Exploited in 2026, no free detection rule yet
Remotely exploitable bugs attackers are using that the open vedas-signatures project does not cover yet.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
Want to help? The rules live in the open vedas-signatures repository. Pick a CVE below, write a Nuclei template or Suricata rule, and open a pull request.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-30 | CVE-2026-118527 | Ivanti Connect Secure | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | None yet | No | ||
| 2026-10-29 | CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability | 0.27 | 0.98 | None yet | No |
| 2026-10-29 | CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability | 0.01 | 0.74 | None yet | No |
| 2026-10-28 | CVE-2026-41709 | Broadcom VMware ESX | Broadcom VMWare ESX Insufficient Logging Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-10-27 | CVE-2026-48356 | Adobe Commerce and Magento | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | 0.45 | 0.98 | None yet | No |
| 2026-10-27 | CVE-2026-111497 | Google Brotli | Google Brotli Unchecked Return Value Vulnerability | 0.83 | 0.98 | None yet | No |
| 2026-10-23 | CVE-2026-114625 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator SQL Injection Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-10-23 | CVE-2026-110447 | Collabora Collabora Online, Built-in CODE Server | Collabora Online, Built-in CODE Server OS Command Injection Vulnerability | 0.73 | 0.99 | None yet | No |
| 2026-10-20 | CVE-2026-96654 | Plex Media Server | Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-10-20 | CVE-2026-96652 | Plex Media Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-10-20 | CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | 0.03 | 0.51 | None yet | No |
| 2026-10-16 | CVE-2026-102764 | BeyondTrust Remote Support | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 0.19 | 0.55 | None yet | No |
| 2026-10-14 | CVE-2026-76519 | Cisco Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-10-14 | CVE-2026-105134 | Ahsay AhsayCBS | Ahsay AhsayCBS Command Injection Vulnerability | 0.82 | 0.98 | None yet | No |
| 2026-10-14 | CVE-2026-105133 | Ahsay AhsayCBS | Ahsay AhsayCBS Improper Authentication Vulnerability | 0.79 | 0.99 | None yet | No |
| 2026-10-14 | CVE-2026-0322 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | 0.02 | 0.51 | None yet | No |
| 2026-10-13 | CVE-2026-96951 | Microsoft Windows | Microsoft Windows Command Injection Vulnerability | 0.10 | 0.97 | None yet | No |
| 2026-10-13 | CVE-2026-104935 | Ivanti Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 0.87 | 0.99 | None yet | No |
| 2026-10-08 | CVE-2023-22894 | Strapi Strapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | 0.04 | 0.98 | None yet | No |
| 2026-10-08 | CVE-2021-3199 | ONLYOFFICE Docs | ONLYOFFICE Docs Server Path Traversal Vulnerability | 0.30 | 0.59 | None yet | No |
| 2026-10-08 | CVE-2015-5477 | ISC BIND | ISC BIND Data Processing Errors Vulnerability | 1.00 | 0.98 | None yet | No |
| 2026-10-04 | CVE-2026-88779 | Citrix NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.11 | 0.54 | None yet | No |
| 2026-10-02 | CVE-2026-102489 | Zammad GmbH Zammad | Zammad GmbH Zammad Session Fixation Vulnerability | 0.22 | 0.98 | None yet | No |
| 2026-10-01 | CVE-2026-104286 | Fortinet FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 0.05 | 0.75 | None yet | No |
| 2026-09-29 | CVE-2026-86950 | Apple Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | 0.26 | 0.97 | None yet | No |
| 2026-09-25 | CVE-2026-67279 | MikroTik RouterOS | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-09-24 | CVE-2026-5430 | WSO2 Multiple Products | WSO2 Multiple Products Path Traversal Vulnerability | 0.22 | 0.98 | None yet | No |
| 2026-09-22 | CVE-2026-94127 | F5 BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 0.27 | 0.98 | None yet | No |
| 2026-09-22 | CVE-2026-93952 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-09-22 | CVE-2026-93616 | Check Point Multiple Products | Check Point Multiple Products Path Traversal Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-09-22 | CVE-2026-85102 | Check Point Multiple Products | Check Point Multiple Products Improper Certificate Validation Vulnerability | 0.54 | 0.64 | None yet | No |
| 2026-09-21 | CVE-2026-7273 | Zyxel GS1900 Series Switches | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 0.03 | 0.51 | None yet | No |
| 2026-09-18 | CVE-2026-53266 | Linux Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 0.01 | 0.97 | None yet | No |
