RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVSS 9.4 criticalKEV added EPSS 86.6%
CVE-2025-14911 Integer Overflow in GridFS chunkSize Leading to Heap Allocation Failure
CVSS 6.5 mediumEPSS 0.33%MongoDB Atlas
CVSS 5.9 mediumEPSS 0.43%Vercel
CVSS 5.9 mediumEPSS 0.49%Vercel
CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 70.8%
CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
CVSS 9.8 criticalKEV added EPSS 96.4%
CVE-2025-52691 Upload Arbitrary Files
CVSS 10.0 criticalKEV added EPSS 85.7%
CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 14.7%
CVSS 9.8 criticalEPSS 0.65%Salesforce
CVSS 9.8 criticalEPSS 0.65%Salesforce
CVSS 9.8 criticalEPSS 0.60%Salesforce
CVSS 9.8 criticalEPSS 0.43%Salesforce
CVE-2026-1386 Arbitrary Host File Overwrite via Symlink in Firecracker Jailer
CVSS 6.0 mediumEPSS 0.21%Amazon Web Services
CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 22.4%
CVE-2026-24304 Azure Resource Manager Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.67%Microsoft Azure
CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.57%Microsoft Azure
CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability
CVSS 7.4 highEPSS 0.61%Microsoft Azure
CVE-2026-24306 Azure Front Door Elevation of Privilege Vulnerability
CVSS 9.8 criticalEPSS 0.85%Microsoft Azure
CVE-2025-13928 Incorrect Authorization in GitLab
CVSS 7.5 highEPSS 0.70%GitLab
CVE-2025-13927 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.83%GitLab
CVE-2026-0723 Unchecked Return Value in GitLab
CVSS 7.4 highEPSS 1.0%GitLab
CVE-2026-1102 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 5.3 mediumEPSS 0.58%GitLab
CVE-2025-13335 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
CVSS 6.5 mediumEPSS 0.57%GitLab
CVSS 4.3 mediumEPSS 0.29%Discord
CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
CVSS 8.8 highKEV added EPSS 48.9%
CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
CVSS 7.5 highKEV added EPSS 5.1%
CVE-2025-34026 Versa Concerto Actuator Authentication Bypass Information Leak
CVSS 7.5 highKEV added EPSS 81.8%
CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
CVSS 5.3 mediumKEV added EPSS 65.8%
CVE-2021-47748 Hasura GraphQL 1.3.3 - Remote Code Execution
CVSS 9.8 criticalEPSS 1.1%Hasura
CVE-2026-20045 Cisco Unified Communications Products Remote Code Execution Vulnerability
CVSS 8.2 highKEV added EPSS 4.5%
CVE-2026-0933 OS Command Injection in `wrangler pages deploy`
CVSS 9.9 criticalEPSS 1.5%Cloudflare
CVE-2026-22844 Zoom Node Deployments - Command Injection
CVSS 9.9 criticalEPSS 13.5%Zoom
CVE-2025-14435 Application-Level DoS via infinite re-render loop in user profile handling
CVSS 6.8 mediumEPSS 0.31%Mattermost
CVE-2025-14822 DoS from quadratic complexity in model.ParseHashtags
CVSS 3.1 lowEPSS 0.35%Mattermost
CVE-2026-22708 Cursor has a Terminal Tool Allowlist Bypass via Environment Variables
CVSS 9.8 criticalEPSS 0.82%Cursor
CVE-2026-0529 Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers
CVSS 6.5 mediumEPSS 0.23%Elastic Cloud
CVE-2026-0531 Allocation of Resources Without Limits or Throttling in Kibana Fleet
CVSS 6.5 mediumEPSS 0.49%Elastic Cloud
CVE-2026-0528 Improper Input Validation in Metricbeat Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.43%Elastic Cloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)