RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-42016 Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
CVSS 8.1 highKEV added EPSS 8.6%JFrog
CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
CVSS 9.8 criticalKEV added EPSS 6.4%
CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
CVSS 8.2 highKEV added EPSS 1.6%
CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 3.5%
CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 88.5%
CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
CVSS 9.8 criticalKEV added EPSS 32.7%
CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CVSS 7.4 highKEV added EPSS 3.7%
CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 0.39%
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 0.39%
CVE-2026-86218 pre-authentication remote code execution
CVSS 9.8 criticalKEV added EPSS 15.4%
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
CVSS 10.0 criticalKEV added EPSS 3.9%
CVE-2026-85046 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 1.8%
CVE-2026-9586 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
CVSS 9.8 criticalKEV added EPSS 19.0%
CVE-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability
CVSS 7.8 highKEV added EPSS 9.9%
CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVSS 10.0 criticalKEV added EPSS 8.0%
CVE-2026-82329 Potential authentication bypass leading to administrative access in Artifactory
CVSS 9.8 criticalKEV added EPSS 14.4%JFrog
CVE-2026-59822 LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
CVSS 8.2 highKEV added EPSS 0.84%
CVE-2026-49869 Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
CVSS 10.0 criticalKEV added EPSS 2.1%
CVE-2026-48710 Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
CVSS 6.5 mediumKEV added EPSS 70.3%
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
CVSS 9.1 criticalKEV added EPSS 60.9%
CVE-2026-81578 PaperCut MF/NG: Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 83.7%
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
CVSS 5.3 mediumKEV added EPSS 0.66%JFrog
CVE-2026-53362 ipv6: account for fraggap on the paged allocation path
CVSS 7.8 highKEV added EPSS 0.71%
CVE-2023-49105 ownCloud Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 43.2%
CVE-2026-60004 Gitea Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 24.0%
CVE-2026-8452 Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
CVSS 9.8 criticalKEV added EPSS 1.0%
CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 8.9%
CVE-2021-23758 Deserialization of Untrusted Data
CVSS 8.1 highKEV added EPSS 82.6%
CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 57.3%
CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 5.0%
CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability
CVSS 7.4 highKEV added EPSS 8.5%
CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 73.2%
CVE-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
CVSS 8.9 highKEV added EPSS 71.7%
CVE-2026-72530 TrueConf Server Code Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 1.7%
CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.5%
CVE-2026-65400 Apple macOS Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.7%
CVE-2026-59310 vCenter directory-traversal vulnerability
CVSS 9.8 criticalKEV added EPSS 2.6%Google Cloud
CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVSS 9.1 criticalKEV added EPSS 69.5%
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 77.1%
CVE-2025-62593 Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
CVSS 8.8 highKEV added EPSS 62.5%
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 0.33%
CVE-2026-72898 Metabase SQL injection via password reset endpoint
CVSS 10.0 criticalKEV added EPSS 98.6%MetabaseMetabase Cloud
CVE-2026-63077 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.6%
CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
CVSS 9.8 criticalKEV added EPSS 28.7%
CVE-2026-34486 Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
CVSS 7.5 highKEV added EPSS 98.5%Jira
CVE-2026-18556 Unauthenticated administrative account takeover
CVSS 7.4 highKEV added EPSS 7.9%
CVE-2026-18577 Incomplete patch leads to administrative account takeover
CVSS 8.1 highKEV added EPSS 14.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)