RewindexCVEs
CVEs
5,626 vulnerabilities, 1,758 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-26935 Improper Input Validation in Kibana Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.32%Elastic Cloud
CVE-2026-26932 Improper Validation of Array Index in Packetbeat Leading to Denial of Service
CVSS 5.7 mediumEPSS 0.51%Elastic Cloud
CVE-2026-2244 Sensitive Data Exposure in Google Cloud Vertex AI Workbench
CVSS 8.4 highEPSS 0.26%Google Cloud
CVE-2025-14511 Improper Validation of Specified Quantity in Input in GitLab
CVSS 7.5 highEPSS 0.41%GitLab
CVE-2026-1388 Inefficient Regular Expression Complexity in GitLab
CVSS 7.5 highEPSS 0.41%GitLab
CVE-2026-1662 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.41%GitLab
CVE-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab
CVSS 4.3 mediumEPSS 0.27%GitLab
CVE-2026-1725 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 5.3 mediumEPSS 0.41%GitLab
CVE-2026-2845 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.30%GitLab
CVE-2025-3525 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.35%GitLab
CVE-2025-14103 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.22%GitLab
CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 89.3%
CVE-2022-20775 Cisco SD-WAN Software Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 12.5%
CVE-2026-27606 Rollup 4 has Arbitrary File Write via Path Traversal
CVSS 9.1 criticalEPSS 1.7%Jira
CVE-2026-2664 Out of bounds read vulnerability in grpcfuse kernel module
CVSS 7.8 highEPSS 0.21%Docker
CVE-2026-1229 Incorrect calculation in CIRCL secp384r1 CombinedMult
CVSS 9.8 criticalEPSS 0.43%Cloudflare
CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 5.2%
CVE-2026-22567 ZIA Admin UI Input Validation Bug
CVSS 7.6 highEPSS 0.22%Zscaler
CVE-2026-22568 Unauthorized information retrieval in ZIA Admin UI
CVSS 5.5 mediumEPSS 0.19%Zscaler
CVSS 4.0 mediumEPSS 0.20%Akamai
CVE-2026-27197 Sentry: Improper Authentication on SAML SSO process allows user identity linking
CVSS 9.1 criticalEPSS 0.49%Sentry
CVE-2026-2473 Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft.
CVSS 7.7 highEPSS 0.51%Google Cloud
CVE-2026-2472 Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization
CVSS 8.1 highEPSS 0.61%Google Cloud
CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability
CVSS 7.2 highKEV added EPSS 27.4%
CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability
CVSS 9.9 criticalKEV added EPSS 99.7%
CVE-2026-21535 Microsoft Teams Information Disclosure Vulnerability
CVSS 8.2 highEPSS 0.65%Microsoft Teams
CVE-2026-2274 Arbitrary File Read and SSRF in Google AppSheet
CVSS 8.5 highEPSS 0.29%Google Cloud
CVE-2026-20142 Sensitive Information Disclosure in "_internal" index in Splunk Enterprise
CVSS 6.8 mediumEPSS 0.34%Splunk
CVE-2026-20138 Sensitive Information Disclosure in "_internal" index in Splunk Enterprise
CVSS 6.8 mediumEPSS 0.34%Splunk
CVE-2026-20144 Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise
CVSS 6.8 mediumEPSS 0.34%Splunk
CVE-2026-20141 Improper Access Control in Splunk Monitoring Console App
CVSS 4.3 mediumEPSS 0.22%Splunk
CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
CVSS 10.0 criticalKEV added EPSS 13.5%
CVE-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability
CVSS 6.8 mediumKEV added EPSS 53.4%GitLab
CVE-2026-24734 Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass
CVSS 7.4 highEPSS 0.58%BitbucketConfluenceJira
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)