CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
337 CVEs
EPSSCoverage
9.2CVSS 4.0
CVE-2026-109618
Exploited
RCE via OOM corruption
PHP Group · PHP
EPSS
>99.9%
4 stories
6 hours ago
9.2CVSS 4.0
CVE-2026-109619
Exploited
RCE via stale global state
PHP Group · PHP
EPSS
>99.9%
4 stories
6 hours ago
7.8CVSS 3.1
CVE-2026-123039
Exploited
Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket
Check Point · Multiple Products
EPSS
1.3%
2 stories
6 hours ago
9.8CVSS 3.1
CVE-2026-85102
Exploited
Improper Certificate Validation in Quantum Security Gateway
Check Point · Multiple Products
EPSS
54%
3 stories
18 hours ago
9.8CVSS 3.1
CVE-2026-93616
Exploited
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
Check Point · Multiple Products
EPSS
92%
1 story
18 hours ago
8.1CVSS 3.1
CVE-2026-119618
Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers
Apache · HTTP Server
EPSS
0.41%
1 story
2 days ago
7.0CVSS 3.1
CVE-2026-83844
Windows Paint Remote Code Execution Vulnerability
Microsoft · Paint
EPSS
0.38%
1 story
5 days ago
9.8CVSS 3.1
CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period
Linux
EPSS
0.78%
4 stories
5 days ago
7.2CVSS 3.1
CVE-2026-96656
Exploited
Plex Media Server arbitrary file write
Plex · Media Server
EPSS
1.8%
2 stories
5 days ago
6.5CVSS 3.1
CVE-2026-96654
Exploited
Plex Media Server URL injection
Plex · Media Server
EPSS
1.9%
2 stories
5 days ago
4.3CVSS 3.1
CVE-2026-96652
Exploited
Plex Media Server SSRF
Plex · Media Server
EPSS
12%
2 stories
5 days ago
4.3CVSS 3.1
CVE-2026-96655
Exploited
Plex Media Server arbitrary-host SSRF
Plex · Media Server
EPSS
11%
2 stories
5 days ago
10.0CVSS 3.1
CVE-2026-102255
SonicWall SMA1000 vulnerability
SonicWall · SMA1000
EPSS
0.98%
2 stories
6 days ago
7.5CVSS 3.1
CVE-2026-19868
Exploited
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
SonicWall · SonicOS SSLVPN
EPSS
0.53%
1 story
6 days ago
8.8CVSS 3.1
CVE-2026-107441
Zyxel GS1900-24E firmware vulnerability
Zyxel · GS1900-24E firmware
EPSS
0.29%
1 story
1 week ago
9.1CVSS 3.1
CVE-2026-109593
SonicWall Global Management System (GMS) vulnerability
SonicWall · Global Management System (GMS)
EPSS
0.52%
1 story
1 week ago
6.8CVSS 3.1
CVE-2026-109594
SonicWall Global Management System (GMS) vulnerability
SonicWall · Global Management System (GMS)
EPSS
0.38%
1 story
1 week ago
9.8CVSS 3.1
CVE-2023-7102
Remote Code Execution (RCE) Vulnerability
Barracuda Networks · Barracuda ESG Appliance
EPSS
45%
1 story
1 week ago
9.4CVSS 3.1
CVE-2023-2868
Exploited
Remote Code injection in Barracuda Email Security Gateway
Barracuda Networks · Email Security Gateway (ESG) Appliance
EPSS
87%
1 story
1 week ago
9.3CVSS 4.0
CVE-2026-116606
Exploited
Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
Barracuda Networks · Barracuda Email Security Gateway (ESG)
EPSS
11%
1 story
1 week ago
8.6CVSS 4.0
CVE-2026-111560
Exploited
OS Command Injection in Barracuda Appliances
Barracuda Networks · Multiple Products
EPSS
9.1%
1 story
1 week ago
10.0CVSS 3.1
CVE-2026-81648
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
EPSS
0.50%
1 story
2 weeks ago
10.0CVSS 3.1
CVE-2026-58115
Siemens SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) vulnerability
Siemens · SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)
EPSS
0.89%
1 story
2 weeks ago
8.6CVSS 3.1
CVE-2026-76418
Exploited
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software
EPSS
0.82%
2 stories
2 weeks ago
7.5CVSS 3.1
CVE-2026-58882
Google Android vulnerability
Google · Android
EPSS
0.35%
1 story
2 weeks ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.