CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
127 CVEs
EPSSCoverage
10.0CVSS 4.0
CVE-2026-48939
Exploited
Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
iCagenda
EPSS
20%
1 story
4 months ago
10.0CVSS 4.0
CVE-2026-56291
Exploited
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
Balbooa · Forms
EPSS
15%
1 story
4 months ago
7.5CVSS 3.1
CVE-2018-0171
Exploited
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Cisco · IOS and IOS XE
EPSS
99%
1 story
4 months ago
10.0CVSS 3.1
CVE-2025-32432
Exploited
Craft CMS Allows Remote Code Execution
Craft CMS
EPSS
100%
1 story
4 months ago
10.0CVSS 4.0
CVE-2026-48907
Exploited
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
Widget Factory · Joomla Content Editor
EPSS
85%
1 story
4 months ago
6.1CVSS 3.1
CVE-2025-48700
Exploited
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
EPSS
1.7%
1 story
4 months ago
8.4CVSS 3.1
CVE-2026-55255
Exploited
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
Langflow
EPSS
0.89%
1 story
4 months ago
9.8CVSS 3.1
CVE-2023-25717
Exploited
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless · Multiple Products
EPSS
98%
1 story
4 months ago
9.9CVSS 4.0
CVE-2026-1731
Exploited Ransomware
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
EPSS
94%
1 story
4 months ago
9.8CVSS 3.1
CVE-2024-12356
Exploited
Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
EPSS
87%
1 story
4 months ago
6.6CVSS 3.1
CVE-2024-12686
Exploited
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
EPSS
33%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48282
Exploited
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion
EPSS
42%
2 stories
4 months ago
8.6CVSS 3.1
CVE-2026-34621
Exploited
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Adobe · Acrobat and Reader
EPSS
7.3%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-31431
Exploited
crypto: algif_aead - Revert to operating out-of-place
Linux · Kernel
EPSS
98%
1 story
4 months ago
8.6CVSS 3.1
CVE-2026-20230
Exploited
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Cisco · Unified Communications Manager
EPSS
89%
2 stories
4 months ago
8.2CVSS 3.1
CVE-2026-20045
Exploited
Cisco Unified Communications Products Remote Code Execution Vulnerability
Cisco · Unified Communications Manager
EPSS
4.5%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48558
Exploited
SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
SimpleHelp
EPSS
80%
2 stories
4 months ago
10.0CVSS 3.1
CVE-2026-10520
Exploited
Ivanti Sentry OS Command Injection Vulnerability
Ivanti · Sentry
EPSS
100%
1 story
4 months ago
10.0CVSS 4.0
CVE-2026-48908
Exploited
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
JoomShaper · SP Page Builder
EPSS
89%
1 story
4 months ago
9.4CVSS 3.1
CVE-2025-64446
Exploited
Fortinet FortiWeb Path Traversal Vulnerability
Fortinet · FortiWeb
EPSS
91%
1 story
4 months ago
7.8CVSS 4.0
CVE-2026-0257
Exploited Ransomware
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Palo Alto Networks · PAN-OS
EPSS
96%
2 stories
4 months ago
7.5CVSS 3.1
CVE-2025-14847
Exploited
Zlib compressed protocol header length confusion may allow memory read
MongoDB · and MongoDB Server
EPSS
83%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-33825
Exploited Ransomware
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft · Defender
EPSS
6.9%
1 story
5 months ago
7.8CVSS 3.1
CVE-2026-46300
Exploited
net: skbuff: preserve shared-frag marker during coalescing
Linux · Kernel
EPSS
16%
1 story
5 months ago
9.8CVSS 3.1
CVE-2025-61882
Exploited Ransomware
Oracle E-Business Suite Unspecified Vulnerability
Oracle · E-Business Suite
EPSS
100%
1 story
5 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.