RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-20316 Cisco Secure Firewall Management Center Software Static Credential Vulnerability
CVSS 5.3 mediumKEV added EPSS 35.1%
CVE-2026-16812 VeloCloud Orchestrator OS Command Injection
CVSS 10.0 criticalKEV added EPSS 1.0%
CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVSS 5.3 mediumKEV added EPSS 29.5%
CVE-2026-16232 Authentication Bypass in the SmartConsole Login Process Using an Application Token
CVSS 9.8 criticalKEV added EPSS 3.5%
CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 3.0%
CVE-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
CVSS 9.8 criticalKEV added EPSS 10.6%WordPress.com
CVE-2026-60137 WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
CVSS 5.9 mediumKEV added EPSS 5.3%WordPress.com
CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 62.6%
CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability
CVSS 8.1 highKEV added EPSS 4.0%
CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 15.9%
CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 93.2%
CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 76.1%
CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability
CVSS 9.8 criticalKEV added EPSS 12.3%
CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability
CVSS 7.2 highKEV added EPSS 11.8%
CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVSS 10.0 criticalKEV added EPSS 6.8%
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS 5.3 mediumKEV added EPSS 1.0%
CVE-2026-56155 Active Directory Federation Services Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 0.35%
CVE-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability
CVSS 8.1 highKEV added EPSS 33.9%
CVE-2026-56291 Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
CVSS 9.8 criticalKEV added EPSS 14.9%
CVE-2026-48939 Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
CVSS 9.8 criticalKEV added EPSS 20.1%
CVE-2026-56290 Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0
CVSS 9.8 criticalKEV added EPSS 30.9%
CVE-2026-55255 Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
CVSS 8.4 highKEV added EPSS 0.89%
CVE-2026-48908 Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
CVSS 9.8 criticalKEV added EPSS 88.5%
CVE-2026-48282 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CVSS 10.0 criticalKEV added EPSS 42.4%
CVE-2026-45659 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 80.2%
CVE-2026-48558 SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
CVSS 10.0 criticalKEV added EPSS 77.7%
CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
CVSS 8.6 highKEV added EPSS 88.2%
CVE-2026-12569 Remote Code Execution (RCE) vulnerability in Windchill PDMlink
CVSS 9.8 criticalKEV added EPSS 46.0%
CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.0%
CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability
CVSS 10.0 criticalKEV added EPSS 68.0%
CVE-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 88.3%
CVE-2025-67038 Lantronix EDS5000, G520, and X300 OS Command Injection
CVSS 9.8 criticalKEV added EPSS 20.3%
CVE-2026-20253 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
CVSS 9.8 criticalKEV added EPSS 96.9%Splunk
CVE-2026-48907 Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
CVSS 9.8 criticalKEV added EPSS 85.4%
CVE-2026-20262 Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
CVSS 6.5 mediumKEV added EPSS 29.1%
CVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
CVSS 8.5 highKEV added EPSS 1.4%
CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.7%
CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2026-7473 Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
CVSS 5.8 mediumKEV added EPSS 1.1%
CVE-2026-20245 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 25.3%
CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CVSS 8.8 highKEV added EPSS 2.4%
CVE-2026-50751 User Authentication Bypass in VPN Remote Access and Mobile Access
CVSS 9.3 criticalKEV added EPSS 85.3%
CVE-2026-42271 LiteLLM: Authenticated command execution via MCP stdio test endpoints
CVSS 8.8 highKEV added EPSS 91.4%
CVE-2026-28318 SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
CVSS 7.5 highKEV added EPSS 43.7%
CVE-2026-45247 Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection
CVSS 9.8 criticalKEV added EPSS 26.2%
CVE-2025-48595 Android Framework Integer Overflow Vulnerability
CVSS 8.4 highKEV added EPSS 1.9%
CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability
CVSS 7.8 highKEV added EPSS 5.5%
CVE-2024-21182 Oracle WebLogic Server Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 74.2%
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
CVSS 9.1 criticalKEV added EPSS 95.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)