RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-8452 Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
CVSS 9.8 criticalKEV added EPSS 1.0%
CVE-2026-68525 Apache Tomcat: Redirect after FORM auth may bypass method specific constraints
CVSS 9.1 criticalEPSS 0.49%Confluence
CVE-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication
CVSS 9.8 criticalEPSS 0.56%Confluence
CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint
CVSS 9.1 criticalEPSS 0.54%Confluence
CVE-2026-59568 Remote Code Execution
CVSS 9.1 criticalEPSS 0.66%Zscaler
CVE-2026-59564 Authentication bypass between ZCC and client connector portal
CVSS 9.1 criticalEPSS 0.53%Zscaler
CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 73.2%
CVE-2026-12710 Missing Authorization in Application Integration QueryEngineTask
CVSS 9.3 criticalEPSS 0.41%Google Cloud
CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
CVSS 9.9 criticalEPSS 0.63%Amazon Web Services
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.94%Microsoft Azure
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%Microsoft Azure
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.86%Microsoft Azure
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.97%Microsoft Azure
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 1.1%Microsoft Azure
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%Microsoft Azure
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%Microsoft Azure
CVE-2026-53424 Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions
CVSS 9.1 criticalEPSS 0.60%Dropbox
CVE-2026-72530 TrueConf Server Code Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 1.7%
CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.5%
CVE-2026-76312 Improper Access Control through Embedded Reports in Splunk Enterprise
CVSS 9.4 criticalEPSS 0.45%Splunk
CVE-2026-76311 Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise
CVSS 9.4 criticalEPSS 0.45%Splunk
CVE-2026-76310 Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise
CVSS 9.4 criticalEPSS 0.45%Splunk
CVE-2026-65400 Apple macOS Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.7%
CVE-2026-59310 vCenter directory-traversal vulnerability
CVSS 9.8 criticalKEV added EPSS 2.6%Google Cloud
CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVSS 9.1 criticalKEV added EPSS 69.5%
CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 77.1%
CVE-2026-19478 Improper Control of Generation of Code ('Code Injection') in GitLab
CVSS 9.4 criticalEPSS 2.2%GitLab
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 9.4 criticalEPSS 0.83%Microsoft Azure
CVE-2026-19516 CVE-2026-19516 CVE Record
CVSS 9.1 criticalEPSS 0.31%Grafana Cloud
CVE-2026-72898 Metabase SQL injection via password reset endpoint
CVSS 10.0 criticalKEV added EPSS 98.6%MetabaseMetabase Cloud
CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion
CVSS 9.3 criticalEPSS 0.46%Firecrawl
CVE-2026-72899 Metabase SQL injection via public card or dashboard
CVSS 10.0 criticalEPSS 0.79%MetabaseMetabase Cloud
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 1.7%Microsoft Azure
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Teams
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%Microsoft Azure
CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability
CVSS 9.6 criticalEPSS 0.69%Microsoft Azure
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.93%Microsoft Azure
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)