KEV
Actively exploited
CISA Known Exploited
1,703 matches
CVE
Title
Severity
Score
Published
- CVE-2026-10520Ivanti Sentry — Ivanti Sentry OS Command Injection VulnerabilitycriticalKEV239.92026-06-09 16:16 UTC
- CVE-2026-48907Widget Factory Joomla Content Editor — Widget Factory Joomla Content Editor Improper Access Control VulnerabilitycriticalKEV239.72026-06-05 07:31 UTC
- CVE-2026-34911Ubiquiti UniFi OS Server: Mehrere SchwachstellencriticalKEV239.72026-06-24 08:31 UTC
- CVE-2026-7324Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffmediumKEV239.52026-07-17 07:32 UTC
- CVE-2026-60628Oracle JD Edwards: Mehrere SchwachstellenhighKEV239.22026-07-22 09:52 UTC
- CVE-2026-5598Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere SchwachstellenhighKEV239.02026-07-20 10:42 UTC
- CVE-2024-39573Apache HTTP Server: Mehrere SchwachstellenhighKEV239.02026-07-28 09:17 UTC
- CVE-2025-3248Langflow Unauth RCEnoneKEV239.02026-06-29 11:50 UTC
- CVE-2026-45736Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere SchwachstellenhighKEV239.02026-07-28 09:20 UTC
- CVE-2026-47337Linux kernel (Azure) vulnerabilitiesnoneKEV238.92026-06-02 18:00 UTC
- CVE-2026-9256Oracle Communications: Mehrere SchwachstellenhighKEV238.92026-07-28 08:23 UTC
- CVE-2026-8861IBM Security Verify Access: Mehrere SchwachstellenhighKEV238.92026-07-23 08:49 UTC
- CVE-2026-46333Linux kernel (Xilinx ZynqMP) vulnerabilitiesnoneKEV238.92026-06-11 21:57 UTC
- CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpointscriticalKEV238.92026-04-25 23:27 UTC
- CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilitycriticalKEV238.92026-06-11 04:16 UTC
- CVE-2026-20259Splunk Enterprise: Mehrere SchwachstellencriticalKEV238.92026-06-19 07:19 UTC
- CVE-2026-20253Splunk Enterprise — Splunk Enterprise Missing Authentication for Critical Function VulnerabilitycriticalKEV238.92026-06-10 17:16 UTC
- CVE-2026-42208LiteLLM has SQL Injection in Proxy API key verificationcriticalKEV238.82026-04-24 16:17 UTC
- CVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-004criticalKEV238.82026-05-20 18:08 UTC
- CVE-2026-33829Microsoft Windows: Mehrere SchwachstellencriticalKEV238.52026-05-27 08:52 UTC
- CVE-2026-46028Linux kernel (Raspberry Pi) vulnerabilitiesnoneKEV238.22026-06-01 12:31 UTC
- CVE-2026-34910Ubiquiti UniFi OS — Ubiquiti UniFi OS Improper Input Validation VulnerabilitycriticalKEV238.22026-05-22 00:43 UTC
- CVE-2026-48172LiteSpeed cPanel Plugin — LiteSpeed cPanel Plugin Privilege Escalation VulnerabilitycriticalKEV238.22026-05-21 00:38 UTC
- CVE-2026-63030WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code ExecutioncriticalKEV238.12026-07-17 20:17 UTC
- CVE-2026-31431Kernel Live Patch Security NoticehighKEV238.02026-04-22 08:15 UTC
- CVE-2026-43078Linux kernel (NVIDIA) vulnerabilitiesnoneKEV238.02026-05-19 22:20 UTC
- CVE-2026-20182Cisco Catalyst SD-WAN — Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilitycriticalKEV237.62026-05-14 00:00 UTC
- CVE-2026-58644Microsoft Office Produkte: Mehrere SchwachstellencriticalKEV237.42026-07-14 17:05 UTC
- CVE-2026-6100IBM QRadar SIEM: Mehrere SchwachstellenhighKEV237.02026-05-28 06:45 UTC
- CVE-2026-33017Unauthenticated Remote Code Execution in Langflow via Public Flow Build EndpointcriticalKEV236.42026-03-17 20:05 UTC
- CVE-2026-39987Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication BypasscriticalKEV236.42026-04-08 21:50 UTC
- CVE-2026-25089Fortinet FortiSandbox — Fortinet FortiSandbox OS Command Injection VulnerabilitycriticalKEV236.32026-06-09 14:27 UTC
- CVE-2025-9900Dell Avamar und NetWorker: Mehrere SchwachstellenhighKEV236.32026-06-29 10:06 UTC
- CVE-2025-7425Apple macOS Sequoia, Sonoma und Ventura: Mehrere SchwachstellenhighKEV235.82026-07-15 06:37 UTC
- CVE-2008-4250Microsoft Windows — Microsoft Windows Buffer Overflow VulnerabilitycriticalKEV235.82026-05-20 00:00 UTC
- CVE-2026-58640Microsoft Windows Produkte: Mehrere SchwachstellencriticalKEV235.82026-07-27 11:12 UTC
- CVE-2024-29857Oracle Fusion Middleware: Mehrere SchwachstellenhighKEV235.42026-06-02 07:22 UTC
- CVE-2026-0265Palo Alto Networks PAN-OS: Mehrere SchwachstellenhighKEV235.32026-06-01 05:52 UTC
- CVE-2020-1938BIT-tomcat-2020-1938noneKEV235.22026-05-18 08:56 UTC
- CVE-2023-27524Apache superset missing check for default SECRET_KEYnoneKEV234.42026-07-07 11:45 UTC
- CVE-2026-45247Mirasvit Mirasvit Full Page Cache Warmer — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilitycriticalKEV234.12026-05-26 14:15 UTC
- CVE-2023-5129libwebp: OOB write in BuildHuffmanTablenoneKEV234.02026-07-07 11:45 UTC
- CVE-2026-34197Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.highKEV233.92026-04-07 07:50 UTC
- CVE-2026-41940cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain una…criticalKEV233.62026-04-29 15:10 UTC
- CVE-2025-34291Langflow Langflow — Langflow Origin Validation Error VulnerabilitycriticalKEV233.32025-12-05 22:27 UTC
- CVE-2026-43057Debian linux: security updatenoneKEV233.12026-05-01 00:00 UTC
- CVE-2026-0257Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilitycriticalKEV233.02026-05-13 18:15 UTC
- CVE-2026-31788Debian linux: security updatenoneKEV232.92026-04-30 00:00 UTC
- CVE-2023-28205Red Hat Enterprise Linux: Mehrere SchwachstellenhighKEV232.72026-06-29 09:15 UTC
- CVE-2026-0300A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenti…criticalKEV232.02026-05-06 00:00 UTC