CVEs

Every CVE in the CISA Known Exploited Vulnerabilities catalog, the CVEs with the highest and fastest-rising EPSS scores, and the CVEs on the Stackurity blog: what is affected, what fixes it, and whether it is being exploited.

Recently added to CISA KEV

• CVE-2026-118527 Exploited Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker…
• CVE-2026-111357 Exploited Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker…
• CVE-2026-97229 Exploited GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated…
• CVE-2026-76418 Exploited Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference…
• CVE-2026-46300 Exploited Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of…
• CVE-2026-41709 Exploited Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain…
• CVE-2026-48356 Exploited Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code…
• CVE-2026-111497 Exploited Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder…
• CVE-2026-109619 Exploited PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.
• CVE-2026-109618 Exploited PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.
• CVE-2026-114625 Exploited Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal…
• CVE-2026-110447 Exploited Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability…
• CVE-2026-96656 Exploited Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files…
• CVE-2026-96655 Exploited Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary…
• CVE-2026-96654 Exploited Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to…
• CVE-2026-96652 Exploited Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to…
• CVE-2026-110936 Exploited Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to…
• CVE-2026-106931 Exploited EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute…
• CVE-2026-102764 Exploited BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file…
• CVE-2025-61624 Exploited FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with…
• CVE-2026-21589 Exploited Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center…
• CVE-2026-76519 Exploited Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write…
• CVE-2026-105134 Exploited Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via…
• CVE-2026-105133 Exploited Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via…
• CVE-2026-0322 Exploited Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute…
• CVE-2026-96951 Exploited Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a…
• CVE-2026-104935 Exploited Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute…
• CVE-2023-22894 Exploited Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to…
• CVE-2021-3199 Exploited ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter…
• CVE-2016-3081 Exploited Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when…

Rising EPSS

The largest rises in EPSS over the last 7 days (since 23 Oct 2026).

• CVE-2026-109618 Exploited PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.
• CVE-2026-109619 Exploited PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.
• CVE-2026-8037 Exploited Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on…
• CVE-2026-39987 Exploited Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute…
• CVE-2026-21589 Exploited Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center…
• CVE-2026-34486 Exploited Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This…
• CVE-2013-4786 The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to…
• CVE-2026-34197 Exploited Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.
• CVE-2026-31431 Exploited Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
• CVE-2026-33017 Exploited Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.
• CVE-2026-87902 Exploited WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template…
• CVE-2026-43500 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are…
• CVE-2026-39808 Exploited Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized…
• CVE-2026-3055 Exploited Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an…
• CVE-2026-34910 Exploited Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to…
• CVE-2026-42208 Exploited BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially…
• CVE-2026-9082 Exploited Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially…
• CVE-2026-34908 Exploited Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make…
• CVE-2026-104935 Exploited Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute…
• CVE-2026-48907 Exploited Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP…

Highest EPSS

• CVE-2023-1671 Exploited Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.
• CVE-2021-34473 Exploited Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.
• CVE-2021-35464 Exploited ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints…
• CVE-2021-22005 Exploited VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to…
• CVE-2024-3400 Exploited Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to…
• CVE-2022-26134 Exploited Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to…
• CVE-2021-21985 Exploited VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by…
• CVE-2023-44487 Exploited HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
• CVE-2024-7593 Exploited Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a…
• CVE-2024-21887 Exploited Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in…
• CVE-2023-32315 Exploited Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the…
• CVE-2024-21893 Exploited Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request…
• CVE-2015-1635 Exploited Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.
• CVE-2017-9841 Exploited PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an…
• CVE-2023-4966 Exploited Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when…
• CVE-2021-44228 Exploited Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for…
• CVE-2024-23897 Exploited Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files…
• CVE-2019-11510 Exploited Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network…
• CVE-2017-5638 Exploited Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.
• CVE-2023-35082 Exploited Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to…

On the blog

• CVE-2026-110447 Exploited Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability…
• CVE-2026-102870 Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
• CVE-2026-114148 Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
• CVE-2026-111497 Exploited Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder…
• CVE-2026-98432 In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace…
• CVE-2026-97229 Exploited GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated…
• CVE-2026-76418 Exploited Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference…
• CVE-2026-41709 Exploited Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain…
• CVE-2026-46300 Exploited Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of…
• CVE-2026-109618 Exploited PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.
• CVE-2026-109619 Exploited PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.
• CVE-2015-3306 Exploited ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the…
• CVE-2026-48356 Exploited Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code…
• CVE-2026-15176 A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with…
• CVE-2026-97205 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in…
• CVE-2026-93479 A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log…
• CVE-2026-95101 Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with…
• CVE-2026-97629 Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit…