LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CVE Tracker

Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.

337Tracked CVEs 127Known exploited 162Critical 9.0+ 14Covered this week

All Known exploited Critical High This week

Vendors Microsoft33 Cisco27 Adobe15 Linux13 Check Point10 JFrog10 SonicWall8 BeyondTrust7 Google7 SAP6 Schneider Electric6 Oracle5 Apple4 Barracuda Networks4

337 CVEs EPSSCoverage

4.0CVSS 3.1 CVE-2025-58487 Samsung Account vulnerability Samsung · Account EPSS 0.16% 1 story 3 months ago 9.8CVSS 3.1 CVE-2026-9198 Exploited Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation IBM · Langflow EPSS 29% 1 story 3 months ago 8.2CVSS 4.0 CVE-2026-18556 Exploited Unauthenticated administrative account takeover N-able · N-central EPSS 44% 1 story 3 months ago 7.5CVSS 3.1 CVE-2026-29146 Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default Apache · Tomcat EPSS 8.9% 1 story 3 months ago 7.5CVSS 3.1 CVE-2026-34486 Exploited Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Apache · Tomcat EPSS 99% 1 story 3 months ago TBAPENDING CVE-2026-18576 N-able Patches Second Auth Bypass Flaw Under Active Attack on N-central Servers EPSS N/A 1 story 3 months ago 9.5CVSS 4.0 CVE-2026-66066 Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing Rails EPSS 33% 1 story 3 months ago 10.0CVSS 3.1 CVE-2025-68613 Exploited n8n Vulnerable to Remote Code Execution via Expression Injection N8n EPSS 99% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-21858 n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling N8n EPSS 78% 1 story 4 months ago 9.3CVSS 4.0 CVE-2026-3055 Exploited Insufficient input validation leading to memory overread Citrix · NetScaler EPSS 91% 1 story 4 months ago 9.3CVSS 4.0 CVE-2026-33017 Exploited Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint Langflow EPSS 96% 3 stories 4 months ago 8.8CVSS 3.1 CVE-2026-65617 Potential remote code execution on an Artifactory package service container. Jfrog · artifactory EPSS 0.65% 1 story 4 months ago 8.8CVSS 3.1 CVE-2026-65921 Potential path traversal leading to unauthorized file writes Jfrog · artifactory EPSS 0.59% 1 story 4 months ago 8.8CVSS 3.1 CVE-2026-66014 Potential authentication bypass leading to privilege escalation in Artifactory Jfrog · artifactory EPSS 0.64% 1 story 4 months ago 7.2CVSS 3.1 CVE-2026-66015 JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation. Jfrog · artifactory EPSS 0.57% 1 story 4 months ago 6.8CVSS 3.1 CVE-2026-65923 Potential server-side request forgery in Artifactory Ansible repository handling Jfrog · artifactory EPSS 0.35% 1 story 4 months ago 6.5CVSS 3.1 CVE-2026-65924 Server-Side Request Forgery (SSRF) via Terraform Remote repository Jfrog · artifactory EPSS 0.41% 1 story 4 months ago 6.5CVSS 3.1 CVE-2026-65925 Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository Jfrog · artifactory EPSS 0.40% 1 story 4 months ago 6.5CVSS 3.1 CVE-2026-66018 JFrog Artifactory build environment properties exposure Jfrog · artifactory EPSS 0.45% 1 story 4 months ago 8.8CVSS 3.1 CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability Microsoft · Windows 10 Version 1607 EPSS 1.8% 1 story 4 months ago 10.0CVSS 3.1 CVE-2025-55182 Exploited Ransomware Meta React Server Components Remote Code Execution Vulnerability Meta · React Server Components EPSS 100% 2 stories 4 months ago 9.8CVSS 3.1 CVE-2020-8515 Exploited Multiple DrayTek Vigor Routers Web Management Page Vulnerability DrayTek · Multiple Vigor Routers EPSS >99.9% 1 story 4 months ago 9.8CVSS 3.1 CVE-2025-28137 TOTOLINK A810r Firmware vulnerability TOTOLINK · A810r Firmware EPSS 34% 1 story 4 months ago 9.4CVSS 4.0 CVE-2025-34152 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter Shenzhen Aitemi E Commerce · M300 Wi-Fi Repeater EPSS 84% 1 story 4 months ago 8.8CVSS 3.0 CVE-2017-17215 Huawei HG532 vulnerability Huawei · HG532 EPSS 78% 1 story 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.