CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
337 CVEs
EPSSCoverage
4.7CVSS 3.1
CVE-2025-9528
Linksys E1700 systemCommand os command injection
Linksys · E1700
EPSS
54%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8085
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8312
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8313
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8314
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-64600
xfs: resample the data fork mapping after cycling ILOCK
Linux
EPSS
0.47%
1 story
4 months ago
7.2CVSS 3.1
CVE-2025-66376
Exploited
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
EPSS
20%
2 stories
4 months ago
9.1CVSS 3.1
CVE-2026-62144
Management Authentication Bypass and Privilege Escalation
Check Point · Quantum Security Management
EPSS
1.0%
1 story
4 months ago
8.6CVSS 3.1
CVE-2024-24919
Exploited Ransomware
Information disclosure
Check Point · Quantum Security Gateways
EPSS
>99.9%
1 story
4 months ago
7.5CVSS 3.1
CVE-2026-62145
Local Privilege Escalation in Gaia Portal
Check Point · Quantum Security Gateway
EPSS
0.39%
1 story
4 months ago
9.8CVSS 3.1
CVE-2026-63030
Exploited
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress · Core
EPSS
11%
2 stories
4 months ago
5.9CVSS 3.1
CVE-2026-60137
Exploited
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
WordPress · Core
EPSS
5.3%
2 stories
4 months ago
9.5CVSS 4.0
CVE-2026-6875
Sandbox Escape in ServiceNow AI Platform
ServiceNow · AI Platform
EPSS
1.4%
2 stories
4 months ago
9.8CVSS 3.1
CVE-2025-3248
Exploited Ransomware
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
Langflow
EPSS
>99.9%
4 stories
4 months ago
8.1CVSS 3.1
CVE-2026-42533
NGINX Map directive and Regex matching vulnerability
F5 · NGINX Plus
EPSS
6.3%
2 stories
4 months ago
8.4CVSS 4.0
CVE-2025-8088
Exploited Ransomware
Path traversal vulnerability in WinRAR
RARLAB · WinRAR
EPSS
94%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-8863
CVE-2026-8863
Oracle · OracleLinux(7.2) shim
EPSS
0.11%
1 story
4 months ago
TBAPENDING
CVE-2026-10797
Old Microsoft-Signed UEFI Shims Let Attackers Bypass Secure Boot
EPSS
N/A
1 story
4 months ago
9.8CVSS 3.1
CVE-2026-53412
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Zoom · Workplace for Windows
EPSS
0.53%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-53409
Zoom Rooms vulnerability
Zoom · Rooms
EPSS
0.17%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-53411
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Zoom · Workplace VDI Plugin
EPSS
0.14%
1 story
4 months ago
7.0CVSS 3.1
CVE-2026-53410
Zoom Clients for Windows - Race Condition
Zoom · Clients
EPSS
0.10%
1 story
4 months ago
9.9CVSS 3.1
CVE-2026-44747
Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP
SAP · NetWeaver Application Server ABAP
EPSS
0.56%
1 story
4 months ago
9.1CVSS 3.1
CVE-2026-27690
HTTP Request Smuggling in SAP Approuter
SAP · Approuter
EPSS
0.68%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-56155
Exploited
Active Directory Federation Services Elevation of Privilege Vulnerability
Microsoft · Active Directory Federation Services
EPSS
0.35%
2 stories
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.