LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week

All Known exploited Critical High This week

Vendors Microsoft33 Cisco27 Adobe15 Linux13 Check Point10 JFrog10 SonicWall8 BeyondTrust7 Google7 SAP6 Schneider Electric6 Oracle5 Apple4 Barracuda Networks4

337 CVEs EPSSCoverage

6.5CVSS 3.1 CVE-2026-48314 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Adobe · ColdFusion 2025 EPSS 0.62% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-48558 Exploited SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification SimpleHelp EPSS 80% 2 stories 4 months ago 8.8CVSS 3.0 CVE-2026-9785 Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability Quest · NetVault Backup EPSS 0.95% 1 story 4 months ago 8.8CVSS 3.0 CVE-2026-9772 Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability Unraid EPSS 1.9% 1 story 4 months ago 7.8CVSS 3.1 CVE-2026-50260 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() Red Hat · Enterprise Linux 10 EPSS 0.15% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-10520 Exploited Ivanti Sentry OS Command Injection Vulnerability Ivanti · Sentry EPSS 100% 1 story 4 months ago 10.0CVSS 4.0 CVE-2026-48908 Exploited Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 JoomShaper · SP Page Builder EPSS 89% 1 story 4 months ago 9.4CVSS 3.1 CVE-2025-64446 Exploited Fortinet FortiWeb Path Traversal Vulnerability Fortinet · FortiWeb EPSS 91% 1 story 4 months ago 7.8CVSS 4.0 CVE-2026-0257 Exploited Ransomware PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Palo Alto Networks · PAN-OS EPSS 96% 2 stories 4 months ago 7.5CVSS 3.1 CVE-2025-14847 Exploited Zlib compressed protocol header length confusion may allow memory read MongoDB · and MongoDB Server EPSS 83% 1 story 4 months ago 7.8CVSS 3.1 CVE-2026-33825 Exploited Ransomware Microsoft Defender Elevation of Privilege Vulnerability Microsoft · Defender EPSS 6.9% 1 story 5 months ago 7.5CVSS 3.0 CVE-2026-9776 ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability ATEN · Unizon EPSS 1.9% 1 story 5 months ago 5.5CVSS 3.1 CVE-2026-50262 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes Red Hat · Enterprise Linux 10 EPSS 0.13% 1 story 5 months ago 8.8CVSS 3.0 CVE-2026-7569 Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability Quest · NetVault Backup EPSS 0.94% 1 story 5 months ago 7.2CVSS 3.0 CVE-2026-9779 ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability ATEN · Unizon EPSS 0.68% 1 story 5 months ago 5.5CVSS 3.1 CVE-2026-50263 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() Red Hat · Enterprise Linux 10 EPSS 0.14% 1 story 5 months ago 8.1CVSS 3.1 CVE-2026-55200 libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c Libssh2 EPSS 3.9% 1 story 5 months ago 8.8CVSS 3.1 CVE-2026-43503 net: skbuff: propagate shared-frag marker through frag-transfer helpers Linux EPSS 2.0% 1 story 5 months ago 7.8CVSS 3.1 CVE-2026-46300 Exploited net: skbuff: preserve shared-frag marker during coalescing Linux · Kernel EPSS 16% 1 story 5 months ago 9.8CVSS 3.1 CVE-2025-61882 Exploited Ransomware Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite EPSS 100% 1 story 5 months ago 9.8CVSS 3.1 CVE-2026-46817 Exploited Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle · E-Business Suite EPSS 12% 1 story 5 months ago 7.5CVSS 3.1 CVE-2024-21182 Exploited Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server EPSS 74% 1 story 5 months ago 7.8CVSS 3.1 CVE-2024-54529 Apple macOS vulnerability Apple · macOS EPSS 0.33% 1 story 5 months ago 6.5CVSS 3.1 CVE-2025-31235 Apple iPadOS vulnerability Apple · iPadOS EPSS 0.20% 1 story 5 months ago 9.8CVSS 3.1 CVE-2024-27227 Google Android vulnerability Google · Android EPSS 0.32% 1 story 5 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.