CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
337 CVEs
EPSSCoverage
9.8CVSS 3.1
CVE-2026-9082
Exploited
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
Drupal · Core
EPSS
89%
1 story
2 weeks ago
8.1CVSS 3.1
CVE-2026-108099
Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218
Drupal · Entity List
EPSS
0.41%
2 stories
2 weeks ago
8.1CVSS 3.1
CVE-2026-108097
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
Drupal · core
EPSS
0.57%
2 stories
2 weeks ago
6.5CVSS 3.1
CVE-2026-118539
Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254
Drupal · Commerce Core
EPSS
0.67%
1 story
2 weeks ago
10.0CVSS 3.1
CVE-2026-97229
Exploited
Integer Overflow or Wraparound in GitLab
GitLab · Community Edition and Enterprise Edition
EPSS
69%
1 story
2 weeks ago
10.0CVSS 3.1
CVE-2026-16812
Exploited
VeloCloud Orchestrator OS Command Injection
Arista · VeloCloud Orchestrator
EPSS
1.8%
2 stories
2 weeks ago
10.0CVSS 3.1
CVE-2026-20127
Exploited
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Cisco · Catalyst SD-WAN Controller and Manager
EPSS
88%
1 story
2 weeks ago
9.4CVSS 4.0
CVE-2025-8875
Exploited
Insecure Deserialization Vulnerability
N-able · N-Central
EPSS
2.3%
1 story
2 weeks ago
9.4CVSS 4.0
CVE-2025-8876
Exploited
Command Injection Vulnerability
N-able · N-Central
EPSS
4.1%
1 story
2 weeks ago
6.6CVSS 3.0
CVE-2024-39717
Exploited
Versa Director Dangerous File Type Upload Vulnerability
Versa · Director
EPSS
4.0%
1 story
2 weeks ago
8.6CVSS 3.1
CVE-2026-20349
Exploited
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
EPSS
1.0%
2 stories
2 weeks ago
7.5CVSS 3.1
CVE-2026-85114
Siemens .NET Client Library for SIMATIC S7 Webserver API vulnerability
Siemens · .NET Client Library for SIMATIC S7 Webserver API
EPSS
0.33%
1 story
3 weeks ago
5.5CVSS 3.1
CVE-2026-85115
Siemens .NET Client Library for SIMATIC S7 Webserver API vulnerability
Siemens · .NET Client Library for SIMATIC S7 Webserver API
EPSS
0.11%
1 story
3 weeks ago
TBAPENDING
CVE-2026-115560
PHP Discloses Unpatched RCE Flaw, Offers Mitigation Pending Fix
EPSS
N/A
1 story
3 weeks ago
6.8CVSS 3.1
CVE-2026-111943
Distrust compromised intermediate certificates in crypto/x509
Go standard library · crypto/x509
EPSS
0.40%
1 story
3 weeks ago
10.0CVSS 3.1
CVE-2026-103849
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Commerce
EPSS
1.2%
1 story
4 weeks ago
9.2CVSS 4.0
CVE-2026-110447
Exploited
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora · Online – Built-in CODE Server
EPSS
73%
1 story
4 weeks ago
10.0CVSS 3.1
CVE-2026-105134
Exploited
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
Ahsay · AhsayCBS
EPSS
82%
1 story
4 weeks ago
9.8CVSS 3.1
CVE-2026-76519
Exploited
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco · Secure Email Gateway
EPSS
6.2%
2 stories
4 weeks ago
8.6CVSS 4.0
CVE-2026-0322
Exploited
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
Palo Alto Networks · PAN-OS
EPSS
2.1%
1 story
4 weeks ago
7.3CVSS 3.1
CVE-2026-105133
Exploited
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
Ahsay · AhsayCBS
EPSS
84%
1 story
4 weeks ago
8.6CVSS 3.1
CVE-2026-104935
Exploited
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti · Connect Secure
EPSS
89%
2 stories
1 month ago
8.8CVSS 3.1
CVE-2026-96951
Exploited
Windows Shell Security Feature Bypass Vulnerability
Microsoft · Windows
EPSS
9.8%
1 story
1 month ago
9.8CVSS 3.1
CVE-2026-39919
Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter
Artifex Software · Ghostscript
EPSS
0.85%
1 story
1 month ago
10.0CVSS 3.1
CVE-2026-15409
Exploited Ransomware
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliances
EPSS
6.8%
2 stories
1 month ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.