LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week

All Known exploited Critical High This week

Vendors Microsoft33 Cisco27 Adobe15 Linux13 Check Point10 JFrog10 SonicWall8 BeyondTrust7 Google7 SAP6 Schneider Electric6 Oracle5 Apple4 Barracuda Networks4

127 CVEs EPSSCoverage

9.8CVSS 3.1 CVE-2019-0344 Exploited SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP · Commerce Cloud EPSS 7.5% 1 story 3 months ago 9.8CVSS 3.1 CVE-2026-65400 Exploited Apple macOS Improper Authentication Vulnerability Apple · macOS EPSS 18% 2 stories 3 months ago 9.8CVSS 3.1 CVE-2026-59310 Exploited Ransomware vCenter directory-traversal vulnerability Broadcom · VMware vCenter EPSS 62% 1 story 3 months ago 9.6CVSS 3.1 CVE-2024-55591 Exploited Ransomware Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy EPSS 94% 1 story 3 months ago 8.1CVSS 3.1 CVE-2025-24472 Exploited Ransomware Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy EPSS 7.2% 1 story 3 months ago 7.0CVSS 3.1 CVE-2026-68820 Exploited Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft · Windows Ancillary Function Driver for WinSock EPSS 8.6% 2 stories 3 months ago 9.6CVSS 3.1 CVE-2026-8037 Exploited OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF Progress · LoadMaster EPSS 100% 3 stories 3 months ago 8.2CVSS 4.0 CVE-2026-18577 Exploited Incomplete patch leads to administrative account takeover N-able · N-central EPSS 15% 4 stories 3 months ago 7.8CVSS 3.1 CVE-2026-3502 Exploited TrueConf Client Update Integrity Verification Bypass TrueConf · Client EPSS 5.8% 1 story 3 months ago 9.8CVSS 3.1 CVE-2026-63077 Exploited Ransomware JetBrains TeamCity Deserialization of Untrusted Data Vulnerability JetBrains · TeamCity EPSS 95% 1 story 3 months ago 9.8CVSS 3.1 CVE-2026-9198 Exploited Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation IBM · Langflow EPSS 29% 1 story 3 months ago 8.2CVSS 4.0 CVE-2026-18556 Exploited Unauthenticated administrative account takeover N-able · N-central EPSS 44% 1 story 3 months ago 7.5CVSS 3.1 CVE-2026-34486 Exploited Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Apache · Tomcat EPSS 99% 1 story 3 months ago 10.0CVSS 3.1 CVE-2025-68613 Exploited n8n Vulnerable to Remote Code Execution via Expression Injection N8n EPSS 99% 1 story 4 months ago 9.3CVSS 4.0 CVE-2026-3055 Exploited Insufficient input validation leading to memory overread Citrix · NetScaler EPSS 91% 1 story 4 months ago 9.3CVSS 4.0 CVE-2026-33017 Exploited Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint Langflow EPSS 96% 3 stories 4 months ago 10.0CVSS 3.1 CVE-2025-55182 Exploited Ransomware Meta React Server Components Remote Code Execution Vulnerability Meta · React Server Components EPSS 100% 2 stories 4 months ago 9.8CVSS 3.1 CVE-2020-8515 Exploited Multiple DrayTek Vigor Routers Web Management Page Vulnerability DrayTek · Multiple Vigor Routers EPSS >99.9% 1 story 4 months ago 7.2CVSS 3.1 CVE-2025-66376 Exploited Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS) EPSS 20% 2 stories 4 months ago 8.6CVSS 3.1 CVE-2024-24919 Exploited Ransomware Information disclosure Check Point · Quantum Security Gateways EPSS >99.9% 1 story 4 months ago 9.8CVSS 3.1 CVE-2026-63030 Exploited WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution WordPress · Core EPSS 11% 2 stories 4 months ago 5.9CVSS 3.1 CVE-2026-60137 Exploited WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query WordPress · Core EPSS 5.3% 2 stories 4 months ago 9.8CVSS 3.1 CVE-2025-3248 Exploited Ransomware Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code Langflow EPSS >99.9% 4 stories 4 months ago 8.4CVSS 4.0 CVE-2025-8088 Exploited Ransomware Path traversal vulnerability in WinRAR RARLAB · WinRAR EPSS 94% 1 story 4 months ago 7.8CVSS 3.1 CVE-2026-56155 Exploited Active Directory Federation Services Elevation of Privilege Vulnerability Microsoft · Active Directory Federation Services EPSS 0.35% 2 stories 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.