RewindexCVEs
CVEs
5,606 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVSS 6.5 mediumKEV added EPSS 31.5%
CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 7.3%
CVE-2026-20122 Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
CVSS 5.4 mediumKEV added EPSS 25.8%
CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
CVSS 6.1 mediumKEV added EPSS 1.7%
CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
CVSS 10.0 criticalKEV added EPSS 2.5%
CVE-2025-2749 Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE
CVSS 7.2 highKEV added EPSS 4.0%
CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability
CVSS 7.3 highKEV added EPSS 100.0%
CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability
CVSS 8.2 highKEV added EPSS 78.1%
CVE-2026-40155 Auth0 Next.js SDK has Improper Proxy Cache Lookup
CVSS 5.4 mediumEPSS 0.21%Auth0
CVE-2026-3605 Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service
CVSS 8.1 highEPSS 0.38%HashiCorp
CVE-2026-34197 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
CVSS 8.8 highKEV added EPSS 98.3%
CVE-2026-21726 Loki Path Traversal - CVE-2021-36156 Bypass
CVSS 5.3 mediumEPSS 0.41%Grafana Cloud
CVE-2026-20203 Improper Access Control in Data Model Acceleration in Splunk Enterprise
CVSS 4.3 mediumEPSS 0.15%Splunk
CVE-2026-20202 Improper Input Validation during User Account Creation in Splunk Enterprise
CVSS 6.6 mediumEPSS 0.25%Splunk
CVE-2025-12141 Grafana Alerting Editors can edit destination of webhooks they did not create
CVSS 6.5 mediumEPSS 0.26%Grafana Cloud
CVE-2026-3590 Race Condition in Guest Magic Link Authentication Allows Token Reuse
CVSS 6.5 mediumEPSS 0.15%Mattermost
CVE-2026-28741 CSRF Protection Bypass Allows Updating a User's Authentication Method
CVSS 6.8 mediumEPSS 0.13%Mattermost
CVE-2026-3505 Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.
CVSS 7.5 highEPSS 0.79%Bitbucket
CVE-2026-5598 Non-constant time comparisons risk private key leakage in FrodoKEM.
CVSS 7.5 highEPSS 0.90%Bitbucket
CVSS 9.3 criticalEPSS 0.21%Cohere
CVE-2026-32201 Microsoft SharePoint Server Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 43.4%
CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.44%Microsoft Azure
CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 1.9%Microsoft Azure
CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.31%Microsoft Azure
CVE-2026-2332 HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
CVSS 7.4 highEPSS 1.3%Confluence
CVE-2009-0238 Microsoft Office Remote Code Execution
CVSS 8.8 highKEV added EPSS 42.9%
CVE-2026-6231 bson_validate may skip validation when processing certain inputs
CVSS 4.3 mediumEPSS 0.18%MongoDB Atlas
CVE-2026-4810 Remote Code Execution in Google Agent Development Kit (ADK)
CVSS 9.3 criticalEPSS 1.8%Google Cloud
CVE-2026-34621 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
CVSS 8.6 highKEV added EPSS 7.2%
CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 97.7%
CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 4.6%
CVE-2023-36424 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 12.1%
CVE-2023-21529 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 59.3%
CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 33.5%
CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
CVSS 7.8 highKEV added EPSS 20.9%
CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint
CVSS 6.3 mediumEPSS 0.53%Temporal Cloud
CVSS 6.4 medium1 incident
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)