RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
CVSS 9.8 criticalKEV added EPSS 94.0%
CVE-2025-64328 FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
CVSS 7.2 highKEV added EPSS 84.6%
CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.2%
CVE-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
CVSS 6.8 mediumKEV added EPSS 36.1%GitLab
CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.9%
CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.7%
CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVSS 9.4 criticalKEV added EPSS 86.6%
CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 70.8%
CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
CVSS 9.8 criticalKEV added EPSS 96.4%
CVE-2025-52691 Upload Arbitrary Files
CVSS 10.0 criticalKEV added EPSS 85.7%
CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 14.7%
CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 22.4%
CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
CVSS 8.8 highKEV added EPSS 48.9%
CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
CVSS 7.5 highKEV added EPSS 5.1%
CVE-2025-34026 Versa Concerto Actuator Authentication Bypass Information Leak
CVSS 7.5 highKEV added EPSS 81.8%
CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
CVSS 5.3 mediumKEV added EPSS 65.8%
CVE-2026-20045 Cisco Unified Communications Products Remote Code Execution Vulnerability
CVSS 8.2 highKEV added EPSS 4.5%
CVE-2026-20805 Desktop Window Manager Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 7.5%
CVE-2025-8110 File overwrite in file update API in Gogs
CVSS 8.8 highKEV added EPSS 85.2%
CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.2%
CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability
CVSS 8.8 highKEV added EPSS 67.3%
CVE-2025-14847 Zlib compressed protocol header length confusion may allow memory read
CVSS 7.5 highKEV added EPSS 83.2%MongoDB Atlas1 incident
CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability
CVSS 8.8 highKEV added EPSS 96.9%
CVE-2025-14733 WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.4%
CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability
CVSS 6.6 mediumKEV added EPSS 2.8%
CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability
CVSS 8.8 highKEV added EPSS 25.7%
CVE-2025-20393 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 32.4%
CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.2%
CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVSS 9.1 criticalKEV added EPSS 68.3%
CVE-2025-14611 Gladinet CentreStack and TrioFox Hard Coded AES Keys
CVSS 9.8 criticalKEV added EPSS 53.3%
CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability
CVSS 8.8 highKEV added EPSS 55.3%
CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
CVSS 8.8 highKEV added EPSS 27.3%
CVE-2025-58360 GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
CVSS 8.2 highKEV added EPSS 60.0%
CVE-2025-62221 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.5%
CVE-2025-6218 RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 90.5%
CVE-2025-48633 Android Framework Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 0.26%
CVE-2025-48572 Android Framework Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 0.26%
CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 3.4%
CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.5%
CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.8%Vercel2 incidents
CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
CVSS 8.8 highKEV added EPSS 39.1%
CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability
CVSS 5.4 mediumKEV added EPSS 48.1%
CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.6%
CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 4.9%
CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability
CVSS 6.7 mediumKEV added EPSS 54.7%
CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 91.1%
CVE-2025-9242 WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.8%
CVE-2025-62215 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 4.5%
CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability
CVSS 9.1 criticalKEV added EPSS 95.7%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)