CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
128 CVEs
EPSSCoverage
7.8CVSS 3.1
CVE-2026-123039
Exploited
Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket
Check Point · Multiple Products
EPSS
1.3%
2 stories
10 hours ago
8.1CVSS 3.1
CVE-2026-119618
Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers
Apache · HTTP Server
EPSS
0.41%
1 story
2 days ago
7.0CVSS 3.1
CVE-2026-83844
Windows Paint Remote Code Execution Vulnerability
Microsoft · Paint
EPSS
0.38%
1 story
5 days ago
7.2CVSS 3.1
CVE-2026-96656
Exploited
Plex Media Server arbitrary file write
Plex · Media Server
EPSS
1.8%
2 stories
5 days ago
7.5CVSS 3.1
CVE-2026-19868
Exploited
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
SonicWall · SonicOS SSLVPN
EPSS
0.53%
1 story
6 days ago
8.8CVSS 3.1
CVE-2026-107441
Zyxel GS1900-24E firmware vulnerability
Zyxel · GS1900-24E firmware
EPSS
0.29%
1 story
1 week ago
8.6CVSS 4.0
CVE-2026-111560
Exploited
OS Command Injection in Barracuda Appliances
Barracuda Networks · Multiple Products
EPSS
9.1%
1 story
1 week ago
8.6CVSS 3.1
CVE-2026-76418
Exploited
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Cisco · Secure Firewall ASA Software and Cisco Secure FTD Software
EPSS
0.82%
2 stories
2 weeks ago
7.5CVSS 3.1
CVE-2026-58882
Google Android vulnerability
Google · Android
EPSS
0.35%
1 story
2 weeks ago
8.1CVSS 3.1
CVE-2026-108099
Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218
Drupal · Entity List
EPSS
0.41%
2 stories
2 weeks ago
8.1CVSS 3.1
CVE-2026-108097
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
Drupal · core
EPSS
0.57%
2 stories
2 weeks ago
8.6CVSS 3.1
CVE-2026-20349
Exploited
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
EPSS
1.0%
2 stories
2 weeks ago
7.5CVSS 3.1
CVE-2026-85114
Siemens .NET Client Library for SIMATIC S7 Webserver API vulnerability
Siemens · .NET Client Library for SIMATIC S7 Webserver API
EPSS
0.33%
1 story
3 weeks ago
8.6CVSS 4.0
CVE-2026-0322
Exploited
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
Palo Alto Networks · PAN-OS
EPSS
2.1%
1 story
4 weeks ago
7.3CVSS 3.1
CVE-2026-105133
Exploited
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
Ahsay · AhsayCBS
EPSS
84%
1 story
4 weeks ago
8.6CVSS 3.1
CVE-2026-104935
Exploited
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti · Connect Secure
EPSS
89%
2 stories
1 month ago
8.8CVSS 3.1
CVE-2026-96951
Exploited
Windows Shell Security Feature Bypass Vulnerability
Microsoft · Windows
EPSS
9.8%
1 story
1 month ago
7.8CVSS 3.1
CVE-2026-83549
Exploited
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall · SMA1000 Appliances
EPSS
9.9%
1 story
1 month ago
7.2CVSS 3.1
CVE-2026-15410
Exploited Ransomware
SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall · SMA1000 Appliances
EPSS
12%
2 stories
1 month ago
8.8CVSS 3.1
CVE-2025-49704
Exploited Ransomware
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · SharePoint
EPSS
>99.9%
1 story
1 month ago
8.8CVSS 3.1
CVE-2026-45659
Exploited Ransomware
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · SharePoint Server
EPSS
80%
4 stories
1 month ago
8.8CVSS 3.1
CVE-2026-86950
Exploited
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple · Multiple Products
EPSS
26%
1 story
1 month ago
8.8CVSS 4.0
CVE-2026-42608
Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.
Getgrav · grav
EPSS
0.60%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-65660
Exploited
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft · SharePoint
EPSS
9.9%
2 stories
2 months ago
8.1CVSS 3.1
CVE-2026-87902
Exploited
WordPress Core Remote File Inclusion Vulnerability
WordPress · Core
EPSS
96%
1 story
2 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.