RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-22871 GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
CVSS 9.8 criticalEPSS 1.1%Datadog
CVE-2026-22870 GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
CVSS 7.5 highEPSS 0.51%Datadog
CVE-2026-21224 Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.32%Microsoft Azure
CVE-2026-20805 Desktop Window Manager Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 7.5%
CVE-2024-58340 LangChain <= 0.3.1 MRKLOutputParser ReDoS
CVSS 7.5 highEPSS 0.48%LangChain (LangSmith)
CVE-2025-8110 File overwrite in file update API in Gogs
CVSS 8.8 highKEV added EPSS 85.2%
CVE-2026-22029 React Router vulnerable to XSS via Open Redirects
CVSS 8.0 highEPSS 0.87%ConfluenceJira
CVSS 9.8 criticalEPSS 0.44%Salesforce
CVE-2026-0830 Command Injection in Kiro GitLab Merge Request Helper
CVSS 7.8 highEPSS 1.4%Amazon Web Services
CVE-2025-10569 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.52%GitLab
CVE-2025-11246 Insufficient Granularity of Access Control in GitLab
CVSS 5.4 mediumEPSS 0.43%GitLab
CVE-2025-13772 Missing Authorization in GitLab
CVSS 7.1 highEPSS 0.42%GitLab
CVE-2025-13781 Missing Authorization in GitLab
CVSS 6.5 mediumEPSS 0.44%GitLab
CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.2%
CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability
CVSS 8.8 highKEV added EPSS 67.3%
CVE-2026-0621 MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS
CVSS 7.5 highEPSS 0.44%Anthropic
CVE-2025-14830 JFrog Artifactory Cross-Site Scripting
CVSS 4.9 mediumEPSS 0.28%JFrog
CVE-2025-14986 ExecuteMultiOperation Namespace Policy Bypass
CVSS 1.3 lowEPSS 0.43%Temporal Cloud
CVE-2025-14987 Cross Namespace Commands Authorization Bypass
CVSS 5.3 mediumEPSS 0.40%Temporal Cloud
CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion
CVSS 3.7 lowEPSS 0.45%Jira
CVE-2025-14847 Zlib compressed protocol header length confusion may allow memory read
CVSS 7.5 highKEV added EPSS 83.2%MongoDB Atlas1 incident
CVE-2025-64641 Mattermost Jira plugin crafted action leaks Jira issue details
CVSS 4.1 mediumEPSS 0.18%Mattermost
CVE-2025-13767 Unauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin
CVSS 4.3 mediumEPSS 0.19%Mattermost
CVE-2021-47715 Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection
CVSS 5.3 mediumEPSS 0.38%Hasura
CVE-2021-47714 Hasura GraphQL 1.3.3 Local File Read via SQL Injection
CVSS 5.5 mediumEPSS 0.22%Hasura
CVE-2021-47713 Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query
CVSS 7.5 highEPSS 0.48%Hasura
CVE-2025-14273 Mattermost Jira plugin user spoofing enables Jira request forgery.
CVSS 7.2 highEPSS 0.26%Mattermost
CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability
CVSS 8.8 highKEV added EPSS 96.9%
CVE-2025-14733 WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.4%
CVSS 4.9 mediumEPSS 0.40%Mintlify
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)