RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-9743 Aggregation sub-pipeline null dereference may allow DoS via crafted getMore
CVSS 6.5 mediumEPSS 0.31%MongoDB Atlas
CVE-2026-9741 Client side encryption fails to encrypt values in a $vectorSearch
CVSS 6.5 mediumEPSS 0.10%MongoDB Atlas
CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.75%Microsoft Azure
CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability
CVSS 8.4 highEPSS 0.83%Microsoft Azure
CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
CVSS 8.8 highEPSS 0.34%Microsoft Azure
CVE-2026-7473 Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
CVSS 5.8 mediumKEV added EPSS 1.1%
CVE-2026-20245 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 25.3%
CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CVSS 8.8 highKEV added EPSS 2.4%
CVE-2026-41850 Spring Framework Algorithmic Denial of Service via SpEL Expressions
CVSS 7.5 highEPSS 0.39%Confluence
CVE-2026-41845 Spring Framework Cross-site Scripting via JavaScriptUtils
CVSS 7.1 highEPSS 0.16%ConfluenceJira
CVE-2026-40983 Micrometer gRPC server instrumentation DoS vulnerability
CVSS 7.5 highEPSS 0.63%BitbucketConfluenceJira
CVE-2026-50751 User Authentication Bypass in VPN Remote Access and Mobile Access
CVSS 9.3 criticalKEV added EPSS 85.3%
CVE-2026-11500 Weaviate Static API Key client.go validateConfig authorization
CVSS 5.0 mediumEPSS 0.34%Weaviate
CVE-2026-42271 LiteLLM: Authenticated command execution via MCP stdio test endpoints
CVSS 8.8 highKEV added EPSS 91.4%
CVE-2026-28318 SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
CVSS 7.5 highKEV added EPSS 43.7%
CVE-2026-41567 Docker: `PUT /containers/{id}/archive` executes container binary on the host
CVSS 7.2 highEPSS 0.16%Docker
CVSS 6.0 mediumEPSS 0.21%OpenAI
CVSS 8.3 high1 incident
CVE-2026-48567 Azure HorizonDB Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 1.0%Microsoft Azure
CVE-2026-10804 Streamlit Palette hashing.py weak hash
CVSS 3.6 lowEPSS 0.08%Snowflake
CVE-2026-45247 Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection
CVSS 9.8 criticalKEV added EPSS 26.2%
CVE-2026-10584 HTTPS Fallback to HTTP in Graph Explorer
CVSS 5.9 mediumEPSS 0.10%Amazon Web Services
CVE-2026-3514 Authentication Bypass in prefecthq/prefect
CVSS 7.5 highEPSS 0.48%Prefect
CVE-2025-48595 Android Framework Integer Overflow Vulnerability
CVSS 8.4 highKEV added EPSS 1.9%
CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability
CVSS 7.8 highKEV added EPSS 5.5%
CVE-2024-21182 Oracle WebLogic Server Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 74.2%
CVE-2026-48501 GitHub CLI tokens leak via `gh attestation` commands
CVSS 7.4 highEPSS 0.29%GitHub
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
CVSS 9.1 criticalKEV added EPSS 95.0%
CVE-2026-49094 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.27%Elastic Cloud
CVE-2026-42399 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.33%Elastic Cloud
CVE-2026-42400 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.33%Elastic Cloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)