RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-19016 Authorization bypass for session deletion in the transaction API
CVSS 4.2 mediumEPSS 0.27%HashiCorp
CVSS 5.5 mediumEPSS 0.16%Datadog
CVSS 6.5 mediumEPSS 0.34%Datadog
CVSS 6.5 mediumEPSS 0.44%Datadog
CVSS 6.3 mediumEPSS 0.26%Datadog
CVSS 6.4 mediumEPSS 0.29%Datadog
CVSS 4.6 mediumEPSS 0.24%Datadog
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 1.7%Microsoft Azure
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Teams
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%Microsoft Azure
CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability
CVSS 9.6 criticalEPSS 0.69%Microsoft Azure
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.93%Microsoft Azure
CVE-2026-62918 Microsoft Teams Spoofing Vulnerability
CVSS 7.5 highEPSS 0.49%Microsoft Teams
CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.82%Microsoft Azure
CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.69%Microsoft Teams
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
CVSS 8.7 highEPSS 0.65%Microsoft Azure
CVE-2026-63077 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.6%
CVE-2026-9198 Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
CVSS 9.8 criticalKEV added EPSS 28.7%
CVE-2026-34486 Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
CVSS 7.5 highKEV added EPSS 98.5%Jira
CVE-2026-18556 Unauthenticated administrative account takeover
CVSS 7.4 highKEV added EPSS 7.9%
CVE-2026-18577 Incomplete patch leads to administrative account takeover
CVSS 8.1 highKEV added EPSS 14.6%
CVE-2026-13506 Lazy ASN.1 sequence forcing resets nesting-depth guard
CVSS 7.5 highEPSS 0.49%ConfluenceJira
CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
CVSS 5.3 mediumEPSS 0.17%ConfluenceJira
CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split
CVSS 7.5 highEPSS 0.18%ConfluenceJira
CVE-2026-58059 Quadratic-time escaping when stringifying X.500 distinguished names
CVSS 7.5 highEPSS 0.49%ConfluenceJira
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)