CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
128 CVEs
EPSSCoverage
8.7CVSS 4.0
CVE-2026-9650
Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller vulnerability
Schneider Electric · EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
EPSS
0.41%
1 story
4 months ago
8.6CVSS 3.1
CVE-2026-20230
Exploited
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Cisco · Unified Communications Manager
EPSS
89%
2 stories
4 months ago
8.2CVSS 3.1
CVE-2026-20045
Exploited
Cisco Unified Communications Products Remote Code Execution Vulnerability
Cisco · Unified Communications Manager
EPSS
4.5%
1 story
4 months ago
8.1CVSS 3.1
CVE-2026-38057
ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery
ST Engineering iDirect · Evolution iQ‑Series terminals
EPSS
0.31%
1 story
4 months ago
7.5CVSS 3.1
CVE-2026-38059
ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function
ST Engineering iDirect · Evolution iQ‑Series terminals
EPSS
0.59%
1 story
4 months ago
8.8CVSS 4.0
CVE-2026-8451
Insufficient input validation leading to memory overread
NetScaler · ADC
EPSS
14%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-48307
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe · ColdFusion 2025
EPSS
0.55%
1 story
4 months ago
8.6CVSS 3.1
CVE-2026-48285
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe · ColdFusion 2025
EPSS
0.83%
1 story
4 months ago
8.8CVSS 3.0
CVE-2026-9785
Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability
Quest · NetVault Backup
EPSS
0.95%
1 story
4 months ago
8.8CVSS 3.0
CVE-2026-9772
Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability
Unraid
EPSS
1.9%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-50260
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
Red Hat · Enterprise Linux 10
EPSS
0.15%
1 story
4 months ago
7.8CVSS 4.0
CVE-2026-0257
Exploited Ransomware
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Palo Alto Networks · PAN-OS
EPSS
96%
2 stories
4 months ago
7.5CVSS 3.1
CVE-2025-14847
Exploited
Zlib compressed protocol header length confusion may allow memory read
MongoDB · and MongoDB Server
EPSS
83%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-33825
Exploited Ransomware
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft · Defender
EPSS
6.9%
1 story
5 months ago
7.5CVSS 3.0
CVE-2026-9776
ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability
ATEN · Unizon
EPSS
1.9%
1 story
5 months ago
8.8CVSS 3.0
CVE-2026-7569
Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability
Quest · NetVault Backup
EPSS
0.94%
1 story
5 months ago
7.2CVSS 3.0
CVE-2026-9779
ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
ATEN · Unizon
EPSS
0.68%
1 story
5 months ago
8.1CVSS 3.1
CVE-2026-55200
libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c
Libssh2
EPSS
3.9%
1 story
5 months ago
8.8CVSS 3.1
CVE-2026-43503
net: skbuff: propagate shared-frag marker through frag-transfer helpers
Linux
EPSS
2.0%
1 story
5 months ago
7.8CVSS 3.1
CVE-2026-46300
Exploited
net: skbuff: preserve shared-frag marker during coalescing
Linux · Kernel
EPSS
16%
1 story
5 months ago
7.5CVSS 3.1
CVE-2024-21182
Exploited
Oracle WebLogic Server Unspecified Vulnerability
Oracle · WebLogic Server
EPSS
74%
1 story
5 months ago
7.8CVSS 3.1
CVE-2024-54529
Apple macOS vulnerability
Apple · macOS
EPSS
0.33%
1 story
5 months ago
8.4CVSS 4.0
CVE-2026-12897
Out-of-bounds read in Horner Automation Cscape
Horner Automation · Cscape
EPSS
0.18%
1 story
5 months ago
8.4CVSS 4.0
CVE-2026-12390
Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory
AzeoTech · DAQFactory
EPSS
0.19%
1 story
5 months ago
8.4CVSS 4.0
CVE-2026-12921
Use after free in AzeoTech DAQFactory
AzeoTech · DAQFactory
EPSS
0.19%
1 story
5 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.