RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-114625 Security Advisory 0199
CVSS 9.9 criticalKEV added EPSS 1.0%
CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVSS 9.2 criticalKEV added EPSS 12.3%
CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway
CVSS 9.1 criticalEPSS 0.49%Okta
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.71%Microsoft Azure
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.67%Microsoft Azure
CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder
CVSS 9.2 critical1 incident
CVE-2026-110264 Integer Overflow or Wraparound in GitLab
CVSS 10.0 criticalEPSS 1.0%GitLab1 incident
CVE-2026-76531 Files or Directories Accessible to External Parties in Splunk SOAR
CVSS 9.9 criticalEPSS 0.41%Splunk
CVE-2026-76302 Security Hardening in Splunk Enterprise - October 2026
CVSS 9.9 criticalEPSS 0.40%Splunk
CVE-2026-76299 Security Hardening in Splunk Enterprise - October 2026
CVSS 9.9 criticalEPSS 0.33%Splunk
CVE-2026-114139 Sentry-Javascript: Middleware Bypass when using Tunnel route
CVSS 9.1 criticalEPSS 0.51%Sentry
CVE-2026-109618 RCE via OOM corruption
CVSS 9.8 criticalEPSS 100.0%Amazon Web ServicesGoogle Cloud15 incidents
CVE-2026-112380 Missing authorization in the WhatsApp channel in Kiro Crew
CVSS 9.9 criticalEPSS 0.41%Amazon Web Services
CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVSS 9.8 criticalKEV added EPSS 20.3%
CVE-2026-99999 ipv4: validate checksum_start before completing checksum
CVSS 9.3 criticalEPSS 0.79%Amazon Web Services3 incidents
CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.2%
CVE-2026-105134 Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
CVSS 10.0 criticalKEV added EPSS 86.3%
CVE-2026-92892 Potential command execution on the host running JFrog CLI.
CVSS 9.0 criticalEPSS 0.34%JFrog
CVE-2026-103928 Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions
CVSS 9.3 criticalEPSS 0.41%MetabaseMetabase Cloud
CVE-2026-97229 Integer Overflow or Wraparound in GitLab
CVSS 10.0 criticalEPSS 18.4%GitLab1 incident
CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.72%Microsoft Azure
CVE-2026-69435 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.56%Microsoft Azure
CVE-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.2%
CVE-2015-3306 ProFTPD Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.5%
CVE-2026-76285 Improper Adherence to Coding Standards in Splunk Enterprise
CVSS 9.8 criticalEPSS 0.37%Splunk
CVE-2026-76284 Improper Neutralization in Splunk Enterprise
CVSS 9.8 criticalEPSS 0.43%Splunk
CVE-2026-103956 Missing authentication for critical function in Loom for AWS
CVSS 10.0 criticalEPSS 2.5%Amazon Web Services
CVE-2026-90970 Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
CVSS 9.9 criticalEPSS 17.5%GitLab
CVE-2026-102489 Undisclosed RCE in Zammad v6.3 and higher
CVSS 9.8 criticalKEV added EPSS 2.0%
CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.6%
CVE-2026-76504 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 38.9%
CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)
CVSS 9.1 criticalKEV added EPSS 90.5%
CVE-2026-5430 Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
CVSS 10.0 criticalKEV added EPSS 22.4%
CVE-2026-89078 Double Free in GitLab
CVSS 9.9 criticalEPSS 0.49%GitLab1 incident
CVE-2026-93577 Integer Overflow or Wraparound in GitLab
CVSS 9.9 criticalEPSS 0.59%GitLab1 incident
CVE-2026-96770 s2s-proxy accepts untrusted client certificates
CVSS 9.3 criticalEPSS 0.32%Temporal Cloud
CVE-2026-77987 GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
CVSS 9.8 criticalEPSS 0.88%GitHub
CVE-2026-94127 BIG-IP APM OAuth vulnerability
CVSS 9.8 criticalKEV added EPSS 24.9%
CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server
CVSS 9.8 criticalKEV added EPSS 91.6%
CVE-2026-93952 Security Advisory 0183
CVSS 10.0 criticalKEV added EPSS 1.4%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)