RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.1%
CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 63.6%
CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 89.3%
CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability
CVSS 9.9 criticalKEV added EPSS 99.7%
CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
CVSS 10.0 criticalKEV added EPSS 13.5%
CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.6%
CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
CVSS 9.8 criticalKEV added EPSS 93.1%
CVE-2024-43468 Microsoft Configuration Manager Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 81.0%
CVE-2026-24423 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
CVSS 9.8 criticalKEV added EPSS 88.2%
CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
CVSS 9.8 criticalKEV added EPSS 94.0%
CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.2%
CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.9%
CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.7%
CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVSS 9.4 criticalKEV added EPSS 86.6%
CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
CVSS 9.8 criticalKEV added EPSS 96.4%
CVE-2025-52691 Upload Arbitrary Files
CVSS 10.0 criticalKEV added EPSS 85.7%
CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 22.4%
CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.2%
CVE-2025-14733 WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.4%
CVE-2025-20393 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 32.4%
CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.2%
CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVSS 9.1 criticalKEV added EPSS 68.3%
CVE-2025-14611 Gladinet CentreStack and TrioFox Hard Coded AES Keys
CVSS 9.8 criticalKEV added EPSS 53.3%
CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.5%
CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.8%Vercel2 incidents
CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.6%
CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 91.1%
CVE-2025-9242 WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.8%
CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability
CVSS 9.1 criticalKEV added EPSS 95.7%
CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 99.7%
CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-6205 Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.1 criticalKEV added EPSS 73.7%
CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-54236 Adobe Commerce | Improper Input Validation (CWE-20)
CVSS 9.1 criticalKEV added EPSS 94.7%
CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.8%
CVE-2025-2747 Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2025-2746 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 74.1%
CVE-2025-54253 Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVSS 10.0 criticalKEV added EPSS 88.3%
CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 19.2%
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.1%
CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVSS 9.3 criticalKEV added EPSS 55.5%
CVE-2025-10035 Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVSS 10.0 criticalKEV added EPSS 99.8%
CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
CVSS 9.9 criticalKEV added EPSS 71.2%
CVE-2025-5086 Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.0 criticalKEV added EPSS 96.9%
CVE-2025-53690 Sitecore Products ViewState Deserialization Vulnerability
CVSS 9.0 criticalKEV added EPSS 60.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)