CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
337 CVEs
EPSSCoverage
6.9CVSS 4.0
CVE-2026-67279
Exploited
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
MikroTik · RouterOS
EPSS
2.3%
1 story
2 months ago
8.1CVSS 3.1
CVE-2026-87902
Exploited
WordPress Core Remote File Inclusion Vulnerability
WordPress · Core
EPSS
96%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-94127
Exploited
BIG-IP APM OAuth vulnerability
F5 · BIG-IP APM
EPSS
27%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-7273
Exploited
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel · GS1900 Series Switches
EPSS
2.7%
1 story
2 months ago
9.8CVSS 3.1
CVE-2025-39682
Exploited
tls: fix handling of zero-length records on the rx_list
Linux · Kernel
EPSS
3.3%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-53266
Exploited
netfilter: bridge: make ebt_snat ARP rewrite writable
Linux · Kernel
EPSS
0.93%
1 story
2 months ago
7.8CVSS 3.1
CVE-2025-39964
Exploited
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Linux · Kernel
EPSS
1.6%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-0628
Google Chrome vulnerability
Google · Chrome
EPSS
21%
1 story
2 months ago
4.2CVSS 3.1
CVE-2026-55945
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft · Edge (Chromium-based)
EPSS
0.19%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-58138
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
Conductor
EPSS
9.1%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-76460
Exploited
Cisco Identity Services Engine Authentication Bypass Vulnerability
Cisco · Identity Services Engine
EPSS
76%
2 stories
2 months ago
7.8CVSS 3.0
CVE-2026-87886
Exploited
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup
EPSS
0.23%
1 story
2 months ago
10.0CVSS 3.1
CVE-2025-20337
Exploited
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
Cisco · Identity Services Engine
EPSS
74%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-76423
Cisco ISE API Authentication Bypass Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.58%
1 story
2 months ago
9.9CVSS 3.1
CVE-2026-20307
Cisco Identity Services Engine Remote Code Execution Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.98%
1 story
2 months ago
9.1CVSS 3.1
CVE-2026-20176
Cisco Identity Services Engine Remote Code Execution Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.80%
1 story
2 months ago
9.1CVSS 3.1
CVE-2026-20211
Cisco Identity Services Engine Remote Code Execution Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.85%
1 story
2 months ago
9.1CVSS 3.1
CVE-2026-20284
Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability
Cisco · Identity Services Engine Software
EPSS
0.53%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-91843
Stack overflow in login process to the Security Management and Log Servers
Check Point · Quantum Security Management
EPSS
0.52%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
Check Point · Quantum Security Gateway
EPSS
4.3%
2 stories
2 months ago
9.3CVSS 4.0
CVE-2026-16232
Exploited
Authentication Bypass in the SmartConsole Login Process Using an Application Token
Check Point · SmartConsole
EPSS
3.5%
2 stories
2 months ago
9.3CVSS 3.1
CVE-2026-50751
Exploited Ransomware
User Authentication Bypass in VPN Remote Access and Mobile Access
Check Point · Security Gateway
EPSS
85%
3 stories
2 months ago
8.8CVSS 3.1
CVE-2026-58704
Exploited
Google Pixel Improper Authorization Vulnerability
Google · Pixel
EPSS
0.63%
1 story
2 months ago
9.0CVSS 3.1
CVE-2026-27540
WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability
Rymera Web Co Pty · Woocommerce Wholesale Lead Capture
EPSS
2.7%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-85706
Exploited
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab · Community Edition and Enterprise Edition
EPSS
97%
2 stories
2 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.