CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
127 CVEs
EPSSCoverage
6.9CVSS 4.0
CVE-2026-67279
Exploited
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
MikroTik · RouterOS
EPSS
2.3%
1 story
2 months ago
8.1CVSS 3.1
CVE-2026-87902
Exploited
WordPress Core Remote File Inclusion Vulnerability
WordPress · Core
EPSS
96%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-94127
Exploited
BIG-IP APM OAuth vulnerability
F5 · BIG-IP APM
EPSS
27%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-7273
Exploited
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel · GS1900 Series Switches
EPSS
2.7%
1 story
2 months ago
9.8CVSS 3.1
CVE-2025-39682
Exploited
tls: fix handling of zero-length records on the rx_list
Linux · Kernel
EPSS
3.3%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-53266
Exploited
netfilter: bridge: make ebt_snat ARP rewrite writable
Linux · Kernel
EPSS
0.93%
1 story
2 months ago
7.8CVSS 3.1
CVE-2025-39964
Exploited
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Linux · Kernel
EPSS
1.6%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-76460
Exploited
Cisco Identity Services Engine Authentication Bypass Vulnerability
Cisco · Identity Services Engine
EPSS
76%
2 stories
2 months ago
7.8CVSS 3.0
CVE-2026-87886
Exploited
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup
EPSS
0.23%
1 story
2 months ago
10.0CVSS 3.1
CVE-2025-20337
Exploited
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
Cisco · Identity Services Engine
EPSS
74%
1 story
2 months ago
9.3CVSS 4.0
CVE-2026-16232
Exploited
Authentication Bypass in the SmartConsole Login Process Using an Application Token
Check Point · SmartConsole
EPSS
3.5%
2 stories
2 months ago
9.3CVSS 3.1
CVE-2026-50751
Exploited Ransomware
User Authentication Bypass in VPN Remote Access and Mobile Access
Check Point · Security Gateway
EPSS
85%
3 stories
2 months ago
8.8CVSS 3.1
CVE-2026-58704
Exploited
Google Pixel Improper Authorization Vulnerability
Google · Pixel
EPSS
0.63%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-85706
Exploited
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab · Community Edition and Enterprise Edition
EPSS
97%
2 stories
2 months ago
8.8CVSS 3.1
CVE-2026-85046
Exploited
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
EPSS
1.8%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-87491
Exploited
Google Chromium V8 Out of Bounds Write Vulnerability
Google · Chromium V8
EPSS
3.5%
1 story
2 months ago
7.8CVSS 3.1
CVE-2026-85880
Exploited
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Microsoft · Windows
EPSS
0.39%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-20079
Exploited
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
EPSS
89%
3 stories
2 months ago
5.3CVSS 3.1
CVE-2026-20316
Exploited Ransomware
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
Cisco · Secure Firewall Management Center (FMC)
EPSS
35%
2 stories
2 months ago
9.9CVSS 3.1
CVE-2026-84869
Exploited
ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
ConnectWise · ScreenConnect
EPSS
1.2%
1 story
2 months ago
8.1CVSS 3.1
CVE-2026-42016
Exploited
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
JFrog · Artifactory
EPSS
8.6%
1 story
2 months ago
7.5CVSS 3.1
CVE-2026-42018
Exploited
Anonymous user token generation exposure in JFrog Artifactory
JFrog · Artifactory
EPSS
10.0%
1 story
2 months ago
9.8CVSS 3.0
CVE-2023-27350
Exploited Ransomware
PaperCut MF/NG Improper Access Control Vulnerability
PaperCut · MF/NG
EPSS
>99.9%
1 story
3 months ago
9.3CVSS 4.0
CVE-2026-19490
Exploited
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
Citrix · NetScaler
EPSS
33%
1 story
3 months ago
9.3CVSS 4.0
CVE-2026-12569
Exploited Ransomware
Remote Code Execution (RCE) vulnerability in Windchill PDMlink
PTC · Windchill and FlexPLM
EPSS
46%
2 stories
3 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.