RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-58061 CCM-family modes write plaintext to caller buffer before tag check
CVSS 7.5 highEPSS 0.28%ConfluenceJira
CVE-2026-58062 Stapled OCSP response accepted without binding to the checked certificate
CVSS 9.1 criticalEPSS 0.36%ConfluenceJira
CVE-2026-59639 CMS verifySignatures returns true for SignedData with zero signers
CVSS 7.5 highEPSS 0.24%ConfluenceJira
CVE-2026-59641 S/MIME validator trusts signer-asserted signingTime for path validation
CVSS 5.3 mediumEPSS 0.18%Confluence
CVE-2026-59650 MTI/A0 DH agreement exponentiates unvalidated peer value
CVSS 9.1 criticalEPSS 0.34%ConfluenceJira
CVE-2026-59651 BKS keystore accepts legacy version with 16-bit integrity MAC key
CVSS 7.5 highEPSS 0.20%ConfluenceJira
CVE-2026-8763 Name Constraints bypass via trailing dot in rfc822Name and URI
CVSS 9.1 criticalEPSS 0.43%ConfluenceJira
CVE-2026-9856 Path Traversal in huggingface/transformers
CVSS 7.1 highEPSS 0.46%Hugging Face
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-41709 ESX insufficient logging vulnerability
CVSS 2.7 lowEPSS 0.30%Google Cloud
CVE-2026-41703 Out-of-bounds read vulnerability
CVSS 7.6 highEPSS 0.43%Google Cloud
CVE-2026-47876 VMXNET3 out-of-bounds write vulnerability
CVSS 9.3 criticalEPSS 0.19%Google Cloud
CVE-2026-59309 vCenter authentication-bypass vulnerability
CVSS 9.8 criticalEPSS 0.61%Google Cloud
CVE-2025-14562 Incorrect Authorization in GitLab
CVSS 3.1 lowEPSS 0.28%GitLab
CVE-2026-4672 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.39%GitLab
CVE-2026-6267 Insertion of Sensitive Information Into Sent Data in GitLab
CVSS 8.5 highEPSS 0.61%GitLab
CVE-2026-6336 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.46%GitLab
CVE-2026-13113 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
CVSS 6.5 mediumEPSS 0.26%GitLab
CVE-2026-14341 Missing Authorization in GitLab
CVSS 4.9 mediumEPSS 0.53%GitLab
CVE-2026-14351 Exposure of Sensitive Information Through Metadata in GitLab
CVSS 4.3 mediumEPSS 0.40%GitLab
CVE-2026-15077 Improper Neutralization of Input Used for LLM Prompting in GitLab
CVSS 4.3 mediumEPSS 0.31%GitLab
CVE-2026-15831 Generation of Incorrect Security Tokens in GitLab
CVSS 4.3 mediumEPSS 0.30%GitLab
CVE-2026-15975 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.51%GitLab
CVE-2026-16553 Insufficiently Protected Credentials in GitLab
CVSS 5.4 mediumEPSS 0.34%GitLab
CVE-2026-20316 Cisco Secure Firewall Management Center Software Static Credential Vulnerability
CVSS 5.3 mediumKEV added EPSS 35.1%
CVE-2026-67214 nanoid Infinite Loop via Negative Size in non-secure module
CVSS 5.9 mediumEPSS 0.33%ConfluenceJira
CVE-2026-55685 React Router: Unauthenticated Denial of Service via Inefficient Route Matching
CVSS 7.5 highEPSS 0.71%Jira
CVSS 8.6 high1 incident
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)