RewindexCVEs
CVEs
5,605 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-25684 File Type Control rule bypass
CVSS 4.4 mediumEPSS 0.20%Zscaler
CVE-2026-53266 netfilter: bridge: make ebt_snat ARP rewrite writable
CVSS 8.8 highKEV added EPSS 0.93%
CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2025-39682 tls: fix handling of zero-length records on the rx_list
CVSS 9.8 criticalKEV added EPSS 3.3%
CVE-2026-83946 Azure Portal Spoofing Vulnerability
CVSS 8.2 highEPSS 0.32%Microsoft Azure
CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%Microsoft Azure
CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.33%Microsoft Azure
CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability
CVSS 7.8 highKEV added EPSS 0.23%
CVE-2026-85917 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 7.5 highEPSS 0.97%Microsoft Azure
CVE-2026-85889 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.67%Microsoft Azure
CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.60%Microsoft Azure
CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.79%Microsoft Azure
CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.44%Microsoft Azure
CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability
CVSS 8.6 highEPSS 0.54%Microsoft Azure
CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.48%Microsoft Azure
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%Microsoft Azure
CVE-2026-15815 CVE-2026-15815 CVE Record
CVSS 8.8 highEPSS 0.69%Grafana Cloud
CVE-2026-93395 Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()
CVSS 5.3 mediumEPSS 0.40%MongoDB Atlas
CVE-2026-93394 libmongoc SCRAM client nonce-validation bypass
CVSS 3.7 lowEPSS 0.32%MongoDB Atlas
CVE-2026-76154 CVE-2026-76154 CVE Record
CVSS 7.3 highEPSS 0.35%Grafana Cloud
CVE-2026-50277 dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-50275 Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.68%Datadog
CVE-2026-92757 Malformed connection string may disable field level encryption
CVSS 5.5 mediumEPSS 0.07%MongoDB Atlas
CVE-2026-92758 Logs may collect sensitive information
CVSS 5.5 mediumEPSS 0.15%MongoDB Atlas
CVE-2026-92756 Combining encryption settings may disable encryption
CVSS 5.5 mediumEPSS 0.07%MongoDB Atlas
CVE-2026-89036 Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter
CVSS 8.8 highEPSS 0.70%Appwrite
CVE-2026-75588 Mattermost Desktop App plugin popout scheme validation bypass
CVSS 2.6 lowEPSS 0.22%Mattermost
CVSS 4.3 mediumEPSS 0.28%Canva
CVSS 7.7 highEPSS 0.15%Canva
CVE-2026-92813 Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass
CVSS 4.9 mediumEPSS 0.47%MetabaseMetabase Cloud
CVE-2026-92750 Harness through 3.3.0 Missing Access Control via infraproviders endpoint
CVSS 6.5 mediumEPSS 0.28%Harness
CVE-2026-76460 Cisco Identity Services Engine Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 75.6%
CVE-2026-75025 Mattermost Desktop local network access from server-rendered content
CVSS 4.7 mediumEPSS 0.16%Mattermost
CVE-2026-86341 Access Control Check Implemented After Asset is Accessed in GitLab
CVSS 4.4 mediumEPSS 0.36%GitLab
CVE-2024-11222 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
CVSS 6.4 mediumEPSS 0.36%GitLab
CVE-2025-14871 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.64%GitLab
CVE-2026-1168 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.64%GitLab
CVE-2026-3855 Improper Control of Resource Identifiers ('Resource Injection') in GitLab
CVSS 3.1 lowEPSS 0.34%GitLab
CVE-2026-7514 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.38%GitLab
CVE-2026-8030 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.51%GitLab
CVE-2026-16794 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.39%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)