| 2026-09-18 | CVE-2025-39964 | Linux Kernel | Linux Kernel Race Condition Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-09-18 | CVE-2025-39682 | Linux Kernel | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 0.03 | 0.97 | None yet | No |
| 2026-09-16 | CVE-2026-76460 | Cisco Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 0.76 | 0.98 | None yet | No |
| 2026-09-16 | CVE-2026-58704 | Google Pixel | Google Pixel Improper Authorization Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-09-14 | CVE-2026-76461 | Cisco Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | 0.30 | 0.98 | None yet | No |
| 2026-09-11 | CVE-2026-84869 | ConnectWise ScreenConnect | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-09-11 | CVE-2026-42016 | JFrog Artifactory | JFrog Artifactory Incorrect Authorization Vulnerability | 0.09 | 0.53 | None yet | No |
| 2026-09-10 | CVE-2026-86060 | MikroTik RouterOS | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | 0.06 | 0.98 | None yet | No |
| 2026-09-10 | CVE-2026-67277 | MikroTik RouterOS | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | 0.02 | 0.51 | None yet | No |
| 2026-09-09 | CVE-2026-87491 | Google Chromium V8 | Google Chromium V8 Out of Bounds Write Vulnerability | 0.04 | 0.98 | None yet | No |
| 2026-09-09 | CVE-2025-25249 | Fortinet Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 0.04 | 0.52 | None yet | No |
| 2026-09-08 | CVE-2026-75650 | Adobe Commerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 0.04 | 0.97 | None yet | No |
| 2026-09-04 | CVE-2026-85046 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-09-02 | CVE-2026-83548 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 0.08 | 0.99 | None yet | No |
| 2026-08-31 | CVE-2026-82078 | PaperCut NG/MF | PaperCut NG/MF Unsafe Reflection Vulnerability | 0.63 | 0.98 | None yet | No |
| 2026-08-27 | CVE-2026-66384 | JFrog Artifactory | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-08-27 | CVE-2023-49105 | ownCloud ownCloud | ownCloud Improper Authentication Vulnerability | 0.43 | 0.99 | None yet | No |
| 2026-08-26 | CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.01 | 0.97 | None yet | No |
| 2026-08-26 | CVE-2019-1068 | Microsoft SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | 0.57 | 0.98 | None yet | No |
| 2026-08-24 | CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 0.73 | 0.97 | None yet | No |
| 2026-08-20 | CVE-2026-72530 | TrueConf Server | TrueConf Server Code Injection Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-08-20 | CVE-2026-72529 | TrueConf Server | TrueConf Server Missing Authentication for Critical Function Vulnerability | 0.01 | 0.98 | None yet | No |
| 2026-08-18 | CVE-2026-65400 | Apple macOS | Apple macOS Improper Authentication Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-08-18 | CVE-2026-55040 | Microsoft SharePoint | Microsoft SharePoint Weak Authentication Vulnerability | 0.70 | 0.98 | None yet | No |
| 2026-08-18 | CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 0.77 | 0.92 | None yet | No |
| 2026-08-11 | CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-08-04 | CVE-2026-34486 | Apache Tomcat | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 0.99 | 0.98 | None yet | No |
| 2026-08-04 | CVE-2026-18556 | N-able N-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.08 | 0.98 | None yet | No |
| 2026-07-29 | CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 0.35 | 0.98 | None yet | Yes |
| 2026-07-27 | CVE-2026-16812 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-07-27 | CVE-2025-68686 | Fortinet FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-07-22 | CVE-2026-50522 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.03 | 0.98 | None yet | No |
| 2026-07-22 | CVE-2026-16232 | Check Point SmartConsole | Check Point SmartConsole Improper Authentication Vulnerability | 0.04 | 0.99 | None yet | No |
| 2026-07-21 | CVE-2026-60137 | WordPress Core | WordPress Core SQL Injection Vulnerability | 0.05 | 0.98 | None yet | No |
| 2026-07-21 | CVE-2021-27137 | DD-WRT DD-WRT | DD-WRT Stack-Based Buffer Overflow Vulnerability | 0.04 | 0.84 | None yet | No |
| 2026-07-16 | CVE-2026-25089 | Fortinet FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 0.76 | 0.68 | None yet | No |
| 2026-07-15 | CVE-2026-46817 | Oracle E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | 0.12 | 0.54 | None yet | No |
| 2026-07-15 | CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 0.01 | 0.52 | None yet | No |
