CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
162 CVEs
EPSSCoverage
9.3CVSS 3.1
CVE-2026-50751
Exploited Ransomware
User Authentication Bypass in VPN Remote Access and Mobile Access
Check Point · Security Gateway
EPSS
85%
3 stories
2 months ago
9.0CVSS 3.1
CVE-2026-27540
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability
Rymera Web Co Pty · Woocommerce Wholesale Lead Capture
EPSS
2.7%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-85706
Exploited
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab · Community Edition and Enterprise Edition
EPSS
97%
2 stories
2 months ago
9.8CVSS 3.1
CVE-2026-51990
An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498)…
EPSS
0.93%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-20079
Exploited
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
EPSS
89%
3 stories
2 months ago
9.9CVSS 3.1
CVE-2026-84869
Exploited
ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
ConnectWise · ScreenConnect
EPSS
1.2%
1 story
2 months ago
9.9CVSS 3.1
CVE-2026-87719
Deserialization of Untrusted Data in GitLab
GitLab
EPSS
0.57%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-76581
WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion
Wpmudev · WPMU DEV Dashboard
EPSS
0.43%
1 story
3 months ago
10.0CVSS 3.1
CVE-2026-82222
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
Liquid Web / StellarWP · GiveWP
EPSS
2.3%
1 story
3 months ago
9.8CVSS 3.0
CVE-2023-27350
Exploited Ransomware
PaperCut MF/NG Improper Access Control Vulnerability
PaperCut · MF/NG
EPSS
>99.9%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-18431
Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write
Themefusion · Avada (Fusion) Builder
EPSS
0.90%
1 story
3 months ago
9.6CVSS 3.1
CVE-2026-79282
Google Chrome vulnerability
Google · Chrome
EPSS
0.48%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-15981
SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Cyberlord92 · SAML Single Sign On – SSO Login
EPSS
1.3%
1 story
3 months ago
10.0CVSS 3.1
CVE-2026-69836
Microsoft Entra ID Remote Code Execution Vulnerability
Microsoft · Entra
EPSS
1.8%
1 story
3 months ago
9.0CVSS 3.1
CVE-2026-32475
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Elementor · Pro
EPSS
2.0%
1 story
3 months ago
9.3CVSS 4.0
CVE-2026-19490
Exploited
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
Citrix · NetScaler
EPSS
33%
1 story
3 months ago
9.3CVSS 4.0
CVE-2026-12569
Exploited Ransomware
Remote Code Execution (RCE) vulnerability in Windchill PDMlink
PTC · Windchill and FlexPLM
EPSS
46%
2 stories
3 months ago
10.0CVSS 3.1
CVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
SAP · Commerce Cloud (Data Hub Adapter)
EPSS
0.86%
2 stories
3 months ago
9.8CVSS 3.1
CVE-2019-0344
Exploited
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
SAP · Commerce Cloud
EPSS
7.5%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-65400
Exploited
Apple macOS Improper Authentication Vulnerability
Apple · macOS
EPSS
18%
2 stories
3 months ago
9.6CVSS 3.1
CVE-2026-34263
Missing authentication check in SAP Commerce cloud configuration
SAP · Commerce cloud configuration
EPSS
0.61%
1 story
3 months ago
9.1CVSS 3.1
CVE-2026-22732
Under Some Conditions Spring Security HTTP Headers Are not Written
VMware · Spring Security
EPSS
0.50%
1 story
3 months ago
9.1CVSS 3.1
CVE-2026-44761
Insecure Sample Credentials in SAP Commerce Cloud
SAP · Commerce Cloud
EPSS
0.50%
2 stories
3 months ago
9.8CVSS 3.1
CVE-2026-59310
Exploited Ransomware
vCenter directory-traversal vulnerability
Broadcom · VMware vCenter
EPSS
62%
1 story
3 months ago
9.6CVSS 3.1
CVE-2024-55591
Exploited Ransomware
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet · FortiOS and FortiProxy
EPSS
94%
1 story
3 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.