RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-48027 Compromised Nx Console version 18.95.0
CVSS 9.8 criticalKEV added EPSS 1.9%
CVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.5%
CVE-2026-45321 Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
CVSS 9.6 criticalKEV added EPSS 3.3%
CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added EPSS 17.9%
CVE-2026-9082 Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
CVSS 9.8 criticalKEV added EPSS 89.4%
CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CVSS 6.7 mediumKEV added EPSS 13.4%
CVE-2025-34291 Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
CVSS 8.8 highKEV added EPSS 92.8%
CVE-2026-41091 Microsoft Defender Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 8.2%
CVE-2026-45498 Microsoft Defender Denial of Service Vulnerability
CVSS 4.0 mediumKEV added EPSS 63.1%
CVE-2010-0806 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 82.2%
CVE-2010-0249 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 91.9%
CVE-2009-3459 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 86.6%
CVE-2009-1537 Microsoft DirectX NULL Byte Overwrite Vulnerability
CVSS 8.8 highKEV added EPSS 51.4%
CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.8%
CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability
CVSS 8.1 highKEV added EPSS 70.7%
CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 91.8%
CVE-2026-42208 LiteLLM: SQL injection in Proxy API key verification
CVSS 9.8 criticalKEV added EPSS 89.4%
CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
CVSS 7.2 highKEV added EPSS 34.5%
CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
CVSS 9.8 criticalKEV added EPSS 41.7%
CVE-2026-31431 crypto: algif_aead - Revert to operating out-of-place
CVSS 7.8 highKEV added EPSS 98.1%5 incidents
CVE-2026-41940 WebPros cPanel and WHM Authentication Bypass via Login Flow
CVSS 9.8 criticalKEV added EPSS 98.5%
CVE-2026-32202 Windows Shell Spoofing Vulnerability
CVSS 4.3 mediumKEV added EPSS 70.9%
CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)
CVSS 8.4 highKEV added EPSS 95.4%
CVE-2025-29635 D-Link DIR-823X Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 87.9%
CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVSS 8.8 highKEV added EPSS 91.9%
CVE-2024-57728 SimpleHelp Path Traversal Vulnerability
CVSS 7.2 highKEV added EPSS 64.5%
CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability
CVSS 9.9 criticalKEV added EPSS 66.4%
CVE-2026-39987 marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 6.7%
CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVSS 6.5 mediumKEV added EPSS 31.5%
CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 7.3%
CVE-2026-20122 Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
CVSS 5.4 mediumKEV added EPSS 25.8%
CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
CVSS 6.1 mediumKEV added EPSS 1.7%
CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
CVSS 10.0 criticalKEV added EPSS 2.5%
CVE-2025-2749 Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE
CVSS 7.2 highKEV added EPSS 4.0%
CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability
CVSS 7.3 highKEV added EPSS 100.0%
CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability
CVSS 8.2 highKEV added EPSS 78.1%
CVE-2026-34197 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
CVSS 8.8 highKEV added EPSS 98.3%
CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 43.4%
CVE-2009-0238 Microsoft Office Remote Code Execution
CVSS 8.8 highKEV added EPSS 42.9%
CVE-2026-34621 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
CVSS 8.6 highKEV added EPSS 7.2%
CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 97.7%
CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 4.6%
CVE-2023-36424 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 12.1%
CVE-2023-21529 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 59.3%
CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 33.5%
CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
CVSS 7.8 highKEV added EPSS 20.9%
CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.6%
CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability
CVSS 9.1 criticalKEV added EPSS 94.0%
CVE-2026-3502 TrueConf Client Update Integrity Verification Bypass
CVSS 7.8 highKEV added EPSS 5.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)