CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
337 CVEs
EPSSCoverage
9.8CVSS 3.1
CVE-2026-51990
An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498)…
EPSS
0.93%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-85046
Exploited
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
EPSS
1.8%
1 story
2 months ago
8.8CVSS 3.1
CVE-2026-87491
Exploited
Google Chromium V8 Out of Bounds Write Vulnerability
Google · Chromium V8
EPSS
3.5%
1 story
2 months ago
7.8CVSS 3.1
CVE-2026-85880
Exploited
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Microsoft · Windows
EPSS
0.39%
1 story
2 months ago
10.0CVSS 3.1
CVE-2026-20079
Exploited
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
EPSS
89%
3 stories
2 months ago
5.3CVSS 3.1
CVE-2026-20316
Exploited Ransomware
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
Cisco · Secure Firewall Management Center (FMC)
EPSS
35%
2 stories
2 months ago
9.9CVSS 3.1
CVE-2026-84869
Exploited
ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
ConnectWise · ScreenConnect
EPSS
1.2%
1 story
2 months ago
9.9CVSS 3.1
CVE-2026-87719
Deserialization of Untrusted Data in GitLab
GitLab
EPSS
0.57%
1 story
2 months ago
8.1CVSS 3.1
CVE-2026-42016
Exploited
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
JFrog · Artifactory
EPSS
8.6%
1 story
2 months ago
7.5CVSS 3.1
CVE-2026-42018
Exploited
Anonymous user token generation exposure in JFrog Artifactory
JFrog · Artifactory
EPSS
10.0%
1 story
2 months ago
9.8CVSS 3.1
CVE-2026-76581
WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion
Wpmudev · WPMU DEV Dashboard
EPSS
0.43%
1 story
3 months ago
10.0CVSS 3.1
CVE-2026-82222
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability
Liquid Web / StellarWP · GiveWP
EPSS
2.3%
1 story
3 months ago
9.8CVSS 3.0
CVE-2023-27350
Exploited Ransomware
PaperCut MF/NG Improper Access Control Vulnerability
PaperCut · MF/NG
EPSS
>99.9%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-18431
Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write
Themefusion · Avada (Fusion) Builder
EPSS
0.90%
1 story
3 months ago
9.6CVSS 3.1
CVE-2026-79282
Google Chrome vulnerability
Google · Chrome
EPSS
0.48%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-15981
SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Cyberlord92 · SAML Single Sign On – SSO Login
EPSS
1.3%
1 story
3 months ago
8.1CVSS 3.1
CVE-2026-61979
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
miniOrange · SAML SP Single Sign On
EPSS
0.42%
1 story
3 months ago
10.0CVSS 3.1
CVE-2026-69836
Microsoft Entra ID Remote Code Execution Vulnerability
Microsoft · Entra
EPSS
1.8%
1 story
3 months ago
9.0CVSS 3.1
CVE-2026-32475
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Elementor · Pro
EPSS
2.0%
1 story
3 months ago
9.3CVSS 4.0
CVE-2026-19490
Exploited
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
Citrix · NetScaler
EPSS
33%
1 story
3 months ago
8.8CVSS 4.0
CVE-2026-19489
NetScaler ADC vulnerability
NetScaler · ADC
EPSS
0.43%
1 story
3 months ago
9.3CVSS 4.0
CVE-2026-12569
Exploited Ransomware
Remote Code Execution (RCE) vulnerability in Windchill PDMlink
PTC · Windchill and FlexPLM
EPSS
46%
2 stories
3 months ago
10.0CVSS 3.1
CVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
SAP · Commerce Cloud (Data Hub Adapter)
EPSS
0.86%
2 stories
3 months ago
9.8CVSS 3.1
CVE-2019-0344
Exploited
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
SAP · Commerce Cloud
EPSS
7.5%
1 story
3 months ago
9.8CVSS 3.1
CVE-2026-65400
Exploited
Apple macOS Improper Authentication Vulnerability
Apple · macOS
EPSS
18%
2 stories
3 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.