RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 6.5 mediumEPSS 0.43%Confluence
CVSS 7.5 highEPSS 0.44%Confluence
CVE-2026-15793 Git source checkout from a bundle file could lead to command injection
CVSS 7.5 highEPSS 0.20%Docker
CVE-2026-15792 Possible panic when incorrect parameters sent from frontend
CVSS 7.5 highEPSS 0.24%Docker
CVE-2026-15791 LLB file operation can be tricked to remove /tmp directory contents
CVSS 7.5 highEPSS 0.25%Docker
CVE-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
CVSS 9.8 criticalKEV added EPSS 10.6%WordPress.com
CVE-2026-60137 WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
CVSS 5.9 mediumKEV added EPSS 5.3%WordPress.com
CVE-2026-0770 Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 62.6%
CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability
CVSS 8.1 highKEV added EPSS 4.0%
CVE-2026-64650 AI SDK Codex Harness Tool Relay Authorization Bypass
CVSS 6.3 mediumEPSS 0.17%Vercel
CVE-2026-64651 AI SDK OpenCode Harness Tool Relay Authorization Bypass
CVSS 6.3 mediumEPSS 0.17%Vercel
CVE-2026-50271 dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-50274 dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-50272 dd-trace: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-12283 SQL injection in Amazon Athena Synapse connector
CVSS 6.8 mediumEPSS 0.59%Amazon Web Services
CVE-2026-8075 Posting a malicious markdown image crashes the Mattermost Desktop App
CVSS 6.5 mediumEPSS 0.42%Mattermost
CVE-2026-53412 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
CVSS 9.8 criticalEPSS 0.53%Zoom
CVE-2026-53411 Zoom Workplace VDI Plugin for Windows - Improper Input Validation
CVSS 7.8 highEPSS 0.14%Zoom
CVE-2026-53410 Zoom Clients for Windows - Race Condition
CVSS 7.0 highEPSS 0.10%Zoom
CVSS 7.8 highEPSS 0.17%Zoom
CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python
CVSS 9.2 criticalEPSS 0.18%Snowflake
CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 15.9%
CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 93.2%
CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 76.1%
CVE-2026-15895 OS command injection in jsii-diff in AWS jsii
CVSS 7.8 highEPSS 1.1%Amazon Web Services
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)