RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-114625 Security Advisory 0199
CVSS 9.9 criticalKEV added EPSS 1.0%
CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVSS 9.2 criticalKEV added EPSS 12.3%
CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVSS 9.8 criticalKEV added EPSS 20.3%
CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.2%
CVE-2026-105134 Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
CVSS 10.0 criticalKEV added EPSS 86.3%
CVE-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.2%
CVE-2015-3306 ProFTPD Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.5%
CVE-2026-102489 Undisclosed RCE in Zammad v6.3 and higher
CVSS 9.8 criticalKEV added EPSS 2.0%
CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.6%
CVE-2026-76504 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 38.9%
CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)
CVSS 9.1 criticalKEV added EPSS 90.5%
CVE-2026-5430 Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
CVSS 10.0 criticalKEV added EPSS 22.4%
CVE-2026-94127 BIG-IP APM OAuth vulnerability
CVSS 9.8 criticalKEV added EPSS 24.9%
CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server
CVSS 9.8 criticalKEV added EPSS 91.6%
CVE-2026-93952 Security Advisory 0183
CVSS 10.0 criticalKEV added EPSS 1.4%
CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway
CVSS 9.8 criticalKEV added EPSS 54.1%
CVE-2025-39682 tls: fix handling of zero-length records on the rx_list
CVSS 9.8 criticalKEV added EPSS 3.3%
CVE-2026-76460 Cisco Identity Services Engine Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 75.6%
CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.5%
CVE-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
CVSS 10.0 criticalKEV added EPSS 97.4%GitLab
CVE-2026-84869 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
CVSS 9.9 criticalKEV added EPSS 0.92%
CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
CVSS 9.8 criticalKEV added EPSS 6.4%
CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 88.5%
CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
CVSS 9.8 criticalKEV added EPSS 32.7%
CVE-2026-86218 pre-authentication remote code execution
CVSS 9.8 criticalKEV added EPSS 15.4%
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
CVSS 10.0 criticalKEV added EPSS 3.9%
CVE-2026-9586 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
CVSS 9.8 criticalKEV added EPSS 19.0%
CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVSS 10.0 criticalKEV added EPSS 8.0%
CVE-2026-82329 Potential authentication bypass leading to administrative access in Artifactory
CVSS 9.8 criticalKEV added EPSS 14.4%JFrog
CVE-2026-49869 Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
CVSS 10.0 criticalKEV added EPSS 2.1%
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
CVSS 9.1 criticalKEV added EPSS 60.9%
CVE-2026-81578 PaperCut MF/NG: Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 83.7%
CVE-2023-49105 ownCloud Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 43.2%
CVE-2026-60004 Gitea Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 24.0%
CVE-2026-8452 Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
CVSS 9.8 criticalKEV added EPSS 1.0%
CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 73.2%
CVE-2026-72530 TrueConf Server Code Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 1.7%
CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.5%
CVE-2026-65400 Apple macOS Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.7%
CVE-2026-59310 vCenter directory-traversal vulnerability
CVSS 9.8 criticalKEV added EPSS 2.6%Google Cloud
CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVSS 9.1 criticalKEV added EPSS 69.5%
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 77.1%
CVE-2026-72898 Metabase SQL injection via password reset endpoint
CVSS 10.0 criticalKEV added EPSS 98.6%MetabaseMetabase Cloud
CVE-2026-63077 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.6%
CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
CVSS 9.8 criticalKEV added EPSS 28.7%
CVE-2026-16812 VeloCloud Orchestrator OS Command Injection
CVSS 10.0 criticalKEV added EPSS 1.0%
CVE-2026-16232 Authentication Bypass in the SmartConsole Login Process Using an Application Token
CVSS 9.8 criticalKEV added EPSS 3.5%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)