LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week

All Known exploited Critical High This week

Vendors Microsoft33 Cisco27 Adobe15 Linux13 Check Point10 JFrog10 SonicWall8 BeyondTrust7 Google7 SAP6 Schneider Electric6 Oracle5 Apple4 Barracuda Networks4

337 CVEs EPSSCoverage

9.8CVSS 3.1 CVE-2026-41089 Windows Netlogon Remote Code Execution Vulnerability Microsoft · Windows Server 2012 EPSS 78% 1 story 5 months ago 9.8CVSS 3.1 CVE-2026-41096 Windows DNS Client Remote Code Execution Vulnerability Microsoft · Windows 11 version 23H2 EPSS 2.7% 1 story 5 months ago 9.1CVSS 3.1 CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability Microsoft · Confluence SAML SSO plugin EPSS 5.4% 1 story 5 months ago 9.8CVSS 3.1 CVE-2025-54957 An issue was discovered in Dolby UDC 4.5 through 4.13. A crash… EPSS 1.6% 1 story 5 months ago 8.4CVSS 4.0 CVE-2026-12897 Out-of-bounds read in Horner Automation Cscape Horner Automation · Cscape EPSS 0.18% 1 story 5 months ago 8.4CVSS 4.0 CVE-2026-12390 Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory AzeoTech · DAQFactory EPSS 0.19% 1 story 5 months ago 8.4CVSS 4.0 CVE-2026-12921 Use after free in AzeoTech DAQFactory AzeoTech · DAQFactory EPSS 0.19% 1 story 5 months ago 9.1CVSS 3.1 CVE-2026-56445 pydicom pynetdicom Library Path Traversal Pydicom · pynetdicom Library EPSS 0.64% 1 story 5 months ago 8.7CVSS 4.0 CVE-2026-8805 Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series EtherNet/IP module Mitsubishi Electric · MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP EPSS 0.64% 1 story 5 months ago 7.2CVSS 3.1 CVE-2026-55975 H.VIEW HV-500S6 IP Camera OS Command Injection H.VIEW · HV-500S6 IP Camera EPSS 0.63% 1 story 5 months ago 7.2CVSS 3.1 CVE-2026-56414 H.VIEW HV-500S6 IP Camera Unrestricted Upload of File with Dangerous Type H.VIEW · HV-500S6 IP Camera EPSS 0.39% 1 story 5 months ago 9.3CVSS 4.0 CVE-2026-4681 Critical Remote Code Execution vulnerability reported in Windchill PTC · Windchill PDMLink EPSS 0.74% 1 story 5 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.