RewindexCVEs
CVEs
5,605 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-78628 Improper Input Validation in the Okta Credential Provider for Windows
CVSS 6.0 mediumEPSS 0.13%Okta
CVE-2026-100207 Azure CycleCloud Remote Code Execution Vulnerability
CVSS 7.3 highEPSS 0.44%Microsoft Azure
CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 9.8%
CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability
CVSS 8.1 highEPSS 0.82%Microsoft Azure
CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.52%Microsoft Azure
CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability
CVSS 7.4 highEPSS 0.61%Microsoft Azure
CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability
CVSS 5.9 mediumEPSS 0.32%Microsoft Azure
CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.46%Microsoft Azure
CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability
CVSS 7.5 highEPSS 0.92%Microsoft Azure
CVE-2026-109428 Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation
CVSS 8.8 highEPSS 0.51%Mistral AI
CVE-2026-92892 Potential command execution on the host running JFrog CLI.
CVSS 9.0 criticalEPSS 0.34%JFrog
CVE-2026-33374 Unbounded memory allocation in the Prometheus rule conversion API
CVSS 6.5 mediumEPSS 0.37%Grafana Cloud
CVE-2026-15577 Git Sync connection configuration can be modified with read-only access
CVSS 6.5 mediumEPSS 0.27%Grafana Cloud
CVE-2026-95502 Git Sync memory exhaustion via a malicious Git server
CVSS 5.3 mediumEPSS 0.37%Grafana Cloud
CVE-2026-103928 Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions
CVSS 9.3 criticalEPSS 0.41%MetabaseMetabase Cloud
CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVSS 8.6 highKEV added EPSS 86.8%
CVSS 7.4 highEPSS 0.21%Zoom
CVSS 7.4 highEPSS 0.20%Zoom
CVSS 8.0 highEPSS 0.32%Zoom
CVSS 8.1 highEPSS 0.30%Zoom
CVE-2026-5954 Incorrect Authorization in GitLab
CVSS 4.2 mediumEPSS 0.19%GitLab
CVE-2026-6567 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.22%GitLab
CVE-2026-7767 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
CVSS 5.8 mediumEPSS 0.29%GitLab
CVE-2026-9268 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.18%GitLab
CVE-2026-14210 Insufficient Granularity of Access Control in GitLab
CVSS 4.3 mediumEPSS 0.22%GitLab
CVE-2026-14552 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.19%GitLab
CVE-2026-14814 Permissive Regular Expression in GitLab
CVSS 8.2 highEPSS 0.39%GitLab
CVE-2026-16275 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.26%GitLab
CVE-2026-16301 Incorrect Authorization in GitLab
CVSS 8.5 highEPSS 0.33%GitLab
CVE-2026-78335 Incorrect Authorization in GitLab
CVSS 4.2 mediumEPSS 0.19%GitLab
CVE-2026-81839 Incorrect Authorization in GitLab
CVSS 7.7 highEPSS 0.28%GitLab
CVE-2026-82632 Incorrect Authorization in GitLab
CVSS 3.1 lowEPSS 0.21%GitLab
CVE-2026-84284 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.22%GitLab
CVE-2026-85529 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.22%GitLab
CVE-2026-92528 Incorrect Authorization in GitLab
CVSS 4.2 mediumEPSS 0.13%GitLab
CVE-2026-97229 Integer Overflow or Wraparound in GitLab
CVSS 10.0 criticalEPSS 18.4%GitLab1 incident
CVE-2026-96893 Improper Neutralization of Input Used for LLM Prompting in GitLab
CVSS 7.3 highEPSS 0.58%GitLab
CVE-2026-100104 Server-Side Request Forgery (SSRF) in GitLab
CVSS 3.5 lowEPSS 0.20%GitLab
CVE-2026-100755 Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
CVSS 4.6 mediumEPSS 0.09%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)