RewindexCVEs
CVEs
5,605 vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-92470 Missing Authorization in GitLab
CVSS 7.7 highEPSS 0.21%GitLab
CVE-2026-92529 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.18%GitLab
CVE-2026-92874 Incorrect Authorization in GitLab
CVSS 5.4 mediumEPSS 0.15%GitLab
CVE-2026-93577 Integer Overflow or Wraparound in GitLab
CVSS 9.9 criticalEPSS 0.59%GitLab1 incident
CVE-2026-96770 s2s-proxy accepts untrusted client certificates
CVSS 9.3 criticalEPSS 0.32%Temporal Cloud
CVE-2026-77987 GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
CVSS 9.8 criticalEPSS 0.88%GitHub
CVE-2026-94127 BIG-IP APM OAuth vulnerability
CVSS 9.8 criticalKEV added EPSS 24.9%
CVE-2026-95666 Unbounded post ID array in the bulk reactions endpoint allows denial of service
CVSS 4.3 mediumEPSS 0.37%Mattermost
CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server
CVSS 9.8 criticalKEV added EPSS 91.6%
CVE-2026-93952 Security Advisory 0183
CVSS 10.0 criticalKEV added EPSS 1.4%
CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway
CVSS 9.8 criticalKEV added EPSS 54.1%
CVE-2026-73553 Envoy: RBAC Authorization Bypass via Path Parameters
CVSS 7.5 highEPSS 0.51%Google Cloud
CVE-2026-73546 Envoy: Stored XSS in Admin Stats Interface (/stats?format=html)
CVSS 7.4 highEPSS 0.62%Google Cloud
CVE-2026-73512 Envoy: use-after-free in QUIC on internal redirects
CVSS 7.5 highEPSS 0.87%Google Cloud
CVE-2026-73550 Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy
CVSS 7.5 highEPSS 0.55%Google Cloud
CVE-2026-73513 Envoy: oghttp2 upstream trailers incorrect handling
CVSS 7.5 highEPSS 0.49%Google Cloud
CVE-2026-50572 Envoy: ext_authz - RawHttpClientImpl onSuccess 0x0 segfault
CVSS 5.9 mediumEPSS 0.68%Google Cloud
CVE-2026-62247 Supabase Realtime: Incorrect Authorization
CVSS 6.5 mediumEPSS 0.45%Supabase
CVSS 7.1 highEPSS 0.30%Canva
CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 2.8%
CVE-2026-93993 Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout
CVSS 8.8 highEPSS 0.77%Mistral AI
CVE-2026-93748 http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale
CVSS 7.5 highEPSS 0.57%Jira
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)