RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.86%Microsoft Azure
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.97%Microsoft Azure
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 1.1%Microsoft Azure
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
CVSS 8.6 highEPSS 1.0%Microsoft Azure
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%Microsoft Azure
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%Microsoft Azure
CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards
CVSS 8.8 highEPSS 0.96%Amazon Web Services
CVE-2026-53424 Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions
CVSS 9.1 criticalEPSS 0.60%Dropbox
CVE-2026-72530 TrueConf Server Code Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 1.7%
CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.5%
CVE-2026-76400 Denial of Service (DoS) through the REST API in Splunk Connect for Kafka
CVSS 5.9 mediumEPSS 0.38%Splunk
CVE-2026-76399 Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit
CVSS 8.1 highEPSS 0.35%Splunk
CVE-2026-76396 Improper Access Control through Scheduled Searches in Splunk AI Toolkit
CVSS 7.5 highEPSS 0.32%Splunk
CVE-2026-76393 Race Condition during Model Upload through the REST API in Splunk AI Toolkit
CVSS 5.9 mediumEPSS 0.18%Splunk
CVE-2026-76392 Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit
CVSS 5.4 mediumEPSS 0.23%Splunk
CVE-2026-76391 Improper Privilege Management through Agent Run History in Splunk AI Toolkit
CVSS 8.3 highEPSS 0.47%Splunk
CVE-2026-76387 SPL Injection through the REST API in Splunk Enterprise Security
CVSS 8.1 highEPSS 0.40%Splunk
CVE-2026-76386 Information Disclosure through Action Parameters in Zoom app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76385 Information Disclosure through Action Parameters in Venafi app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.12%Splunk
CVE-2026-76382 Information Disclosure through Action Parameters in Phantom app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76379 Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76376 Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.19%Splunk
CVE-2026-76374 Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR
CVSS 4.3 mediumEPSS 0.30%Splunk
CVE-2026-76373 Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
CVSS 5.4 mediumEPSS 0.25%Splunk
CVE-2026-76372 Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR
CVSS 6.6 mediumEPSS 0.43%Splunk
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)