CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

4,587 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-46855	9.9	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Meta	80d ago
CVE-2026-46854	9.9	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Targ	80d ago
CVE-2026-46852	9.9	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Meta	80d ago
CVE-2026-46850	9.9	—	—	—	oracle / mysql shell	Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code).	80d ago
CVE-2026-46847	9.9	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).	80d ago
CVE-2026-46844	9.9	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).	80d ago
CVE-2026-46838	9.9	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).	80d ago
CVE-2026-46832	9.9	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Disc	80d ago
CVE-2026-46814	9.9	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).	80d ago
CVE-2026-46802	9.9	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).	80d ago
CVE-2026-46794	9.9	—	—	—	oracle / identity manager connector	Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Conne	80d ago
CVE-2026-46793	9.9	—	—	—	oracle / identity manager connector	Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Database User).	80d ago
CVE-2026-46792	9.9	—	—	—	oracle / identity manager connector	Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Conne	80d ago
CVE-2026-46782	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-46779	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-46767	9.9	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).	80d ago
CVE-2026-46765	9.9	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).	80d ago
CVE-2026-35323	9.9	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	80d ago
CVE-2026-35321	9.9	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	80d ago
CVE-2026-35316	9.9	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	80d ago
CVE-2026-35313	9.9	—	—	—	oracle / access manager	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).	80d ago
CVE-2026-35294	9.9	—	—	—	oracle / identity manager	Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connecto	80d ago
CVE-2026-35285	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-35284	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-35283	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-35282	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-35281	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-35280	9.9	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	80d ago
CVE-2026-35268	9.9	—	—	—	oracle / identity manager	Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core).	80d ago
CVE-2026-35263	9.9	—	—	—	oracle / weblogic server	Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).	80d ago
CVE-2026-40750	9.9	—	—	—	—	Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a	81d ago
CVE-2026-49774	9.9	—	—	—	—	Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Co	81d ago
CVE-2026-49766	9.9	—	—	—	—	Subscriber Arbitrary File Deletion in WP User Manager <= 2.9.16 versions.	82d ago
CVE-2026-39591	9.9	—	—	—	—	Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.	82d ago
CVE-2026-46716	9.9	—	—	—	—	Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool.	85d ago
CVE-2026-47370	9.9	—	—	—	—	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnera	86d ago
CVE-2026-47369	9.9	—	—	—	—	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnera	86d ago
CVE-2026-47367	9.9	—	—	—	—	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnera	86d ago
CVE-2026-47365	9.9	—	—	—	—	Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authent	86d ago
CVE-2026-11839	9.9	—	—	—	—	Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc.	86d ago
CVE-2026-50566	9.9	—	—	—	—	Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and	87d ago
CVE-2026-50564	9.9	—	—	—	—	Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and	87d ago
CVE-2026-50563	9.9	—	—	—	—	Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and	87d ago
CVE-2026-50545	9.9	—	—	—	—	Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and	87d ago
CVE-2026-45558	9.9	—	—	—	—	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.	87d ago
CVE-2026-45556	9.9	—	—	—	—	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.	87d ago
CVE-2026-45552	9.9	—	—	—	—	Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.	87d ago
CVE-2026-10523	9.9	—	—	—	ivanti / standalone sentry	An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions	88d ago
CVE-2026-44748	9.9	—	—	—	—	SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to	89d ago
CVE-2026-46442exploited	9.9	36.3%	2/4	+39d	flowiseai / flowise	Flowise is a drag & drop user interface to build a customized large language model flow.	89d ago
CVE-2026-45744	9.9	—	—	—	termix / termix	Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.	92d ago
CVE-2026-43986	9.9	—	—	—	—	Tautulli is a Python based monitoring and tracking tool for Plex Media Server.	93d ago
CVE-2026-41283	9.9	—	—	—	—	OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed.	94d ago
CVE-2025-14771	9.9	—	—	—	abb / t-mac plus	Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.	94d ago
CVE-2026-45372	9.9	—	—	—	yhirose / cpp-httplib	cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.	99d ago
CVE-2026-47744	9.9	—	—	—	—	Shopper is a Headless e-commerce Admin Panel.	99d ago
CVE-2026-45661	9.9	—	—	—	—	Dokploy is a free, self-hostable Platform as a Service (PaaS).	99d ago
CVE-2026-45633	9.9	—	—	—	—	Dokploy is a free, self-hostable Platform as a Service (PaaS).	99d ago
CVE-2026-45632	9.9	—	—	—	—	Dokploy is a free, self-hostable Platform as a Service (PaaS).	99d ago
CVE-2026-45629	9.9	—	—	—	—	Dokploy is a free, self-hostable Platform as a Service (PaaS).	99d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, four independent catalogues); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker