RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway
CVSS 9.8 criticalKEV added EPSS 54.1%
CVE-2025-39682 tls: fix handling of zero-length records on the rx_list
CVSS 9.8 criticalKEV added EPSS 3.3%
CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%Microsoft Azure
CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.33%Microsoft Azure
CVE-2026-85889 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.67%Microsoft Azure
CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.60%Microsoft Azure
CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.79%Microsoft Azure
CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.44%Microsoft Azure
CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.48%Microsoft Azure
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%Microsoft Azure
CVE-2026-76460 Cisco Identity Services Engine Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 75.6%
CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.5%
CVE-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
CVSS 10.0 criticalKEV added EPSS 97.4%GitLab
CVE-2026-87719 Deserialization of Untrusted Data in GitLab
CVSS 9.9 criticalEPSS 0.57%GitLab
CVSS 10.0 criticalEPSS 0.43%Mistral AI
CVSS 10.0 criticalEPSS 0.56%Mistral AI
CVSS 10.0 criticalEPSS 0.56%Mistral AI
CVSS 10.0 criticalEPSS 0.56%Mistral AI
CVSS 9.3 criticalEPSS 0.50%Mistral AI
CVSS 9.2 criticalEPSS 0.62%Mistral AI
CVE-2026-84869 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
CVSS 9.9 criticalKEV added EPSS 0.92%
CVE-2026-85228 Integer overflow in tensor buffer validation in Deep Java Library
CVSS 9.1 criticalEPSS 0.54%Amazon Web Services
CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
CVSS 9.8 criticalKEV added EPSS 6.4%
CVE-2026-79696 Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist
CVSS 10.0 criticalEPSS 0.74%Google Cloud
CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 88.5%
CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
CVSS 9.8 criticalKEV added EPSS 32.7%
CVE-2026-86218 pre-authentication remote code execution
CVSS 9.8 criticalKEV added EPSS 15.4%
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
CVSS 10.0 criticalKEV added EPSS 3.9%
CVSS 9.6 criticalEPSS 0.39%Canva
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-9586 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
CVSS 9.8 criticalKEV added EPSS 19.0%
CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVSS 10.0 criticalKEV added EPSS 8.0%
CVE-2026-82329 Potential authentication bypass leading to administrative access in Artifactory
CVSS 9.8 criticalKEV added EPSS 14.4%JFrog
CVE-2026-49869 Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
CVSS 10.0 criticalKEV added EPSS 2.1%
CVE-2026-75604 Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
CVSS 9.0 criticalEPSS 2.1%Vercel
CVSS 9.8 criticalEPSS 0.52%OpenAI
CVE-2026-19410 Google Cloud Build Comment Control Bypass via Webhook Suppression
CVSS 9.4 criticalEPSS 0.20%Google Cloud
CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
CVSS 9.1 criticalKEV added EPSS 60.9%
CVE-2026-81578 PaperCut MF/NG: Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 83.7%
CVE-2023-49105 ownCloud Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 43.2%
CVE-2026-60004 Gitea Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 24.0%
CVE-2026-19485 Bucket Squatting in Vertex AI Search for Commerce
CVSS 9.3 criticalEPSS 0.38%Google Cloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)