CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
337 CVEs
EPSSCoverage
8.7CVSS 4.0
CVE-2026-9650
Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller vulnerability
Schneider Electric · EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
EPSS
0.41%
1 story
4 months ago
6.7CVSS 4.0
CVE-2026-9651
Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller vulnerability
Schneider Electric · EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
EPSS
0.16%
1 story
4 months ago
9.3CVSS 4.0
CVE-2026-50548
Cursor Desktop sandbox escape via agent-controlled working directory
Cursor
EPSS
1.0%
2 stories
4 months ago
9.3CVSS 4.0
CVE-2026-50549
Cursor Desktop sandbox escape via symlink and failed path canonicalization
Cursor
EPSS
1.0%
2 stories
4 months ago
10.0CVSS 3.1
CVE-2025-20309
Cisco Unified Communications Manager Static SSH Credentials Vulnerability
Cisco · Unified Communications Manager
EPSS
1.2%
1 story
4 months ago
9.9CVSS 3.1
CVE-2024-20253
Cisco Unified Contact Center Enterprise vulnerability
Cisco · Unified Contact Center Enterprise
EPSS
2.4%
1 story
4 months ago
8.6CVSS 3.1
CVE-2026-20230
Exploited
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Cisco · Unified Communications Manager
EPSS
89%
2 stories
4 months ago
8.2CVSS 3.1
CVE-2026-20045
Exploited
Cisco Unified Communications Products Remote Code Execution Vulnerability
Cisco · Unified Communications Manager
EPSS
4.5%
1 story
4 months ago
8.1CVSS 3.1
CVE-2026-38057
ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery
ST Engineering iDirect · Evolution iQ‑Series terminals
EPSS
0.31%
1 story
4 months ago
7.5CVSS 3.1
CVE-2026-38059
ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function
ST Engineering iDirect · Evolution iQ‑Series terminals
EPSS
0.59%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-13768
Gardyn IoT Hub Use of Hard-coded Credentials
Gardyn · Home Firmware
EPSS
0.65%
1 story
4 months ago
5.4CVSS 3.1
CVE-2026-54477
Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax
Gardyn · Home Firmware
EPSS
0.33%
1 story
4 months ago
5.3CVSS 3.1
CVE-2026-55726
Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere
Gardyn · Home Firmware
EPSS
0.47%
1 story
4 months ago
3.3CVSS 4.0
CVE-2026-13743
Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel
CubeSpace · CW0057 Reaction Wheel
EPSS
0.16%
1 story
4 months ago
8.8CVSS 4.0
CVE-2026-8451
Insufficient input validation leading to memory overread
NetScaler · ADC
EPSS
14%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48277
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48281
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.4%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48286
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Adobe · Campaign Classic
EPSS
1.2%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48316
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.1%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48276
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
10.0CVSS 3.1
CVE-2026-48283
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · ColdFusion 2025
EPSS
1.3%
1 story
4 months ago
9.3CVSS 3.1
CVE-2026-48313
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion 2025
EPSS
3.0%
1 story
4 months ago
9.3CVSS 3.1
CVE-2026-48315
ColdFusion | Improper Input Validation (CWE-20)
Adobe · ColdFusion 2025
EPSS
1.0%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-48307
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe · ColdFusion 2025
EPSS
0.55%
1 story
4 months ago
8.6CVSS 3.1
CVE-2026-48285
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe · ColdFusion 2025
EPSS
0.83%
1 story
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.