RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-114625 Security Advisory 0199
CVSS 9.9 criticalKEV added EPSS 1.0%
CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVSS 9.2 criticalKEV added EPSS 12.3%
CVE-2026-96656 Plex Media Server arbitrary file write
CVSS 7.2 highKEV added EPSS 1.8%
CVE-2026-96655 Plex Media Server arbitrary-host SSRF
CVSS 4.3 mediumKEV added EPSS 1.6%
CVE-2026-96654 Plex Media Server URL injection
CVSS 6.5 mediumKEV added EPSS 1.9%
CVE-2026-96652 Plex Media Server SSRF
CVSS 4.3 mediumKEV added EPSS 1.8%
CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability
CVSS 6.7 mediumKEV added EPSS 0.97%
CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CVSS 7.8 highKEV added EPSS 2.5%
CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVSS 9.8 criticalKEV added EPSS 20.3%
CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability
CVSS 5.4 mediumKEV added EPSS 1.3%
CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVSS 7.5 highKEV added EPSS 99.5%BitbucketConfluenceJira
CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
CVSS 7.2 highKEV added EPSS 1.7%
CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.2%
CVE-2026-105134 Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
CVSS 10.0 criticalKEV added EPSS 86.3%
CVE-2026-105133 Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
CVSS 7.3 highKEV added EPSS 79.2%
CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 9.8%
CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVSS 8.6 highKEV added EPSS 86.8%
CVE-2023-22894 Strapi Cleartext Storage of Sensitive Information Vulnerability
CVSS 7.2 highKEV added EPSS 4.1%Strapi Cloud
CVE-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.2%
CVE-2016-3081 Apache Struts Command Injection Vulnerability
CVSS 8.1 highKEV added EPSS 96.5%
CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability
CVSS 7.5 highKEV added EPSS 99.6%
CVE-2015-3306 ProFTPD Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.5%
CVE-2026-88779 Memory overflow vulnerability leading to Denial of Service
CVSS 7.5 highKEV added EPSS 11.4%
CVE-2026-102490 Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
CVSS 7.8 highKEV added EPSS 0.86%
CVE-2026-102489 Undisclosed RCE in Zammad v6.3 and higher
CVSS 9.8 criticalKEV added EPSS 2.0%
CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.6%
CVE-2026-76504 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 38.9%
CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 26.2%
CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
CVSS 8.1 highKEV added EPSS 78.2%
CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability
CVSS 8.1 highKEV added EPSS 95.8%WordPress.com
CVE-2026-67279 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
CVSS 6.5 mediumKEV added EPSS 2.3%
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 8.2%
CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)
CVSS 9.1 criticalKEV added EPSS 90.5%
CVE-2026-5430 Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
CVSS 10.0 criticalKEV added EPSS 22.4%
CVE-2026-94127 BIG-IP APM OAuth vulnerability
CVSS 9.8 criticalKEV added EPSS 24.9%
CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server
CVSS 9.8 criticalKEV added EPSS 91.6%
CVE-2026-93952 Security Advisory 0183
CVSS 10.0 criticalKEV added EPSS 1.4%
CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway
CVSS 9.8 criticalKEV added EPSS 54.1%
CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 2.8%
CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable
CVSS 8.8 highKEV added EPSS 0.93%
CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2025-39682 tls: fix handling of zero-length records on the rx_list
CVSS 9.8 criticalKEV added EPSS 3.3%
CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability
CVSS 7.8 highKEV added EPSS 0.23%
CVE-2026-76460 Cisco Identity Services Engine Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 75.6%
CVE-2026-58704 Google Pixel Improper Authorization Vulnerability
CVSS 8.8 highKEV added EPSS 0.63%
CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.5%
CVE-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
CVSS 10.0 criticalKEV added EPSS 97.4%GitLab
CVE-2026-84869 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
CVSS 9.9 criticalKEV added EPSS 0.92%
CVE-2026-42018 Anonymous user token generation exposure in JFrog Artifactory
CVSS 7.5 highKEV added EPSS 9.8%JFrog
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)