CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
162 CVEs
EPSSCoverage
9.2CVSS 4.0
CVE-2026-109618
Exploited
RCE via OOM corruption
PHP Group · PHP
EPSS
>99.9%
4 stories
10 hours ago
9.2CVSS 4.0
CVE-2026-109619
Exploited
RCE via stale global state
PHP Group · PHP
EPSS
>99.9%
4 stories
10 hours ago
9.8CVSS 3.1
CVE-2026-85102
Exploited
Improper Certificate Validation in Quantum Security Gateway
Check Point · Multiple Products
EPSS
54%
3 stories
21 hours ago
9.8CVSS 3.1
CVE-2026-93616
Exploited
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
Check Point · Multiple Products
EPSS
92%
1 story
21 hours ago
9.8CVSS 3.1
CVE-2026-98432
ipv4: free inet_opt and ireq_opt after an RCU grace period
Linux
EPSS
0.78%
4 stories
5 days ago
10.0CVSS 3.1
CVE-2026-102255
SonicWall SMA1000 vulnerability
SonicWall · SMA1000
EPSS
0.98%
2 stories
6 days ago
9.1CVSS 3.1
CVE-2026-109593
SonicWall Global Management System (GMS) vulnerability
SonicWall · Global Management System (GMS)
EPSS
0.52%
1 story
1 week ago
9.8CVSS 3.1
CVE-2023-7102
Remote Code Execution (RCE) Vulnerability
Barracuda Networks · Barracuda ESG Appliance
EPSS
45%
1 story
1 week ago
9.4CVSS 3.1
CVE-2023-2868
Exploited
Remote Code injection in Barracuda Email Security Gateway
Barracuda Networks · Email Security Gateway (ESG) Appliance
EPSS
87%
1 story
1 week ago
9.3CVSS 4.0
CVE-2026-116606
Exploited
Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
Barracuda Networks · Barracuda Email Security Gateway (ESG)
EPSS
11%
1 story
1 week ago
10.0CVSS 3.1
CVE-2026-81648
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
EPSS
0.50%
1 story
2 weeks ago
10.0CVSS 3.1
CVE-2026-58115
Siemens SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) vulnerability
Siemens · SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)
EPSS
0.89%
1 story
2 weeks ago
9.8CVSS 3.1
CVE-2026-9082
Exploited
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Drupal · Core
EPSS
89%
1 story
2 weeks ago
10.0CVSS 3.1
CVE-2026-97229
Exploited
Integer Overflow or Wraparound in GitLab
GitLab · Community Edition and Enterprise Edition
EPSS
69%
1 story
2 weeks ago
10.0CVSS 3.1
CVE-2026-16812
Exploited
VeloCloud Orchestrator OS Command Injection
Arista · VeloCloud Orchestrator
EPSS
1.8%
2 stories
2 weeks ago
10.0CVSS 3.1
CVE-2026-20127
Exploited
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Cisco · Catalyst SD-WAN Controller and Manager
EPSS
88%
1 story
2 weeks ago
9.4CVSS 4.0
CVE-2025-8875
Exploited
Insecure Deserialization Vulnerability
N-able · N-Central
EPSS
2.3%
1 story
2 weeks ago
9.4CVSS 4.0
CVE-2025-8876
Exploited
Command Injection Vulnerability
N-able · N-Central
EPSS
4.1%
1 story
2 weeks ago
10.0CVSS 3.1
CVE-2026-103849
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Commerce
EPSS
1.2%
1 story
4 weeks ago
9.2CVSS 4.0
CVE-2026-110447
Exploited
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora · Online – Built-in CODE Server
EPSS
73%
1 story
4 weeks ago
10.0CVSS 3.1
CVE-2026-105134
Exploited
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
Ahsay · AhsayCBS
EPSS
82%
1 story
4 weeks ago
9.8CVSS 3.1
CVE-2026-76519
Exploited
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco · Secure Email Gateway
EPSS
6.2%
2 stories
4 weeks ago
9.8CVSS 3.1
CVE-2026-39919
Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter
Artifex Software · Ghostscript
EPSS
0.85%
1 story
1 month ago
10.0CVSS 3.1
CVE-2026-15409
Exploited Ransomware
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliances
EPSS
6.8%
2 stories
1 month ago
10.0CVSS 3.1
CVE-2026-83548
Exploited
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliances
EPSS
8.0%
1 story
1 month ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.