RewindexCVEs
CVEs
5,605 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-114625 Security Advisory 0199
CVSS 9.9 criticalKEV added EPSS 1.0%
CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVSS 9.2 criticalKEV added EPSS 12.3%
CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway
CVSS 9.1 criticalEPSS 0.49%Okta
CVE-2026-115546 Authentication Source Verification Issue in Okta Access Gateway
CVSS 8.1 highEPSS 0.42%Okta
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.71%Microsoft Azure
CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 7.7 highEPSS 0.70%Microsoft Azure
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.67%Microsoft Azure
CVE-2026-114643 Duplicate geometry fields via unvalidated GeoJSON extra members
CVSS 5.4 mediumEPSS 0.37%MongoDB Atlas
CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI
CVSS 7.8 highEPSS 0.88%Amazon Web Services
CVE-2026-94482 Next.js: Denial of Service in App Router using Server Actions
CVSS 8.2 highEPSS 0.37%Vercel
CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder
CVSS 9.2 critical1 incident
CVE-2024-58394 Retool 3.88.0 XSS via /api/imageProxy SVG Proxying
CVSS 6.1 mediumEPSS 0.20%Retool
CVE-2026-13411 Null condition in Playbooks import crashes the plugin
CVSS 4.3 mediumEPSS 0.32%Mattermost
CVE-2026-93471 Unbounded SAML message decompression in esaml allows memory exhaustion
CVSS 8.7 highEPSS 0.44%Dropbox
CVE-2026-110264 Integer Overflow or Wraparound in GitLab
CVSS 10.0 criticalEPSS 1.0%GitLab1 incident
CVE-2026-12664 Incorrect Authorization in GitLab
CVSS 6.8 mediumEPSS 0.33%GitLab
CVE-2026-13319 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 4.3 mediumEPSS 0.22%GitLab
CVE-2026-14288 Use of Incorrectly-Resolved Name or Reference in GitLab
CVSS 3.1 lowEPSS 0.24%GitLab
CVE-2026-16255 Incorrect Authorization in GitLab
CVSS 5.9 mediumEPSS 0.21%GitLab
CVE-2026-103515 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.23%GitLab
CVE-2026-105711 Use of Cache Containing Sensitive Information in GitLab
CVSS 3.5 lowEPSS 0.21%GitLab
CVE-2026-105777 Insertion of Sensitive Information Into Sent Data in GitLab
CVSS 4.3 mediumEPSS 0.25%GitLab
CVE-2026-112378 Use of Less Trusted Source in GitLab
CVSS 4.3 mediumEPSS 0.12%GitLab
CVE-2026-112326 Improper Cleanup on Thrown Exception in GitLab
CVSS 3.1 lowEPSS 0.18%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)