RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-19197 Broken access control in dashboard snapshots
CVSS 6.3 mediumEPSS 0.15%Grafana Cloud
CVE-2026-8452 Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
CVSS 9.8 criticalKEV added EPSS 1.0%
CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 8.9%
CVE-2021-23758 Deserialization of Untrusted Data
CVSS 8.1 highKEV added EPSS 82.6%
CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 57.3%
CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 5.0%
CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability
CVSS 7.4 highKEV added EPSS 8.5%
CVE-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases
CVSS 8.1 highEPSS 0.46%ConfluenceJira
CVE-2026-68525 Apache Tomcat: Redirect after FORM auth may bypass method specific constraints
CVSS 9.1 criticalEPSS 0.49%Confluence
CVE-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication
CVSS 9.8 criticalEPSS 0.56%Confluence
CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint
CVSS 9.1 criticalEPSS 0.54%Confluence
CVE-2026-77585 Improper Validation of SSH Target in Okta Privileged Access Client
CVSS 5.3 mediumEPSS 0.14%Okta
CVE-2026-70548 SSRF In CocoaPods Via JFrog Artifactory External Dependency
CVSS 3.5 lowEPSS 0.29%JFrog
CVE-2026-69104 Potential unauthorized repository migration in JFrog Artifactory
CVSS 7.6 highEPSS 0.31%JFrog
CVE-2026-70551 Server-Side Request Forgery Via VCS remote download in JFrog Artifactory
CVSS 8.5 highEPSS 0.30%JFrog
CVE-2026-17033 CVE-2026-17033 CVE Record
CVSS 6.8 mediumEPSS 0.22%Grafana Cloud
CVE-2026-59568 Remote Code Execution
CVSS 9.1 criticalEPSS 0.66%Zscaler
CVE-2026-59567 Local privilege escalation
CVSS 8.8 highEPSS 0.15%Zscaler
CVE-2026-59566 Local denial-of-service
CVSS 8.4 highEPSS 0.18%Zscaler
CVE-2026-59565 Local and kernel denial-of-service
CVSS 8.8 highEPSS 0.48%Zscaler
CVE-2026-59564 Authentication bypass between ZCC and client connector portal
CVSS 9.1 criticalEPSS 0.53%Zscaler
CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 73.2%
CVE-2026-62243 Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass
CVSS 7.5 highEPSS 0.16%ConfluenceJira
CVE-2026-12710 Missing Authorization in Application Integration QueryEngineTask
CVSS 9.3 criticalEPSS 0.41%Google Cloud
CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
CVSS 9.9 criticalEPSS 0.63%Amazon Web Services
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
CVSS 8.9 highKEV added EPSS 71.7%
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability
CVSS 7.7 highEPSS 0.84%Microsoft Azure
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability
CVSS 8.5 highEPSS 0.57%Microsoft Azure
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.94%Microsoft Azure
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability
CVSS 8.5 highEPSS 0.74%Microsoft Azure
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%Microsoft Azure
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability
CVSS 8.6 highEPSS 0.97%Microsoft Azure
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)