RewindexCVEs
CVEs
5,626 vulnerabilities, 1,758 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 55.0%
CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload
CVSS 7.2 highKEV added EPSS 1.8%
CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.6%
CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 76.6%
CVE-2025-14573 Team Admin Bypass of Invite Permissions via allow_open_invite Field
CVSS 3.8 lowEPSS 0.18%Mattermost
CVE-2025-14350 Information disclosure via channel mentions in posts
CVSS 4.3 mediumEPSS 0.19%Mattermost
CVE-2025-13821 User profile update exposes password hash and MFA secrets
CVSS 5.7 mediumEPSS 0.24%Mattermost
CVE-2026-0997 Mattermost Zoom Plugin channel preference API lacks authorization checks
CVSS 4.3 mediumEPSS 0.18%Mattermost
CVE-2026-0999 Authentication bypass via userID login when email and username login are disabled
CVSS 5.4 mediumEPSS 0.20%Mattermost
CVE-2026-26268 Cursor sandbox escape via Git hooks
CVSS 8.1 highEPSS 0.70%Cursor
CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API
CVSS 3.1 lowEPSS 0.22%Mattermost
CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
CVSS 9.8 criticalKEV added EPSS 93.1%
CVE-2026-1721 Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site
CVSS 6.2 mediumEPSS 0.42%Cloudflare
CVE-2026-2276 Reflected Cross-Site Scripting in the Wix web application
CVSS 5.3 mediumEPSS 0.43%Wix
CVE-2025-41117 XSS in Grafana Explore stack trace
CVSS 6.8 mediumEPSS 0.27%Grafana Cloud
CVE-2026-21722 Public Dashboards time range restriction on annotations can be bypassed
CVSS 5.3 mediumEPSS 0.36%Grafana Cloud
CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 1.7%
CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability
CVSS 8.1 highKEV added EPSS 73.6%
CVE-2025-15556 Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
CVSS 7.5 highKEV added EPSS 1.8%
CVE-2024-43468 Microsoft Configuration Manager Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 81.0%
CVE-2025-7659 Origin Validation Error in GitLab
CVSS 8.0 highEPSS 0.22%GitLab
CVE-2025-8099 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.47%GitLab
CVE-2025-12073 Server-Side Request Forgery (SSRF) in GitLab
CVSS 4.3 mediumEPSS 0.26%GitLab
CVE-2025-12575 Server-Side Request Forgery (SSRF) in GitLab
CVSS 5.4 mediumEPSS 0.19%GitLab
CVE-2025-14594 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 3.5 lowEPSS 0.19%GitLab
CVE-2025-14592 Missing Authorization in GitLab
CVSS 3.7 lowEPSS 0.30%GitLab
CVE-2026-0958 Interpretation Conflict in GitLab
CVSS 7.5 highEPSS 0.45%GitLab
CVE-2026-1080 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 4.3 mediumEPSS 0.28%GitLab
CVE-2026-1094 Improper Validation of Unsafe Equivalence in Input in GitLab
CVSS 4.6 mediumEPSS 0.19%GitLab
CVE-2026-1387 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.34%GitLab
CVE-2026-1456 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.42%GitLab
CVE-2026-1458 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.42%GitLab
CVSS 2.9 lowEPSS 0.55%Jira
CVE-2026-2302 Unsafe Reflection in Mongoid::Criteria.from_hash
CVSS 6.5 mediumEPSS 0.23%MongoDB Atlas
CVE-2026-25609 profile command may permit unauthorized configuration
CVSS 5.4 mediumEPSS 0.20%MongoDB Atlas
CVE-2026-25610 Invalid $geoNear index hint may cause server crash
CVSS 6.5 mediumEPSS 0.28%MongoDB Atlas
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)