RewindexCVEs
CVEs
5,605 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-13719 Alert rules in restricted folders disclosed via the alert rules list API
CVSS 4.3 mediumEPSS 0.24%Grafana Cloud
CVE-2026-81841 Paused shared dashboard access tokens still expose data source configuration
CVSS 5.3 mediumEPSS 0.38%Grafana Cloud
CVE-2026-4523 Missing Authorization in GitLab
CVSS 3.7 lowEPSS 0.26%GitLab
CVE-2026-8937 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.23%GitLab
CVE-2026-10518 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.23%GitLab
CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 26.2%
CVE-2026-101909 Axios: Prototype Pollution Gadget in axios toFormData Options
CVSS 8.3 highEPSS 0.50%Jira
CVE-2026-101898 Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls
CVSS 7.0 highEPSS 0.55%Jira
CVE-2026-59563 HMAC Confirmation Token Unbinding in zscaler-mcp-server
CVSS 4.6 mediumEPSS 0.13%Zscaler
CVE-2026-81375 Confused Deputy in Application Integration allows Internal File Read
CVSS 8.3 highEPSS 0.32%Google Cloud
CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
CVSS 8.1 highKEV added EPSS 78.2%
CVE-2026-94400 Uncontrolled Resource Consumption in Kibana Leading to denial of service
CVSS 6.5 mediumEPSS 0.25%Elastic Cloud
CVE-2026-78582 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
CVSS 6.5 mediumEPSS 0.19%Elastic Cloud
CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability
CVSS 8.1 highKEV added EPSS 95.8%WordPress.com
CVE-2026-67279 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
CVSS 6.5 mediumKEV added EPSS 2.3%
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 8.2%
CVE-2026-96883 Type confusion in AWS pgcollection allows remote code execution
CVSS 8.8 highEPSS 0.65%Amazon Web Services
CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)
CVSS 9.1 criticalKEV added EPSS 90.5%
CVE-2026-5430 Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
CVSS 10.0 criticalKEV added EPSS 22.4%
CVE-2026-89078 Double Free in GitLab
CVSS 9.9 criticalEPSS 0.49%GitLab1 incident
CVE-2026-92530 Use of Less Trusted Source in GitLab
CVSS 4.3 mediumEPSS 0.11%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)