RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-14265 RCE via Deserialization in AWS Advanced JDBC Wrapper
CVSS 7.5 highEPSS 0.73%Amazon Web Services
CVE-2026-13760 OS Command Injection in aws-cdk-lib Docker Bundling
CVSS 7.3 highEPSS 1.2%Amazon Web Services
CVE-2026-13769 Overly permissive File Permissions in AWS CLI
CVSS 5.5 mediumEPSS 0.17%Amazon Web Services
CVE-2026-53492 containerd CRI checkpoint restore CDI annotation smuggling
CVSS 9.6 criticalEPSS 0.35%Google Cloud
CVE-2026-50195 containerd: CRI checkpoint import allows local image tag poisoning
CVSS 9.9 criticalEPSS 0.30%Google Cloud
CVE-2026-47262 containerd image-triggered runtime DoS via unbounded group parsing
CVSS 5.5 mediumEPSS 0.26%Google Cloud
CVE-2026-57736 WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability
CVSS 7.4 highEPSS 0.28%HubSpot
CVE-2026-5051 Audit Log Plugin Directory Guard Bypass via Legacy path Option
CVSS 4.4 mediumEPSS 0.38%HashiCorp
CVE-2026-56152 Incorrect Authorization in Kibana Leading to Information Disclosure
CVSS 5.3 mediumEPSS 0.30%Elastic Cloud
CVE-2026-56151 Improper Input Validation in Kibana Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.47%Elastic Cloud
CVE-2026-56148 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.47%Elastic Cloud
CVE-2026-45659 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 80.2%
CVE-2026-56777 n8n - AST Validator Bypass in Python Code Node
CVSS 5.0 mediumEPSS 0.33%n8n
CVE-2026-56356 n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field
CVSS 5.4 mediumEPSS 0.25%n8n
CVE-2026-56350 n8n - SSO Enforcement Bypass via API
CVSS 6.3 mediumEPSS 0.38%n8n
CVE-2026-55276 Apache Tomcat: Logged effective web.xml is incomplete
CVSS 9.1 criticalEPSS 0.61%ConfluenceJira
CVE-2026-53434 Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector
CVSS 9.1 criticalEPSS 0.59%ConfluenceJira
CVE-2026-53404 Apache Tomcat: Bad ornext processing in RewriteValve
CVSS 7.3 highEPSS 0.65%BitbucketConfluenceJira
CVE-2026-13750 Snowflake CLI Sensitive Credential Exposure Through Debug Logging
CVSS 5.5 mediumEPSS 0.15%Snowflake
CVE-2026-48558 SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
CVSS 10.0 criticalKEV added EPSS 77.7%
CVE-2026-4339 SSRF via unvalidated attachment URLs in Mattermost Agents plugin MCP server
CVSS 6.5 mediumEPSS 0.14%Mattermost
CVE-2026-13426 Client4 fails to validate path parameters
CVSS 5.4 mediumEPSS 0.29%Mattermost
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)