| 2026-07-14 | CVE-2026-56164 | Microsoft SharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-07-14 | CVE-2026-15410 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | 0.12 | 0.54 | None yet | Yes |
| 2026-07-14 | CVE-2026-15409 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 0.07 | 0.98 | None yet | Yes |
| 2026-07-13 | CVE-2008-4128 | Cisco IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | 0.34 | 0.98 | None yet | No |
| 2026-07-07 | CVE-2026-55255 | Langflow Langflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 0.01 | 0.97 | None yet | No |
| 2026-07-01 | CVE-2026-45659 | Microsoft SharePoint Server | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 0.80 | 0.81 | None yet | Yes |
| 2026-06-25 | CVE-2026-20230 | Cisco Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 0.89 | 0.72 | None yet | No |
| 2026-06-25 | CVE-2026-12569 | PTC Windchill and FlexPLM | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 0.46 | 0.97 | None yet | Yes |
| 2026-06-23 | CVE-2026-34909 | Ubiquiti UniFi OS | Ubiquiti UniFi OS Path Traversal Vulnerability | 0.68 | 0.66 | None yet | No |
| 2026-06-23 | CVE-2025-67038 | Lantronix EDS5000 | Lantronix EDS5000 Code Injection Vulnerability | 0.20 | 0.73 | None yet | No |
| 2026-06-15 | CVE-2026-54420 | LiteSpeed cPanel Plugin | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-06-15 | CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-06-09 | CVE-2026-7473 | Arista Extensible Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-06-09 | CVE-2026-11645 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-06-08 | CVE-2026-50751 | Check Point Security Gateway | Check Point Security Gateway Improper Authentication Vulnerability | 0.85 | 0.98 | None yet | Yes |
| 2026-06-05 | CVE-2026-28318 | SolarWinds Serv-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 0.44 | 0.62 | None yet | No |
| 2026-06-03 | CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 0.26 | 0.57 | None yet | No |
| 2026-06-01 | CVE-2024-21182 | Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 0.74 | 0.83 | None yet | No |
| 2026-05-29 | CVE-2026-0257 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 0.95 | 0.98 | None yet | Yes |
| 2026-05-27 | CVE-2026-8398 | Daemon Daemon Tools Lite | Daemon Tools Lite Embedded Malicious Code Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-05-27 | CVE-2026-48027 | Nx Nx Console | Nx Console Embedded Malicious Code Vulnerability | 0.02 | 0.52 | None yet | Yes |
| 2026-05-27 | CVE-2026-45321 | TanStack TanStack | TanStack Unspecified Vulnerability | 0.03 | 0.97 | None yet | Yes |
| 2026-05-26 | CVE-2026-48172 | LiteSpeed cPanel Plugin | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 0.18 | 0.55 | None yet | No |
| 2026-05-20 | CVE-2026-45498 | Microsoft Defender | Microsoft Defender Denial of Service Vulnerability | 0.63 | 0.66 | None yet | No |
| 2026-05-20 | CVE-2010-0806 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.82 | 0.99 | None yet | No |
| 2026-05-20 | CVE-2010-0249 | Microsoft Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-05-20 | CVE-2009-3459 | Adobe Acrobat and Reader | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 0.87 | 0.98 | None yet | No |
| 2026-05-20 | CVE-2009-1537 | Microsoft DirectX | Microsoft DirectX NULL Byte Overwrite Vulnerability | 0.51 | 0.95 | None yet | No |
| 2026-05-20 | CVE-2008-4250 | Microsoft Windows | Microsoft Windows Buffer Overflow Vulnerability | 0.99 | 0.98 | None yet | No |
| 2026-05-15 | CVE-2026-42897 | Microsoft Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 0.71 | 0.68 | None yet | No |
| 2026-05-14 | CVE-2026-20182 | Cisco Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 0.92 | 0.98 | None yet | No |
| 2026-05-07 | CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 0.34 | 0.59 | None yet | No |
| 2026-05-06 | CVE-2026-0300 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 0.42 | 0.98 | None yet | No |
| 2026-04-28 | CVE-2026-32202 | Microsoft Windows | Microsoft Windows Protection Mechanism Failure Vulnerability | 0.71 | 0.98 | None yet | No |
| 2026-04-23 | CVE-2026-39987 | Marimo Marimo | Marimo Remote Code Execution Vulnerability | 1.00 | 0.99 | None yet | No |
| 2026-04-20 | CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 0.31 | 0.58 | None yet | No |
| 2026-04-20 | CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 0.26 | 0.57 | None yet | No |
| 2026-04-20 | CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-04-20 | CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-04-20 | CVE-2025-2749 | Kentico Kentico Xperience | Kentico Xperience Path Traversal Vulnerability | 0.04 | 0.52 | None yet | No |
