RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-6915 Flaw in the updateUser Command May Allow Unauthorized Configuration Change
CVSS 6.3 mediumEPSS 0.17%MongoDB Atlas
CVE-2026-6914 MD5 checksum creation may cause availability loss
CVSS 6.5 mediumEPSS 0.26%MongoDB Atlas
CVE-2026-32202 Windows Shell Spoofing Vulnerability
CVSS 4.3 mediumKEV added EPSS 70.9%
CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)
CVSS 8.4 highKEV added EPSS 95.4%
CVE-2026-41248 Official Clerk JavaScript SDKs: Middleware-based route protection bypass
CVSS 9.1 criticalEPSS 0.32%Clerk
CVE-2026-6968 Multiple Path Traversal Variants in awslabs/tough
CVSS 5.9 mediumEPSS 0.53%Amazon Web Services
CVE-2026-6967 Missing Delegated Metadata Validation in awslabs/tough
CVSS 5.9 mediumEPSS 0.25%Amazon Web Services
CVE-2026-6966 Signature Threshold Bypass in awslabs/tough Delegated Roles
CVSS 5.3 mediumEPSS 0.28%Amazon Web Services
CVE-2026-42035 Axios: Header Injection via Prototype Pollution
CVSS 7.4 highEPSS 0.40%BitbucketConfluenceJira
CVE-2026-6911 Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel
CVSS 9.8 criticalEPSS 0.25%Amazon Web Services
CVE-2026-21515 Azure IoT Central Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.70%Microsoft Azure
CVE-2026-21728 Tempo query limit results in unbounded memory allocation
CVSS 7.5 highEPSS 0.64%Grafana Cloud
CVE-2025-29635 D-Link DIR-823X Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 87.9%
CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVSS 8.8 highKEV added EPSS 91.9%
CVE-2024-57728 SimpleHelp Path Traversal Vulnerability
CVSS 7.2 highKEV added EPSS 64.5%
CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability
CVSS 9.9 criticalKEV added EPSS 66.4%
CVE-2026-25874 LeRobot Unsafe Deserialization Remote Code Execution via gRPC
CVSS 9.8 criticalEPSS 15.5%Hugging Face
CVE-2026-39987 marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2026-3254 Improper Restriction of Rendered UI Layers or Frames in GitLab
CVSS 3.5 lowEPSS 0.15%GitLab
CVE-2026-4922 Cross-Site Request Forgery (CSRF) in GitLab
CVSS 8.1 highEPSS 0.27%GitLab
CVE-2025-0186 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.40%GitLab
CVE-2025-3922 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.40%GitLab
CVE-2025-6016 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.45%GitLab
CVE-2025-9957 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.38%GitLab
CVE-2026-1660 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.40%GitLab
CVE-2026-5377 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.26%GitLab
CVE-2026-5816 Improper Resolution of Path Equivalence in GitLab
CVSS 8.0 highEPSS 0.41%GitLab
CVE-2026-6515 Insufficient Session Expiration in GitLab
CVSS 5.4 mediumEPSS 0.17%GitLab
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 6.7%
CVE-2026-40050 CrowdStrike LogScale Unauthenticated Path Traversal
CVSS 9.8 criticalEPSS 0.60%CrowdStrike
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)