CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
162 CVEs
EPSSCoverage
9.2CVSS 4.0
CVE-2025-2492
ASUS Router vulnerability
ASUS · Router
EPSS
1.1%
1 story
4 months ago
9.8CVSS 3.1
CVE-2026-11405
Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface
Tenda · firmware
EPSS
0.77%
1 story
4 months ago
9.9CVSS 4.0
CVE-2026-1731
Exploited Ransomware
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
EPSS
94%
1 story
4 months ago
9.8CVSS 3.1
CVE-2024-12356
Exploited
Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
EPSS
87%
1 story
4 months ago
9.2CVSS 4.0
CVE-2026-40138
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.46%
1 story
4 months ago
9.2CVSS 4.0
CVE-2026-40139
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.75%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48282
Exploited
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion
EPSS
42%
2 stories
4 months ago
9.4CVSS 3.1
CVE-2026-40702
EVoke Systems EVoke CSMS Missing Authentication for Critical Function
EVoke · CSMS
EPSS
0.65%
1 story
4 months ago
9.8CVSS 3.1
CVE-2026-28701
Daktronics Controller Firmware Path Traversal
Daktronics · VFC-DMP-5000
EPSS
0.68%
1 story
4 months ago
9.3CVSS 4.0
CVE-2026-12818
DVP-12SE Exposure of Sensitive Information Vulnerability
Delta Electronics · DVP-12SE
EPSS
0.43%
1 story
4 months ago
9.3CVSS 4.0
CVE-2026-12819
DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability
Delta Electronics · DVP-12SE
EPSS
0.54%
1 story
4 months ago
9.3CVSS 4.0
CVE-2026-50548
Cursor Desktop sandbox escape via agent-controlled working directory
Cursor
EPSS
1.0%
2 stories
4 months ago
9.3CVSS 4.0
CVE-2026-50549
Cursor Desktop sandbox escape via symlink and failed path canonicalization
Cursor
EPSS
1.0%
2 stories
4 months ago
10.0CVSS 3.1
CVE-2025-20309
Cisco Unified Communications Manager Static SSH Credentials Vulnerability
Cisco · Unified Communications Manager
EPSS
1.2%
1 story
4 months ago
9.9CVSS 3.1
CVE-2024-20253
Cisco Unified Contact Center Enterprise vulnerability
Cisco · Unified Contact Center Enterprise
EPSS
2.4%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-13768
Gardyn IoT Hub Use of Hard-coded Credentials
Gardyn · Home Firmware
EPSS
0.65%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48277
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48281
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.4%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48286
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Adobe · Campaign Classic
EPSS
1.2%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48316
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.1%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48276
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48283
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
9.3CVSS 3.1
CVE-2026-48313
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion 2025
EPSS
3.0%
1 story
4 months ago
9.3CVSS 3.1
CVE-2026-48315
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.0%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48558
Exploited
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
SimpleHelp
EPSS
80%
2 stories
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.