2025-67038 | 11 Mar 2026 | CVSS 9.8 | Lantronix EDS5000 Code InjectionAn issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails… | Exploited |
| CVE-2026-20253 | 10 Jun 2026 | CVSS 9.8 | Splunk Enterprise Missing Authentication for Critical FunctionIn Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files… | Exploited |
| CVE-2026-48907 | 5 Jun 2026 | CVSS 9.8 | Widget Factory Joomla Content Editor Improper Access ControlA vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in… | Exploited |
| CVE-2026-54420 | 14 Jun 2026 | CVSS 8.5 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) FollowingLiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web… | Exploited |
| CVE-2026-20262 | 15 Jun 2026 | CVSS 6.5 | Cisco Catalyst SD-WAN Manager Directory or Path TraversalA vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a… | Exploited |
| CVE-2026-35273 | 11 Jun 2026 | CVSS 9.8 | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical FunctionVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions… | Exploited |
| CVE-2026-10520 | 9 Jun 2026 | CVSS 10.0 | Ivanti Sentry OS Command InjectionAn OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to… | ExploitedFix |
| CVE-2026-7473 | 5 Jun 2026 | CVSS 5.8 | Arista Extensible Operating System Incomplete Comparison with Missing FactorsOn affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE… | Exploited |
| CVE-2026-20245 | 4 Jun 2026 | CVSS 7.8 | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of OutputA vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and… | Exploited |
| CVE-2026-11645 | 9 Jun 2026 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds Read and WriteOut of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via… | Exploited |
| CVE-2026-50751 | 8 Jun 2026 | CVSS 9.3 | Check Point Security Gateway Improper AuthenticationA logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote… | ExploitedFix |
| CVE-2026-42271 | 8 May 2026 | CVSS 8.8 | BerriAI LiteLLM Command InjectionLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints… | ExploitedFix |
| CVE-2026-28318 | 4 Jun 2026 | CVSS 7.5 | SolarWinds Serv-U Uncontrolled Resource ConsumptionSolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding… | Exploited |
| CVE-2026-45247 | 26 May 2026 | CVSS 9.8 | Mirasvit Full Page Cache Warmer Deserialization of Untrusted DataMirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated… | Exploited |
| CVE-2025-48595 | 1 Jun 2026 | CVSS 8.4 | Android Framework Integer OverflowIn multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege… | Exploited |
| CVE-2022-0492 | 3 Mar 2022 | CVSS 7.8 | Linux Kernel Improper AuthenticationA vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain… | ExploitedFix |
| CVE-2024-21182 | 16 Jul 2024 | CVSS 7.5 | Oracle WebLogic Server UnspecifiedVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are… | Exploited |
| CVE-2026-0257 | 13 May 2026 | CVSS 9.1 | Palo Alto Networks PAN-OS Authentication BypassAuthentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass… | Exploited |
| CVE-2026-8398 | 15 May 2026 | CVSS 9.8 | Daemon Tools Lite Embedded Malicious CodeA supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434)… | Exploited |
| CVE-2026-48027 | 27 May 2026 | CVSS 9.8 | Nx Console Embedded Malicious CodeNx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and… | Exploited |
| CVE-2026-45321 | 12 May 2026 | CVSS 9.6 | TanStack UnspecifiedOn 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry… | Exploited |
| CVE-2026-48172 | 21 May 2026 | CVSS 9.8 | LiteSpeed cPanel Plugin Privilege EscalationLiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best… | Exploited |
| CVE-2026-9082 | 20 May 2026 | CVSS 9.8 | Drupal Core SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This… | ExploitedFix |
| CVE-2026-34926 | 21 May 2026 | CVSS 6.7 | Trend Micro Apex One (On-Premise) Directory TraversalA directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the… | Exploited |
| CVE-2025-34291 | 5 Dec 2025 | CVSS 8.8 | Langflow Origin Validation ErrorLangflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly… | Exploited |
| CVE-2026-45498 | 20 May 2026 | CVSS 7.5 | Microsoft Defender Denial of ServiceMicrosoft Defender Denial of Service Vulnerability | Exploited |
| CVE-2026-41091 | 20 May 2026 | CVSS 7.8 | Microsoft Defender Link FollowingImproper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2010-0806 | 10 Mar 2010 | CVSS 8.8 | Microsoft Internet Explorer Use-After-FreeUse-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers… | ExploitedFix |
| CVE-2010-0249 | 15 Jan 2010 | CVSS 8.8 | Microsoft Internet Explorer Use-After-FreeUse-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2… | ExploitedFix |
| CVE-2009-3459 | 13 Oct 2009 | CVSS 8.8 | Adobe Acrobat and Reader Heap-Based Buffer OverflowHeap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute… | ExploitedFix |
| CVE-2009-1537 | 29 May 2009 | CVSS 8.8 | Microsoft DirectX NULL Byte OverwriteUnspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4… | ExploitedFix |
| CVE-2008-4250 | 23 Oct 2008 | CVSS 9.8 | Microsoft Windows Buffer OverflowThe Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows… | ExploitedFix |
| CVE-2026-42897 | 14 May 2026 | CVSS 6.1 | Microsoft Exchange Server Cross-Site ScriptingImproper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to… | Exploited |
| CVE-2026-20182 | 14 May 2026 | CVSS 10.0 | Cisco Catalyst SD-WAN Controller Authentication BypassMay 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed… | Exploited |
| CVE-2026-42208 | 8 May 2026 | CVSS 9.8 | BerriAI LiteLLM SQL InjectionLiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query… | ExploitedFix |
