RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-65922 Potential unauthorized modification of Artifactory internal metadata
CVSS 7.1 highEPSS 0.34%JFrog
CVE-2026-65923 Potential server-side request forgery in Artifactory Ansible repository handling
CVSS 6.8 mediumEPSS 0.35%JFrog
CVE-2026-65617 Potential remote code execution on an Artifactory package service container.
CVSS 8.8 highEPSS 0.65%JFrog
CVE-2026-65924 Server-Side Request Forgery (SSRF) via Terraform Remote repository
CVSS 6.5 mediumEPSS 0.41%JFrog
CVE-2026-65925 Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository
CVSS 6.5 mediumEPSS 0.40%JFrog
CVE-2026-65616 Potential privilege escalation to JFrog administrator privileges
CVSS 8.8 highEPSS 0.37%JFrog
CVE-2026-66018 JFrog Artifactory build environment properties exposure
CVSS 6.5 mediumEPSS 0.45%JFrog
CVE-2026-64649 Next.js: Server-Side Request Forgery in Server Actions on Custom Servers
CVSS 6.5 mediumEPSS 0.46%Vercel
CVE-2026-56748 Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import
CVSS 8.8 highEPSS 0.92%Cribl
CVE-2026-65921 Potential path traversal leading to unauthorized file writes
CVSS 8.8 highEPSS 0.59%JFrog
CVE-2026-42017 Privilege escalation via JFrog Worker event token exposure
CVSS 8.8 highEPSS 0.52%JFrog
CVE-2026-56747 Code Injection in JSON Pointer Processing Component in Cribl Stream
CVSS 8.8 highEPSS 0.67%Cribl
CVE-2026-64648 Next.js: Response Body Cache Confusion for Requests Containing Bodies
CVSS 5.4 mediumEPSS 0.34%Vercel
CVE-2026-64647 Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies
CVSS 5.4 mediumEPSS 0.32%Vercel
CVE-2026-64646 Next.js: Unbounded Server Action payload in Edge runtime
CVSS 5.3 mediumEPSS 0.52%Vercel
CVE-2026-64644 Next.js: Denial of Service in the Image Optimization API using SVGs
CVSS 5.3 mediumEPSS 0.67%Vercel
CVE-2026-64643 Next.js: Unauthenticated Disclosure of Internal Server Function endpoints
CVSS 5.3 mediumEPSS 0.51%Vercel
CVE-2026-64641 Next.js: Denial of Service in App Router using Server Actions
CVSS 7.5 highEPSS 0.86%Vercel
CVE-2026-16812 VeloCloud Orchestrator OS Command Injection
CVSS 10.0 criticalKEV added EPSS 1.0%
CVE-2026-10819 Mattermost Server Denial of Service via Animated GIF Emoji Upload
CVSS 6.5 mediumEPSS 0.42%Mattermost
CVE-2026-10600 Denial of service via unbounded document content extraction in Mattermost Server
CVSS 4.3 mediumEPSS 0.37%Mattermost
CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVSS 5.3 mediumKEV added EPSS 29.5%
CVSS 7.5 highEPSS 0.87%Redis
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
CVSS 9.3 criticalEPSS 0.97%Microsoft Azure
CVE-2026-66007 Datasets Path Traversal via Unsanitized file_name Metadata
CVSS 6.5 mediumEPSS 0.55%Hugging Face
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.87%Microsoft Azure
CVE-2026-9765 CVE-2026-9765 CVE Record
CVSS 7.1 highEPSS 0.40%Grafana Cloud
CVE-2026-15810 Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover
CVSS 8.7 highEPSS 0.45%Google Cloud
CVE-2026-16870 Multiple Security Vulnerabilities in Snowflake libsnowflakeclient
CVSS 8.8 highEPSS 1.3%Snowflake
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%Microsoft Azure
CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%Microsoft Azure
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability
CVSS 8.0 highEPSS 0.70%Microsoft Azure
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.79%Microsoft Azure
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability
CVSS 8.5 highEPSS 0.55%Microsoft Azure
CVE-2026-65010 Datasets Symlink-following Arbitrary File Write via Extractor.extract()
CVSS 6.6 mediumEPSS 0.17%Hugging Face
CVE-2026-65920 Diffusers Path Traversal via weight_map Arbitrary File Read
CVSS 4.3 mediumEPSS 0.40%Hugging Face
CVE-2026-16584 AWS API MCP Server Security Policy Bypass via Startup Failure
CVSS 7.0 highEPSS 0.23%Amazon Web Services
CVE-2026-21723 CVE-2026-21723 Record
CVSS 5.3 mediumEPSS 0.22%Grafana Cloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)