| CVE-2026-68820 Known exploited | High 7.0 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Assigned by microsoft | Aug 11, 2026 |
| CVE-2026-65660 Known exploited | High 8.8 | Microsoft SharePoint Server Remote Code Execution Vulnerability Assigned by microsoft | Aug 11, 2026 |
| CVE-2026-72898 Known exploited | Critical 10.0 | Metabase SQL injection via password reset endpoint Assigned by cisa-cg | Aug 10, 2026 |
| CVE-2026-65400 Known exploited | Critical 9.8 | An authentication issue was addressed with improved state management. Assigned by apple | Aug 6, 2026 |
| CVE-2026-5430 Known exploited | Critical 10.0 | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover Assigned by WSO2 | Aug 6, 2026 |
| CVE-2026-18577 Known exploited | High 8.2 | Incomplete patch leads to administrative account takeover Assigned by N-able | Aug 2, 2026 |
| CVE-2026-18556 Known exploited | High 8.2 | Unauthenticated administrative account takeover Assigned by N-able | Aug 1, 2026 |
| CVE-2026-59310 Known exploited | Critical 9.8 | vCenter directory-traversal vulnerability Assigned by vmware | Jul 30, 2026 |
| CVE-2026-20316 Known exploited | Medium 5.3 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability Assigned by cisco | Jul 29, 2026 |
| CVE-2026-42016 Known exploited | High 8.1 | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation Assigned by JFROG | Jul 27, 2026 |
| CVE-2026-63077 Known exploited | Critical 9.8 | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol Assigned by JetBrains | Jul 27, 2026 |
| CVE-2026-16812 Known exploited | Critical 10.0 | VeloCloud Orchestrator OS Command Injection Assigned by Arista | Jul 27, 2026 |
| CVE-2026-16232 Known exploited | Critical 9.3 | Authentication Bypass in the SmartConsole Login Process Using an Application Token Assigned by checkpoint | Jul 22, 2026 |
| CVE-2026-63030 Known exploited | Critical 9.8 | WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution Assigned by WPScan | Jul 17, 2026 |
| CVE-2026-60137 Known exploited | Medium 5.9 | WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query Assigned by WPScan | Jul 17, 2026 |
| CVE-2026-9198 Known exploited | Critical 9.8 | Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation Assigned by ibm | Jul 17, 2026 |
| CVE-2026-9586 Known exploited | Critical 9.3 | Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB Assigned by SRA | Jul 17, 2026 |
| CVE-2021-27137 Known exploited | High 8.1 | An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. Assigned by mitre | Jul 16, 2026 |
| CVE-2026-15410 Known exploited | High 7.2 | Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could po… Assigned by sonicwall | Jul 14, 2026 |
| CVE-2026-15409 Known exploited | Critical 10.0 | A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. Assigned by sonicwall | Jul 14, 2026 |
| CVE-2026-55040 Known exploited | Critical 9.1 | Microsoft SharePoint Server Security Feature Bypass Vulnerability Assigned by microsoft | Jul 14, 2026 |
| CVE-2026-58644 Known exploited | Critical 9.8 | Microsoft SharePoint Remote Code Execution Vulnerability Assigned by microsoft | Jul 14, 2026 |
| CVE-2026-50522 Known exploited | Critical 9.8 | Microsoft SharePoint Remote Code Execution Vulnerability Assigned by microsoft | Jul 14, 2026 |
| CVE-2026-56164 Known exploited | Medium 5.3 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2026 |
| CVE-2026-56155 Known exploited | High 7.8 | Active Directory Federation Services Elevation of Privilege Vulnerability Assigned by microsoft | Jul 14, 2026 |
| CVE-2026-56291 Known exploited | Critical 10.0 | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 Assigned by Joomla | Jul 9, 2026 |
| CVE-2026-59822 Known exploited | High 8.8 | LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback Assigned by GitHub_M | Jul 8, 2026 |
| CVE-2026-53362 Known exploited | High 7.8 | ipv6: account for fraggap on the paged allocation path Assigned by Linux | Jul 4, 2026 |
| CVE-2026-48282 Known exploited | Critical 10.0 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Assigned by adobe | Jun 30, 2026 |
| CVE-2026-8452 Known exploited | High 8.8 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service Assigned by NetScaler | Jun 30, 2026 |
| CVE-2026-56290 Known exploited | Critical 10.0 | Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 Assigned by Joomla | Jun 29, 2026 |
| CVE-2026-49869 Known exploited | Critical 10.0 | Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter` Assigned by GitHub_M | Jun 26, 2026 |
| CVE-2026-53266 Known exploited | High 8.8 | netfilter: bridge: make ebt_snat ARP rewrite writable Assigned by Linux | Jun 25, 2026 |
| CVE-2026-55255 Known exploited | High 8.4 | Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow Assigned by GitHub_M | Jun 23, 2026 |
| CVE-2026-48908 Known exploited | Critical 10.0 | Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 Assigned by Joomla | Jun 20, 2026 |
| CVE-2026-48939 Known exploited | Critical 10.0 | Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 Assigned by Joomla | Jun 20, 2026 |
| CVE-2026-12569 Known exploited | Critical 9.3 | Remote Code Execution (RCE) vulnerability in Windchill PDMlink Assigned by PTC | Jun 18, 2026 |
| CVE-2026-7273 Known exploited | High 8.8 | A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw an… Assigned by Zyxel | Jun 16, 2026 |
| CVE-2026-20262 Known exploited | Medium 6.5 | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability Assigned by cisco | Jun 15, 2026 |
| CVE-2026-54420 Known exploited | High 8.5 | LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running Clo… Assigned by mitre | Jun 14, 2026 |
| CVE-2026-48558 Known exploited | Critical 10.0 | SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification Assigned by VulnCheck | Jun 12, 2026 |
| CVE-2026-35273 Known exploited | Critical 9.8 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Assigned by oracle | Jun 11, 2026 |
| CVE-2026-20253 Known exploited | Critical 9.8 | Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise Assigned by cisco | Jun 10, 2026 |
| CVE-2026-25089 Known exploited | Critical 9.1 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox… Assigned by fortinet | Jun 9, 2026 |
| CVE-2026-10520 Known exploited | Critical 10.0 | An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution Assigned by ivanti | Jun 9, 2026 |
| CVE-2026-11645 Known exploited | High 8.8 | Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome | Jun 8, 2026 |
| CVE-2026-50751 Known exploited | Critical 9.3 | User Authentication Bypass in VPN Remote Access and Mobile Access Assigned by checkpoint | Jun 8, 2026 |
| CVE-2026-7473 Known exploited | Medium 5.8 | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass Assigned by Arista | Jun 5, 2026 |
| CVE-2026-48907 Known exploited | Critical 10.0 | Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 Assigned by Joomla | Jun 5, 2026 |
| CVE-2026-20245 Known exploited | High 7.8 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability Assigned by cisco | Jun 4, 2026 |