| 2026-04-14 | CVE-2026-32201 | Microsoft SharePoint Server | Microsoft SharePoint Server Improper Input Validation Vulnerability | 0.43 | 0.61 | None yet | No |
| 2026-04-14 | CVE-2009-0238 | Microsoft Office | Microsoft Office Remote Code Execution | 0.43 | 0.98 | None yet | No |
| 2026-04-13 | CVE-2023-36424 | Microsoft Windows | Microsoft Windows Out-of-Bounds Read Vulnerability | 0.12 | 0.98 | None yet | No |
| 2026-04-13 | CVE-2023-21529 | Microsoft Exchange Server | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | 0.59 | 0.98 | None yet | Yes |
| 2026-04-02 | CVE-2026-3502 | TrueConf Client | TrueConf Client Download of Code Without Integrity Check Vulnerability | 0.06 | 0.53 | None yet | No |
| 2026-04-01 | CVE-2026-5281 | Google Dawn | Google Dawn Use-After-Free Vulnerability | 0.14 | 0.98 | None yet | No |
| 2026-03-27 | CVE-2025-53521 | F5 BIG-IP | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-03-26 | CVE-2026-33634 | Aquasecurity Trivy | Aquasecurity Trivy Embedded Malicious Code Vulnerability | 0.60 | 0.97 | None yet | No |
| 2026-03-20 | CVE-2025-31277 | Apple Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-03-18 | CVE-2026-20963 | Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 0.29 | 0.58 | None yet | No |
| 2026-03-18 | CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 0.20 | 0.56 | None yet | No |
| 2026-03-13 | CVE-2026-3910 | Google Chromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 0.03 | 0.98 | None yet | No |
| 2026-03-13 | CVE-2026-3909 | Google Skia | Google Skia Out-of-Bounds Write Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-03-05 | CVE-2023-43000 | Apple Multiple Products | Apple Multiple products Use-After-Free Vulnerability | 0.04 | 0.53 | None yet | No |
| 2026-03-05 | CVE-2021-30952 | Apple Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 0.07 | 0.97 | None yet | No |
| 2026-03-05 | CVE-2021-22681 | Rockwell Multiple Products | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | 0.64 | 0.93 | None yet | No |
| 2026-03-03 | CVE-2026-22719 | Broadcom VMware Aria Operations | Broadcom VMware Aria Operations Command Injection Vulnerability | 0.18 | 0.56 | None yet | No |
| 2026-02-25 | CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 0.89 | 0.98 | None yet | No |
| 2026-02-24 | CVE-2026-25108 | Soliton Systems K.K FileZen | Soliton Systems K.K FileZen OS Command Injection Vulnerability | 0.05 | 0.97 | None yet | No |
| 2026-02-18 | CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 0.14 | 0.54 | None yet | No |
| 2026-02-17 | CVE-2026-2441 | Google Chromium | Google Chromium CSS Use-After-Free Vulnerability | 0.55 | 0.98 | None yet | No |
| 2026-02-17 | CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | 0.02 | 0.52 | None yet | No |
| 2026-02-17 | CVE-2008-0015 | Microsoft Windows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 0.77 | 0.98 | None yet | No |
| 2026-02-13 | CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 0.94 | 0.98 | None yet | Yes |
| 2026-02-12 | CVE-2025-15556 | Notepad++ Notepad++ | Notepad++ Download of Code Without Integrity Check Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-02-12 | CVE-2024-43468 | Microsoft Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | 0.81 | 0.83 | None yet | No |
| 2026-02-10 | CVE-2026-21513 | Microsoft Windows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 0.16 | 0.98 | None yet | No |
| 2026-02-10 | CVE-2026-21510 | Microsoft Windows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 0.61 | 0.66 | None yet | No |
| 2026-02-03 | CVE-2021-39935 | GitLab Community and Enterprise Editions | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | 0.36 | 0.98 | None yet | No |
| 2026-02-03 | CVE-2019-19006 | Sangoma FreePBX | Sangoma FreePBX Improper Authentication Vulnerability | 0.56 | 0.97 | None yet | No |
| 2026-01-27 | CVE-2026-24858 | Fortinet Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.87 | 0.97 | None yet | No |
| 2026-01-23 | CVE-2024-37079 | Broadcom VMware vCenter Server | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | 0.22 | 0.72 | None yet | No |
| 2026-01-22 | CVE-2025-54313 | Prettier eslint-config-prettier | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability | 0.05 | 0.98 | None yet | No |
| 2026-01-21 | CVE-2026-20045 | Cisco Unified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | 0.05 | 0.97 | None yet | No |
| 2026-01-07 | CVE-2009-0556 | Microsoft Office | Microsoft Office PowerPoint Code Injection Vulnerability | 0.67 | 0.98 | None yet | No |