| CVE-2026-28318 Known exploited | High 7.5 | SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability Assigned by SolarWinds | Jun 4, 2026 |
| CVE-2026-8037 Known exploited | Critical 9.6 | OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF Assigned by ProgressSoftware | Jun 4, 2026 |
| CVE-2026-20230 Known exploited | High 8.6 | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability Assigned by cisco | Jun 3, 2026 |
| CVE-2025-48595 Known exploited | High 8.4 | In multiple locations, there is a possible way to achieve code execution due to an integer overflow. Assigned by google_android | Jun 1, 2026 |
| CVE-2026-46817 Known exploited | Critical 9.8 | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Assigned by oracle | May 28, 2026 |
| CVE-2026-48027 Known exploited | Critical 9.3 | Compromised Nx Console version 18.95.0 Assigned by GitHub_M | May 27, 2026 |
| CVE-2026-48710 Known exploited | Medium 6.5 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks Assigned by GitHub_M | May 26, 2026 |
| CVE-2026-45247 Known exploited | Critical 9.8 | Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection Assigned by VulnCheck | May 26, 2026 |
| CVE-2026-45659 Known exploited | High 8.8 | Microsoft SharePoint Remote Code Execution Vulnerability Assigned by microsoft | May 22, 2026 |
| CVE-2026-34910 Known exploited | Critical 10.0 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. Assigned by hackerone | May 22, 2026 |
| CVE-2026-34908 Known exploited | Critical 10.0 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. Assigned by hackerone | May 22, 2026 |
| CVE-2026-34909 Known exploited | Critical 10.0 | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an und… Assigned by hackerone | May 22, 2026 |
| CVE-2026-34926 Known exploited | Medium 6.7 | A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents… Assigned by trendmicro | May 21, 2026 |
| CVE-2026-48172 Known exploited | Critical 10.0 | LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Assigned by mitre | May 21, 2026 |
| CVE-2026-9082 Known exploited | Critical 9.8 | Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 Assigned by drupal | May 20, 2026 |
| CVE-2026-41091 Known exploited | High 7.8 | Microsoft Defender Elevation of Privilege Vulnerability Assigned by microsoft | May 20, 2026 |
| CVE-2026-45498 Known exploited | Medium 4.0 | Microsoft Defender Denial of Service Vulnerability Assigned by microsoft | May 20, 2026 |
| CVE-2026-8398 Known exploited | Critical 9.8 | A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc b… Assigned by Kaspersky | May 15, 2026 |
| CVE-2026-42897 Known exploited | High 8.1 | Microsoft Exchange Server Spoofing Vulnerability Assigned by microsoft | May 14, 2026 |
| CVE-2026-20182 Known exploited | Critical 10.0 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Assigned by cisco | May 14, 2026 |
| CVE-2026-0257 Known exploited | High 7.8 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Assigned by palo_alto | May 13, 2026 |
| CVE-2026-45321 Known exploited | Critical 9.6 | Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys Assigned by GitHub_M | May 12, 2026 |
| CVE-2026-42208 Known exploited | Critical 9.3 | LiteLLM: SQL injection in Proxy API key verification Assigned by GitHub_M | May 8, 2026 |
| CVE-2026-42271 Known exploited | High 8.7 | LiteLLM: Authenticated command execution via MCP stdio test endpoints Assigned by GitHub_M | May 8, 2026 |
| CVE-2026-6973 Known exploited | High 7.2 | An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution. Assigned by ivanti | May 7, 2026 |
| CVE-2026-0300 Known exploited | Critical 9.3 | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal Assigned by palo_alto | May 6, 2026 |
| CVE-2026-41940 Known exploited | Critical 9.8 | WebPros cPanel and WHM Authentication Bypass via Login Flow Assigned by VulnCheck | Apr 29, 2026 |
| CVE-2026-31431 Known exploited | High 7.8 | crypto: algif_aead - Revert to operating out-of-place Assigned by Linux | Apr 22, 2026 |
| CVE-2026-33824 Known exploited | Critical 9.8 | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability Assigned by microsoft | Apr 14, 2026 |
| CVE-2026-32201 Known exploited | Medium 6.5 | Microsoft SharePoint Server Spoofing Vulnerability Assigned by microsoft | Apr 14, 2026 |
| CVE-2026-33825 Known exploited | High 7.8 | Microsoft Defender Elevation of Privilege Vulnerability Assigned by microsoft | Apr 14, 2026 |
| CVE-2026-32202 Known exploited | Medium 4.3 | Windows Shell Spoofing Vulnerability Assigned by microsoft | Apr 14, 2026 |
| CVE-2025-61624 Known exploited | Medium 5.4 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions… Assigned by fortinet | Apr 14, 2026 |
| CVE-2026-39808 Known exploited | Critical 9.1 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code… Assigned by fortinet | Apr 14, 2026 |
| CVE-2026-34621 Known exploited | High 8.6 | Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) Assigned by adobe | Apr 11, 2026 |
| CVE-2026-34486 Known exploited | High 7.5 | Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Assigned by apache | Apr 9, 2026 |
| CVE-2026-39987 Known exploited | Critical 9.3 | marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass Assigned by GitHub_M | Apr 9, 2026 |
| CVE-2026-34197 Known exploited | High 8.8 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans Assigned by apache | Apr 7, 2026 |
| CVE-2026-35616 Known exploited | Critical 9.1 | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. Assigned by fortinet | Apr 4, 2026 |
| CVE-2026-5281 Known exploited | High 8.8 | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. Assigned by Chrome | Apr 1, 2026 |
| CVE-2026-3502 Known exploited | High 7.8 | TrueConf Client Update Integrity Verification Bypass Assigned by checkpoint | Mar 30, 2026 |
| CVE-2026-33634 Known exploited | Critical 9.4 | Trivy ecosystem supply chain briefly compromised Assigned by GitHub_M | Mar 23, 2026 |
| CVE-2026-3055 Known exploited | Critical 9.3 | Insufficient input validation leading to memory overread Assigned by NetScaler | Mar 23, 2026 |
| CVE-2026-33017 Known exploited | Critical 9.3 | Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint Assigned by GitHub_M | Mar 20, 2026 |
| CVE-2026-3910 Known exploited | High 8.8 | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome | Mar 12, 2026 |
| CVE-2026-3909 Known exploited | High 8.8 | Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Assigned by Chrome | Mar 12, 2026 |
| CVE-2025-67038 Known exploited | Critical 9.8 | Lantronix EDS5000, G520, and X300 OS Command Injection Assigned by mitre | Mar 11, 2026 |
| CVE-2026-20131 Known exploited | Critical 10.0 | Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability Assigned by cisco | Mar 4, 2026 |
| CVE-2026-20079 Known exploited | Critical 10.0 | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability Assigned by cisco | Mar 4, 2026 |
| CVE-2026-21385 Known exploited | High 7.8 | Integer Overflow or Wraparound in Graphics Assigned by qualcomm | Mar 2, 2026 |
