RewindexCVEs
CVEs
5,605 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.2%
CVE-2016-3081 Apache Struts Command Injection Vulnerability
CVSS 8.1 highKEV added EPSS 96.5%
CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability
CVSS 7.5 highKEV added EPSS 99.6%
CVE-2015-3306 ProFTPD Improper Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.5%
CVE-2026-89322 Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions
CVSS 7.2 highEPSS 0.30%HashiCorp
CVE-2026-105820 Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution
CVSS 5.4 mediumEPSS 0.25%HashiCorp
CVE-2026-105818 Vault PKI ACME Issues Certificate With Unvalidated SANs
CVSS 5.9 mediumEPSS 0.08%HashiCorp
CVE-2026-76286 Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server
CVSS 5.3 mediumEPSS 0.17%Splunk
CVE-2026-76285 Improper Adherence to Coding Standards in Splunk Enterprise
CVSS 9.8 criticalEPSS 0.37%Splunk
CVE-2026-76284 Improper Neutralization in Splunk Enterprise
CVSS 9.8 criticalEPSS 0.43%Splunk
CVE-2026-76283 Protection Mechanism Failure in Splunk Enterprise
CVSS 7.6 highEPSS 0.27%Splunk
CVE-2026-76282 Improper Control of a Resource Through its Lifetime in Splunk Enterprise
CVSS 8.8 highEPSS 0.38%Splunk
CVE-2026-76281 Improper Access Control in Splunk Enterprise
CVSS 5.3 mediumEPSS 0.28%Splunk
CVE-2026-76278 Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise
CVSS 4.3 mediumEPSS 0.21%Splunk
CVE-2026-76273 Improper Input Validation through the collect Command in Splunk Enterprise
CVSS 4.3 mediumEPSS 0.22%Splunk
CVE-2026-76272 Missing Access Control through the REST API in Splunk Secure Gateway
CVSS 4.3 mediumEPSS 0.22%Splunk
CVE-2026-76267 Log Injection through the REST API in Splunk App for Splunk O11y Cloud
CVSS 4.3 mediumEPSS 0.22%Splunk
CVE-2026-76265 Improper Access Control through REST API Endpoints in Splunk Secure Gateway
CVSS 6.5 mediumEPSS 0.30%Splunk
CVE-2026-76264 Improper Authorization through the REST API in Splunk Enterprise
CVSS 4.3 mediumEPSS 0.22%Splunk
CVE-2026-1403 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.33%GitLab
CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses
CVSS 7.6 highEPSS 0.09%Docker
CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer
CVSS 6.9 mediumEPSS 0.07%Docker
CVE-2026-103008 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.31%Elastic Cloud
CVE-2026-103006 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.41%Elastic Cloud
CVE-2026-102413 Uncaught Exception in Elastic Endpoint Leading to Denial of Service
CVSS 6.2 mediumEPSS 0.13%Elastic Cloud
CVE-2026-102410 Missing Authorization in Kibana Leading to Information Disclosure
CVSS 4.3 mediumEPSS 0.21%Elastic Cloud
CVE-2026-102409 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVSS 6.5 mediumEPSS 0.31%Elastic Cloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)