CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
337 CVEs
EPSSCoverage
8.1CVSS 3.1
CVE-2025-7443
BerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload
Berqwp · – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript
EPSS
1.0%
1 story
4 months ago
7.3CVSS 3.1
CVE-2026-3395
MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection
MaxSite · CMS
EPSS
4.0%
1 story
4 months ago
5.3CVSS 3.1
CVE-2026-1969
ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload
EPSS
0.30%
1 story
4 months ago
6.1CVSS 3.1
CVE-2025-48700
Exploited
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
EPSS
1.7%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-5027
Langflow - Path Traversal Arbitrary File Write via upload_user_file
Langflow
EPSS
40%
1 story
4 months ago
8.4CVSS 3.1
CVE-2026-55255
Exploited
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
Langflow
EPSS
0.89%
1 story
4 months ago
9.8CVSS 3.1
CVE-2020-22653
Ruckus Wireless R310 Firmware vulnerability
Ruckus Wireless · R310 Firmware
EPSS
0.55%
1 story
4 months ago
9.8CVSS 3.1
CVE-2020-22658
Ruckus Wireless R310 Firmware vulnerability
Ruckus Wireless · R310 Firmware
EPSS
0.51%
1 story
4 months ago
9.8CVSS 3.1
CVE-2023-25717
Exploited
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless · Multiple Products
EPSS
98%
1 story
4 months ago
9.2CVSS 4.0
CVE-2025-2492
ASUS Router vulnerability
ASUS · Router
EPSS
1.1%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-43284
xfrm: esp: avoid in-place decrypt on shared skb frags
Linux
EPSS
94%
3 stories
4 months ago
8.8CVSS 3.1
CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected role
Linux
EPSS
1.4%
2 stories
4 months ago
7.8CVSS 3.1
CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
Linux
EPSS
94%
2 stories
4 months ago
9.8CVSS 3.1
CVE-2026-11405
Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface
Tenda · firmware
EPSS
0.77%
1 story
4 months ago
9.9CVSS 4.0
CVE-2026-1731
Exploited Ransomware
Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
EPSS
94%
1 story
4 months ago
9.8CVSS 3.1
CVE-2024-12356
Exploited
Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
EPSS
87%
1 story
4 months ago
9.2CVSS 4.0
CVE-2026-40138
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.46%
1 story
4 months ago
9.2CVSS 4.0
CVE-2026-40139
Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.75%
1 story
4 months ago
8.7CVSS 4.0
CVE-2026-40140
High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.65%
1 story
4 months ago
8.5CVSS 4.0
CVE-2026-40141
High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
BeyondTrust · Remote Support
EPSS
0.53%
1 story
4 months ago
6.6CVSS 3.1
CVE-2024-12686
Exploited
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
EPSS
33%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-43074
eventpoll: defer struct eventpoll free to RCU grace period
Linux
EPSS
0.48%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-46242
eventpoll: fix ep_remove struct eventpoll / struct file UAF
Linux
EPSS
4.6%
2 stories
4 months ago
10.0CVSS 3.1
CVE-2026-48282
Exploited
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion
EPSS
42%
2 stories
4 months ago
8.6CVSS 3.1
CVE-2026-34621
Exploited
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Adobe · Acrobat and Reader
EPSS
7.3%
1 story
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.