| CVE-2026-6973 | 7 May 2026 | CVSS 7.2 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input ValidationAn Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative… | Exploited |
| CVE-2026-0300 | 6 May 2026 | CVSS 9.8 | Palo Alto Networks PAN-OS Out-of-bounds WriteA buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an… | Exploited |
| CVE-2026-31431 | 22 Apr 2026 | CVSS 7.8 | Linux Kernel Incorrect Resource Transfer Between SpheresIn the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit… | ExploitedFix |
| CVE-2026-41940 | 29 Apr 2026 | CVSS 9.8 | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical FunctioncPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to… | Exploited |
| CVE-2026-32202 | 14 Apr 2026 | CVSS 4.3 | Microsoft Windows Protection Mechanism FailureProtection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Exploited |
| CVE-2024-1708 | 21 Feb 2024 | CVSS 8.4 | ConnectWise ScreenConnect Path TraversalConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote… | Exploited |
| CVE-2025-29635 | 25 Mar 2025 | CVSS 7.2 | D-Link DIR-823X Command InjectionA command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices… | Exploited |
| CVE-2024-7399 | 12 Aug 2024 | CVSS 9.8 | Samsung MagicINFO 9 Server Path TraversalImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to… | Exploited |
| CVE-2024-57728 | 15 Jan 2025 | CVSS 7.2 | SimpleHelp Path TraversalSimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted… | Exploited |
| CVE-2024-57726 | 15 Jan 2025 | CVSS 9.9 | SimpleHelp Missing AuthorizationSimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive… | Exploited |
| CVE-2026-39987 | 9 Apr 2026 | CVSS 9.8 | Marimo Remote Code Executionmarimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks… | ExploitedFix |
| CVE-2026-33825 | 14 Apr 2026 | CVSS 7.8 | Microsoft Defender Insufficient Granularity of Access ControlInsufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. | Exploited |
| CVE-2026-20133 | 25 Feb 2026 | CVSS 7.5 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized ActorA vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected… | Exploited |
| CVE-2026-20128 | 25 Feb 2026 | CVSS 7.5 | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable FormatA vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain… | Exploited |
| CVE-2026-20122 | 25 Feb 2026 | CVSS 5.4 | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIsA vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local… | Exploited |
| CVE-2025-48700 | 23 Jun 2025 | CVSS 6.1 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site ScriptingAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra… | Exploited |
| CVE-2025-32975 | 24 Jun 2025 | CVSS 10.0 | Quest KACE Systems Management Appliance (SMA) Improper AuthenticationQuest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch… | Exploited |
| CVE-2025-2749 | 24 Mar 2025 | CVSS 7.2 | Kentico Xperience Path TraversalAn authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative… | ExploitedFix |
| CVE-2024-27199 | 4 Mar 2024 | CVSS 7.3 | JetBrains TeamCity Relative Path TraversalIn JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible | Exploited |
| CVE-2023-27351 | 20 Apr 2023 | CVSS 7.5 | PaperCut NG/MF Improper AuthenticationThis vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is… | Exploited |
| CVE-2026-34197 | 7 Apr 2026 | CVSS 8.8 | Apache ActiveMQ Improper Input ValidationImproper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache… | Exploited |
| CVE-2026-32201 | 14 Apr 2026 | CVSS 6.5 | Microsoft SharePoint Server Improper Input ValidationImproper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | Exploited |
| CVE-2009-0238 | 25 Feb 2009 | CVSS 8.8 | Microsoft Office Remote Code ExecutionMicrosoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel… | Exploited |
| CVE-2026-34621 | 11 Apr 2026 | CVSS 8.6 | Adobe Acrobat and Reader Prototype PollutionAcrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes… | Exploited |
| CVE-2026-21643 | 6 Feb 2026 | CVSS 9.8 | Fortinet FortiClient EMS SQL InjectionAn improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an… | Exploited |
| CVE-2025-60710 | 11 Nov 2025 | CVSS 7.8 | Microsoft Windows Link FollowingImproper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges… | Exploited |
| CVE-2023-36424 | 14 Nov 2023 | CVSS 7.8 | Microsoft Windows Out-of-Bounds ReadWindows Common Log File System Driver Elevation of Privilege Vulnerability | ExploitedFix |
| CVE-2023-21529 | 14 Feb 2023 | CVSS 8.8 | Microsoft Exchange Server Deserialization of Untrusted DataMicrosoft Exchange Server Remote Code Execution Vulnerability | ExploitedFix |
| CVE-2020-9715 | 19 Aug 2020 | CVSS 7.8 | Adobe Acrobat Use-After-FreeAdobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an… | ExploitedFix |
| CVE-2012-1854 | 10 Jul 2012 | CVSS 7.8 | Microsoft Visual Basic for Applications Insecure Library LoadingUntrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for… | Exploited |
| CVE-2026-1340 | 29 Jan 2026 | CVSS 9.8 | Ivanti Endpoint Manager Mobile (EPMM) Code InjectionA code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. | Exploited |
| CVE-2026-35616 | 4 Apr 2026 | CVSS 9.8 | Fortinet FortiClient EMS Improper Access ControlA improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized… | ExploitedFix |
| CVE-2026-3502 | 30 Mar 2026 | CVSS 7.8 | TrueConf Client Download of Code Without Integrity CheckTrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update… | Exploited |
| CVE-2026-5281 | 1 Apr 2026 | CVSS 8.8 | Google Dawn Use-After-FreeUse after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute… | Exploited |
| CVE-2026-3055 | 23 Mar 2026 | CVSS 9.8 | Citrix NetScaler Out-of-Bounds ReadInsufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread | Exploited |
Page 2 of 18