RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-2302 Unsafe Reflection in Mongoid::Criteria.from_hash
CVSS 6.5 mediumEPSS 0.23%MongoDB Atlas
CVE-2026-25609 profile command may permit unauthorized configuration
CVSS 5.4 mediumEPSS 0.20%MongoDB Atlas
CVE-2026-25610 Invalid $geoNear index hint may cause server crash
CVSS 6.5 mediumEPSS 0.28%MongoDB Atlas
CVE-2026-1847 MongoDB Server may crash when inserting large documents
CVSS 6.5 mediumEPSS 0.28%MongoDB Atlas
CVE-2026-25612 Internal ResourceId collision may affect unrelated collections
CVSS 6.5 mediumEPSS 0.23%MongoDB Atlas
CVE-2026-21228 Azure Local Remote Code Execution Vulnerability
CVSS 8.1 highEPSS 0.78%Microsoft Azure
CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability
CVSS 6.2 mediumKEV added EPSS 4.9%
CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2026-21529 Azure HDInsight Spoofing Vulnerability
CVSS 5.7 mediumEPSS 0.66%Microsoft Azure
CVE-2026-21510 Windows Shell Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 61.2%
CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 2.6%Microsoft Azure
CVE-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.55%Microsoft Azure
CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 15.9%
CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 4.2%
CVE-2026-21229 Power BI Remote Code Execution Vulnerability
CVSS 8.0 highEPSS 0.96%Power BI
CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability
CVSS 6.5 mediumEPSS 1.0%Microsoft Azure
CVE-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.5%
CVE-2026-1868 Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway
CVSS 9.9 criticalEPSS 0.71%GitLab
CVE-2026-1727 Information Disclosure via Bucket Squatting in Google Cloud Agentspace.
CVSS 9.1 criticalEPSS 0.29%Google Cloud
CVE-2026-25628 Qdrant affected by arbitrary file write via `/logger` endpoint
CVSS 8.6 highEPSS 0.55%Qdrant
CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability
CVSS 9.8 criticalEPSS 1.2%Microsoft Azure
CVE-2026-21532 Azure Function Information Disclosure Vulnerability
CVSS 8.2 highEPSS 0.90%Microsoft Azure
CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability
CVSS 8.6 highEPSS 1.5%Microsoft Azure
CVE-2026-24423 SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
CVSS 9.8 criticalKEV added EPSS 88.2%
CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
CVSS 9.8 criticalKEV added EPSS 94.0%
CVE-2026-25547 Uncontrolled Resource Consumption in @isaacs/brace-expansion
CVSS 9.2 criticalEPSS 0.55%Jira
CVE-2026-25526 JinJava Bypass through ForTag leads to Arbitrary Java Execution
CVSS 9.8 criticalEPSS 0.98%HubSpot
CVE-2026-1664 Insecure Direct Object Reference (IDOR) via Header-Based Email Routing
CVSS 6.9 mediumEPSS 0.47%Cloudflare
CVE-2025-64328 FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
CVSS 7.2 highKEV added EPSS 84.6%
CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.2%
CVE-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
CVSS 6.8 mediumKEV added EPSS 36.1%GitLab
CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.9%
CVE-2026-1751 Missing Authorization in GitLab
CVSS 3.1 lowEPSS 0.23%GitLab
CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.7%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)