RewindexCVEs
CVEs
5,605 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-89066 OS command injection in the task synthesis component in projen
CVSS 7.8 highEPSS 0.23%Amazon Web Services
CVSS 10.0 criticalEPSS 0.43%Mistral AI
CVSS 10.0 criticalEPSS 0.56%Mistral AI
CVSS 10.0 criticalEPSS 0.56%Mistral AI
CVSS 10.0 criticalEPSS 0.56%Mistral AI
CVSS 9.3 criticalEPSS 0.50%Mistral AI
CVSS 9.2 criticalEPSS 0.62%Mistral AI
CVE-2026-19486 SSRF in Gemini Enterprise Agent Platform App Builder
CVSS 8.7 highEPSS 0.42%Google Cloud
CVE-2026-84869 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
CVSS 9.9 criticalKEV added EPSS 0.92%
CVE-2026-42018 Anonymous user token generation exposure in JFrog Artifactory
CVSS 7.5 highKEV added EPSS 9.8%JFrog
CVE-2026-42016 Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
CVSS 8.1 highKEV added EPSS 8.6%JFrog
CVE-2026-88021 Consul vulnerable to an authorization bypass in the Connect service mesh
CVSS 7.5 highEPSS 0.33%HashiCorp
CVE-2026-87107 Consul vulnerable to an authorization bypass in the catalog deregistration path
CVSS 5.4 mediumEPSS 0.31%HashiCorp
CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener
CVSS 6.5 mediumEPSS 0.41%HashiCorp
CVE-2026-85228 Integer overflow in tensor buffer validation in Deep Java Library
CVSS 9.1 criticalEPSS 0.54%Amazon Web Services
CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
CVSS 9.8 criticalKEV added EPSS 6.4%
CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
CVSS 8.2 highKEV added EPSS 1.6%
CVE-2026-85788 Incomplete list of disallowed inputs in awslabs mysql-mcp-server
CVSS 5.5 mediumEPSS 0.18%Amazon Web Services
CVE-2026-79696 Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist
CVSS 10.0 criticalEPSS 0.74%Google Cloud
CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 3.5%
CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 88.5%
CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
CVSS 9.8 criticalKEV added EPSS 32.7%
CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CVSS 7.4 highKEV added EPSS 3.7%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)