CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
162 CVEs
EPSSCoverage
9.8CVSS 3.1
CVE-2026-61500
Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key
Rejetto · hfs
EPSS
1.9%
1 story
1 month ago
10.0CVSS 3.1
CVE-2026-63688
Dell Container Storage Modules (CSM) vulnerability
Dell · Container Storage Modules (CSM)
EPSS
0.49%
1 story
1 month ago
9.8CVSS 3.1
CVE-2025-53770
Exploited Ransomware
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft · SharePoint
EPSS
>99.9%
1 story
1 month ago
9.8CVSS 3.1
CVE-2026-50522
Exploited
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · SharePoint
EPSS
3.0%
4 stories
1 month ago
9.8CVSS 3.1
CVE-2026-58644
Exploited
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · SharePoint
EPSS
16%
2 stories
1 month ago
9.1CVSS 3.1
CVE-2026-55040
Exploited
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft · SharePoint
EPSS
70%
2 stories
1 month ago
9.8CVSS 3.1
CVE-2026-76504
Exploited
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
Cisco · Catalyst SD-WAN Manager
EPSS
39%
1 story
1 month ago
9.5CVSS 4.0
CVE-2026-88771
Exploited
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
Citrix · NetScaler
EPSS
82%
1 story
1 month ago
9.5CVSS 4.0
CVE-2026-88772
Exploited
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
Citrix · NetScaler
EPSS
77%
1 story
1 month ago
9.8CVSS 3.1
CVE-2026-35273
Exploited Ransomware
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
Oracle · PeopleSoft Enterprise PeopleTools
EPSS
97%
5 stories
2 months ago
10.0CVSS 3.1
CVE-2026-5430
Exploited
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
WSO2 · Multiple Products
EPSS
22%
1 story
2 months ago
9.1CVSS 3.1
CVE-2026-71362
Exploited
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Commerce and Magento
EPSS
92%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-94127
Exploited
BIG-IP APM OAuth vulnerability
F5 · BIG-IP APM
EPSS
27%
1 story
2 months ago
9.8CVSS 3.1
CVE-2025-39682
Exploited
tls: fix handling of zero-length records on the rx_list
Linux · Kernel
EPSS
3.3%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-58138
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
Conductor
EPSS
9.1%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-76460
Exploited
Cisco Identity Services Engine Authentication Bypass Vulnerability
Cisco · Identity Services Engine
EPSS
76%
2 stories
2 months ago
10.0CVSS 3.1
CVE-2025-20337
Exploited
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
Cisco · Identity Services Engine
EPSS
74%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-76423
Cisco ISE API Authentication Bypass Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.58%
1 story
2 months ago
9.9CVSS 3.1
CVE-2026-20307
Cisco Identity Services Engine Remote Code Execution Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.98%
1 story
2 months ago
9.1CVSS 3.1
CVE-2026-20176
Cisco Identity Services Engine Remote Code Execution Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.80%
1 story
2 months ago
9.1CVSS 3.1
CVE-2026-20211
Cisco Identity Services Engine Remote Code Execution Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.85%
1 story
2 months ago
9.1CVSS 3.1
CVE-2026-20284
Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.53%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-91843
Stack overflow in login process to the Security Management and Log Servers
Check Point · Quantum Security Management
EPSS
0.52%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
Check Point · Quantum Security Gateway
EPSS
4.3%
2 stories
2 months ago
9.3CVSS 4.0
CVE-2026-16232
Exploited
Authentication Bypass in the SmartConsole Login Process Using an Application Token
Check Point · SmartConsole
EPSS
3.5%
2 stories
2 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.