CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
128 CVEs
EPSSCoverage
8.8CVSS 3.1
CVE-2026-5027
Langflow - Path Traversal Arbitrary File Write via upload_user_file
Langflow
EPSS
41%
1 story
4 months ago
8.4CVSS 3.1
CVE-2026-55255
Exploited
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
Langflow
EPSS
0.89%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-43284
xfrm: esp: avoid in-place decrypt on shared skb frags
Linux
EPSS
94%
3 stories
4 months ago
8.8CVSS 3.1
CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected role
Linux
EPSS
1.4%
2 stories
4 months ago
7.8CVSS 3.1
CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
Linux
EPSS
94%
2 stories
4 months ago
8.7CVSS 4.0
CVE-2026-40140
High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.65%
1 story
4 months ago
8.5CVSS 4.0
CVE-2026-40141
High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.53%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-43074
eventpoll: defer struct eventpoll free to RCU grace period
Linux
EPSS
0.48%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-46242
eventpoll: fix ep_remove struct eventpoll / struct file UAF
Linux
EPSS
4.6%
2 stories
4 months ago
8.6CVSS 3.1
CVE-2026-34621
Exploited
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Adobe · Acrobat and Reader
EPSS
7.3%
1 story
4 months ago
8.4CVSS 4.0
CVE-2026-12578
DTMSoft - Deserialization of Untrusted Data Vulnerability
Delta Electronics · DTMSoft
EPSS
0.38%
1 story
4 months ago
8.6CVSS 3.1
CVE-2021-29441
Authentication bypass
Alibaba · nacos
EPSS
83%
2 stories
4 months ago
8.8CVSS 3.1
CVE-2025-15467
Stack buffer overflow in CMS (Auth)EnvelopedData parsing
OpenSSL
EPSS
75%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-31431
Exploited
crypto: algif_aead - Revert to operating out-of-place
Linux · Kernel
EPSS
98%
1 story
4 months ago
7.5CVSS 3.1
CVE-2026-50176
EVoke Systems EVoke CSMS Improper Restriction of Excessive Authentication Attempts
EVoke · CSMS
EPSS
0.71%
1 story
4 months ago
8.7CVSS 4.0
CVE-2026-9716
Schneider Electric PowerLogic™ P7 vulnerability
Schneider Electric · PowerLogic™ P7
EPSS
0.46%
1 story
4 months ago
8.6CVSS 4.0
CVE-2026-9717
Schneider Electric PowerLogic™ P7 vulnerability
Schneider Electric · PowerLogic™ P7
EPSS
1.7%
1 story
4 months ago
8.2CVSS 4.0
CVE-2026-11833
Yokogawa Electric FAST/TOOLS vulnerability
Yokogawa Electric · FAST/TOOLS
EPSS
0.27%
1 story
4 months ago
8.2CVSS 3.1
CVE-2026-12473
OHIF Viewers DICOM Server-Side request forgery
Open Health Imaging Foundation (OHIF) · DICOM Web Viewer Framework
EPSS
0.39%
1 story
4 months ago
8.1CVSS 3.1
CVE-2026-31928
Daktronics Controller Firmware Use of Hard-coded Credentials
Daktronics · VFC-DMP-5000
EPSS
0.57%
1 story
4 months ago
7.1CVSS 3.1
CVE-2026-33560
Daktronics Controller Firmware Unrestricted Upload of File with Dangerous Type
Daktronics · VFC-DMP-5000
EPSS
0.44%
1 story
4 months ago
7.5CVSS 3.1
CVE-2026-13207
Frangoteam FUXA SCADA/HMI Authentication Bypass by Spoofing
Frangoteam · FUXA SCADA/HMI
EPSS
0.61%
1 story
4 months ago
7.0CVSS 3.0
CVE-2025-11001
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
7-Zip
EPSS
27%
1 story
4 months ago
7.1CVSS 4.0
CVE-2026-8045
Schneider Electric EcoStruxure™ IT Data Center Expert vulnerability
Schneider Electric · EcoStruxure™ IT Data Center Expert
EPSS
0.23%
1 story
4 months ago
8.7CVSS 4.0
CVE-2025-31115
XZ has a heap-use-after-free bug in threaded .xz decoder
Tukaani · xz
EPSS
0.68%
1 story
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.