RewindexCVEs
CVEs
5,626 vulnerabilities, 1,758 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-30900 Zoom Workplace Clients for Windows - Improper Check
CVSS 7.8 highEPSS 0.13%Zoom
CVE-2025-68613 n8n Vulnerable to Remote Code Execution via Expression Injection
CVSS 10.0 criticalKEV added EPSS 99.0%n8n
CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 1.00%Microsoft Azure
CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability
CVSS 7.5 highEPSS 0.77%Microsoft Azure
CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability
CVSS 7.5 highEPSS 0.75%Microsoft Azure
CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability
CVSS 7.5 highEPSS 1.1%Microsoft Azure
CVE-2026-23664 Azure IoT Explorer Information Disclosure Vulnerability
CVSS 7.5 highEPSS 1.0%Microsoft Azure
CVE-2026-31802 node-tar Symlink Path Traversal via Drive-Relative Linkpath
CVSS 5.5 mediumEPSS 0.27%ConfluenceJira
CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
CVSS 8.6 highKEV added EPSS 88.3%
CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.1%
CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery
CVSS 7.5 highKEV added EPSS 99.7%
CVE-2026-29786 node-tar: Hardlink Path Traversal via Drive-Relative Linkpath
CVSS 8.6 highEPSS 0.47%ConfluenceJira
CVE-2026-29790 dbt-common: commonprefix() doesn't protect against path traversal
CVSS 5.3 mediumEPSS 0.28%dbt Labs
CVE-2018-25188 Webiness Inventory 2.3 SQL Injection via WsModelGrid.php
CVSS 8.2 highEPSS 0.25%GitHub
CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 4.0%
CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 2.0%
CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability
CVSS 8.8 highKEV added EPSS 7.0%
CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 63.6%
CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2026-2836 Cache poisoning via insecure-by-default cache key
CVSS 8.1 highEPSS 0.41%Cloudflare
CVE-2026-2835 HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
CVSS 9.1 criticalEPSS 0.82%Cloudflare
CVE-2026-2833 HTTP Request Smuggling via Premature Upgrade
CVSS 9.1 criticalEPSS 0.69%Cloudflare
CVE-2026-3136 Google Cloud Build Comment Control Bypass
CVSS 9.8 criticalEPSS 0.37%Google Cloud
CVE-2026-22719 VMware Aria Operations command injection vulnerability
CVSS 8.1 highKEV added EPSS 18.3%
CVE-2026-21385 Integer Overflow or Wraparound in Graphics
CVSS 7.8 highKEV added EPSS 1.3%
CVE-2026-3338 PKCS7_verify Signature Validation Bypass in AWS-LC
CVSS 7.5 highEPSS 0.81%Amazon Web Services
CVE-2026-3337 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
CVSS 5.9 mediumEPSS 1.1%Amazon Web Services
CVE-2026-3336 PKCS7_verify Certificate Chain Validation Bypass in AWS-LC
CVSS 7.5 highEPSS 0.78%Amazon Web Services
CVE-2026-26937 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.32%Elastic Cloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)