CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
162 CVEs
EPSSCoverage
9.6CVSS 3.1
CVE-2026-8037
Exploited
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress · LoadMaster
EPSS
100%
3 stories
3 months ago
9.8CVSS 3.1
CVE-2026-63077
Exploited Ransomware
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
JetBrains · TeamCity
EPSS
95%
1 story
3 months ago
9.9CVSS 3.1
CVE-2026-20303
Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities
Cisco · Catalyst SD-WAN Controller
EPSS
0.49%
1 story
3 months ago
9.9CVSS 3.1
CVE-2026-20304
Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities
Cisco · Catalyst SD-WAN Controller
EPSS
0.42%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-20272
Cisco IOS XE Software Security Hardening Release
Cisco · IOS XE Software
EPSS
0.57%
1 story
3 months ago
9.1CVSS 3.1
CVE-2026-20310
Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access
Cisco · Catalyst SD-WAN Controller
EPSS
0.59%
1 story
3 months ago
9.0CVSS 3.1
CVE-2026-20267
Cisco IOS XE Software Security Hardening Release
Cisco · IOS XE Software
EPSS
0.38%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-9198
Exploited
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
IBM · Langflow
EPSS
29%
1 story
3 months ago
9.5CVSS 4.0
CVE-2026-66066
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
Rails
EPSS
33%
1 story
3 months ago
10.0CVSS 3.1
CVE-2025-68613
Exploited
n8n Vulnerable to Remote Code Execution via Expression Injection
N8n
EPSS
99%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-21858
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
N8n
EPSS
78%
1 story
4 months ago
9.3CVSS 4.0
CVE-2026-3055
Exploited
Insufficient input validation leading to memory overread
Citrix · NetScaler
EPSS
91%
1 story
4 months ago
9.3CVSS 4.0
CVE-2026-33017
Exploited
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
Langflow
EPSS
96%
3 stories
4 months ago
10.0CVSS 3.1
CVE-2025-55182
Exploited Ransomware
Meta React Server Components Remote Code Execution Vulnerability
Meta · React Server Components
EPSS
100%
2 stories
4 months ago
9.8CVSS 3.1
CVE-2020-8515
Exploited
Multiple DrayTek Vigor Routers Web Management Page Vulnerability
DrayTek · Multiple Vigor Routers
EPSS
>99.9%
1 story
4 months ago
9.8CVSS 3.1
CVE-2025-28137
TOTOLINK A810r Firmware vulnerability
TOTOLINK · A810r Firmware
EPSS
34%
1 story
4 months ago
9.4CVSS 4.0
CVE-2025-34152
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
Shenzhen Aitemi E Commerce · M300 Wi-Fi Repeater
EPSS
84%
1 story
4 months ago
9.1CVSS 3.1
CVE-2026-62144
Management Authentication Bypass and Privilege Escalation
Check Point · Quantum Security Management
EPSS
1.0%
1 story
4 months ago
9.8CVSS 3.1
CVE-2026-63030
Exploited
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress · Core
EPSS
11%
2 stories
4 months ago
9.5CVSS 4.0
CVE-2026-6875
Sandbox Escape in ServiceNow AI Platform
ServiceNow · AI Platform
EPSS
1.4%
2 stories
4 months ago
9.8CVSS 3.1
CVE-2025-3248
Exploited Ransomware
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
Langflow
EPSS
>99.9%
4 stories
4 months ago
9.8CVSS 3.1
CVE-2026-53412
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Zoom · Workplace for Windows
EPSS
0.53%
1 story
4 months ago
9.9CVSS 3.1
CVE-2026-44747
Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
SAP · NetWeaver Application Server ABAP
EPSS
0.56%
1 story
4 months ago
9.1CVSS 3.1
CVE-2026-27690
HTTP Request Smuggling in SAP Approuter
SAP · Approuter
EPSS
0.68%
1 story
4 months ago
9.9CVSS 3.1
CVE-2026-57092
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
EPSS
0.91%
1 story
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.