LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week

All Known exploited Critical High This week

Vendors Microsoft33 Cisco27 Adobe15 Linux13 Check Point10 JFrog10 SonicWall8 BeyondTrust7 Google7 SAP6 Schneider Electric6 Oracle5 Apple4 Barracuda Networks4

337 CVEs EPSSCoverage

9.6CVSS 3.1 CVE-2026-34263 Missing authentication check in SAP Commerce cloud configuration SAP · Commerce cloud configuration EPSS 0.61% 1 story 3 months ago 9.1CVSS 3.1 CVE-2026-22732 Under Some Conditions Spring Security HTTP Headers Are not Written VMware · Spring Security EPSS 0.50% 1 story 3 months ago 9.1CVSS 3.1 CVE-2026-44761 Insecure Sample Credentials in SAP Commerce Cloud SAP · Commerce Cloud EPSS 0.50% 2 stories 3 months ago 9.8CVSS 3.1 CVE-2026-59310 Exploited Ransomware vCenter directory-traversal vulnerability Broadcom · VMware vCenter EPSS 62% 1 story 3 months ago 7.8CVSS 3.1 CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability Microsoft · Malware Protection Engine EPSS 11% 1 story 3 months ago 9.6CVSS 3.1 CVE-2024-55591 Exploited Ransomware Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy EPSS 94% 1 story 3 months ago 8.1CVSS 3.1 CVE-2025-24472 Exploited Ransomware Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet · FortiOS and FortiProxy EPSS 7.2% 1 story 3 months ago 7.0CVSS 3.1 CVE-2026-68820 Exploited Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft · Windows Ancillary Function Driver for WinSock EPSS 8.6% 2 stories 3 months ago 7.8CVSS 3.1 CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability Microsoft · Windows 10 Version 21H2 EPSS 0.37% 1 story 3 months ago 5.5CVSS 3.1 CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability Microsoft · Windows 11 version 26H1 EPSS 0.36% 1 story 3 months ago 9.6CVSS 3.1 CVE-2026-8037 Exploited OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF Progress · LoadMaster EPSS 100% 3 stories 3 months ago 8.2CVSS 4.0 CVE-2026-18577 Exploited Incomplete patch leads to administrative account takeover N-able · N-central EPSS 15% 4 stories 3 months ago 6.8CVSS 3.1 CVE-2026-33691 OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks Coreruleset EPSS 3.8% 1 story 3 months ago 7.8CVSS 3.1 CVE-2026-3502 Exploited TrueConf Client Update Integrity Verification Bypass TrueConf · Client EPSS 5.8% 1 story 3 months ago 9.8CVSS 3.1 CVE-2026-63077 Exploited Ransomware JetBrains TeamCity Deserialization of Untrusted Data Vulnerability JetBrains · TeamCity EPSS 95% 1 story 3 months ago 9.9CVSS 3.1 CVE-2026-20303 Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities Cisco · Catalyst SD-WAN Controller EPSS 0.49% 1 story 3 months ago 9.9CVSS 3.1 CVE-2026-20304 Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities Cisco · Catalyst SD-WAN Controller EPSS 0.42% 1 story 3 months ago 9.8CVSS 3.1 CVE-2026-20272 Cisco IOS XE Software Security Hardening Release Cisco · IOS XE Software EPSS 0.57% 1 story 3 months ago 9.1CVSS 3.1 CVE-2026-20310 Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access Cisco · Catalyst SD-WAN Controller EPSS 0.59% 1 story 3 months ago 9.0CVSS 3.1 CVE-2026-20267 Cisco IOS XE Software Security Hardening Release Cisco · IOS XE Software EPSS 0.38% 1 story 3 months ago 8.8CVSS 3.1 CVE-2026-20200 Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability Cisco · Unified Computing System (Standalone) EPSS 0.73% 1 story 3 months ago 8.8CVSS 3.1 CVE-2026-20312 Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities Cisco · Catalyst SD-WAN Controller EPSS 0.31% 1 story 3 months ago 7.7CVSS 3.1 CVE-2026-20313 Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities Cisco · Catalyst SD-WAN Controller EPSS 0.42% 1 story 3 months ago 7.1CVSS 3.1 CVE-2025-21079 Samsung Members vulnerability Samsung · Members EPSS 0.57% 1 story 3 months ago 4.0CVSS 3.1 CVE-2025-58486 Samsung Account vulnerability Samsung · Account EPSS 0.20% 1 story 3 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.