LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week

All Known exploited Critical High This week

Vendors Microsoft33 Cisco27 Adobe15 Linux13 Check Point10 JFrog10 SonicWall8 BeyondTrust7 Google7 SAP6 Schneider Electric6 Oracle5 Apple4 Barracuda Networks4

337 CVEs EPSSCoverage

10.0CVSS 3.1 CVE-2026-83548 Exploited SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall · SMA1000 Appliances EPSS 8.0% 1 story 1 month ago 7.8CVSS 3.1 CVE-2026-83549 Exploited SonicWall SMA1000 Appliances OS Command Injection Vulnerability SonicWall · SMA1000 Appliances EPSS 9.9% 1 story 1 month ago 7.2CVSS 3.1 CVE-2026-15410 Exploited Ransomware SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall · SMA1000 Appliances EPSS 12% 2 stories 1 month ago 9.8CVSS 3.1 CVE-2026-61500 Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key Rejetto · hfs EPSS 1.9% 1 story 1 month ago 10.0CVSS 3.1 CVE-2026-63688 Dell Container Storage Modules (CSM) vulnerability Dell · Container Storage Modules (CSM) EPSS 0.49% 1 story 1 month ago 9.8CVSS 3.1 CVE-2025-53770 Exploited Ransomware Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft · SharePoint EPSS >99.9% 1 story 1 month ago 8.8CVSS 3.1 CVE-2025-49704 Exploited Ransomware Microsoft SharePoint Remote Code Execution Vulnerability Microsoft · SharePoint EPSS >99.9% 1 story 1 month ago 6.5CVSS 3.1 CVE-2025-49706 Exploited Ransomware Microsoft SharePoint Server Spoofing Vulnerability Microsoft · SharePoint EPSS 100% 1 story 1 month ago 6.5CVSS 3.1 CVE-2025-53771 Microsoft SharePoint Server Spoofing Vulnerability Microsoft · SharePoint Enterprise Server 2016 EPSS 100% 1 story 1 month ago 5.6CVSS 3.1 CVE-2025-1055 K7 Security Anti-Malware: IOCTL in K7RKScan.sys Allows Arbitrary Termination of High-Privilege and System Processes by a Low-Privilege User K7 Security · Anti-Malware EPSS 0.24% 1 story 1 month ago 9.8CVSS 3.1 CVE-2026-50522 Exploited Microsoft SharePoint Remote Code Execution Vulnerability Microsoft · SharePoint EPSS 3.0% 4 stories 1 month ago 9.8CVSS 3.1 CVE-2026-58644 Exploited Microsoft SharePoint Remote Code Execution Vulnerability Microsoft · SharePoint EPSS 16% 2 stories 1 month ago 9.1CVSS 3.1 CVE-2026-55040 Exploited Microsoft SharePoint Server Security Feature Bypass Vulnerability Microsoft · SharePoint EPSS 70% 2 stories 1 month ago 8.8CVSS 3.1 CVE-2026-45659 Exploited Ransomware Microsoft SharePoint Remote Code Execution Vulnerability Microsoft · SharePoint Server EPSS 80% 4 stories 1 month ago 6.5CVSS 3.1 CVE-2026-32201 Exploited Microsoft SharePoint Server Spoofing Vulnerability Microsoft · SharePoint Server EPSS 44% 2 stories 1 month ago 5.3CVSS 3.1 CVE-2026-56164 Exploited Microsoft SharePoint Server Elevation of Privilege Vulnerability Microsoft · SharePoint Server EPSS 27% 4 stories 1 month ago 9.8CVSS 3.1 CVE-2026-76504 Exploited Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability Cisco · Catalyst SD-WAN Manager EPSS 39% 1 story 1 month ago 8.8CVSS 3.1 CVE-2026-86950 Exploited Apple Multiple Products Out-of-Bounds Write Vulnerability Apple · Multiple Products EPSS 26% 1 story 1 month ago 9.5CVSS 4.0 CVE-2026-88771 Exploited A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands Citrix · NetScaler EPSS 82% 1 story 1 month ago 9.5CVSS 4.0 CVE-2026-88772 Exploited Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Citrix · NetScaler EPSS 77% 1 story 1 month ago 9.8CVSS 3.1 CVE-2026-35273 Exploited Ransomware Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle · PeopleSoft Enterprise PeopleTools EPSS 97% 5 stories 2 months ago 8.8CVSS 4.0 CVE-2026-42608 Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component. Getgrav · grav EPSS 0.60% 1 story 2 months ago 8.8CVSS 3.1 CVE-2026-65660 Exploited Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft · SharePoint EPSS 9.9% 2 stories 2 months ago 10.0CVSS 3.1 CVE-2026-5430 Exploited Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover WSO2 · Multiple Products EPSS 22% 1 story 2 months ago 9.1CVSS 3.1 CVE-2026-71362 Exploited Adobe Commerce | Incorrect Authorization (CWE-863) Adobe · Commerce and Magento EPSS 92% 1 story 2 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.