CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 5 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-15061	8.2	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to ove	54d ago
CVE-2026-76222	8.2	—	—	—	gitpython project / gitpython	GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git	54d ago
CVE-2026-76208	8.2	—	—	—	phpmyfaq / phpmyfaq	phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap::create().	54d ago
CVE-2026-73937	8.2	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	55d ago
CVE-2026-73925	8.2	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	55d ago
CVE-2026-71159	8.2	—	—	—	oracle / helidon	Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).	55d ago
CVE-2026-71130	8.2	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	55d ago
CVE-2026-71129	8.2	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	55d ago
CVE-2026-71096	8.2	—	—	—	oracle / business intelligence	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Pl	55d ago
CVE-2026-71024	8.2	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	55d ago
CVE-2026-71018	8.2	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	55d ago
CVE-2026-71016	8.2	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	55d ago
CVE-2026-70993	8.2	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	55d ago
CVE-2026-70964	8.2	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	55d ago
CVE-2026-70952	8.2	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	55d ago
CVE-2026-70909	8.2	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security).	55d ago
CVE-2026-70897	8.2	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	55d ago
CVE-2026-70893	8.2	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	55d ago
CVE-2026-70892	8.2	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	55d ago
CVE-2026-70887	8.2	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	55d ago
CVE-2026-70870	8.2	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Web Clien	55d ago
CVE-2026-70852	8.2	—	—	—	—	Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations).	55d ago
CVE-2026-70773	8.2	—	—	—	oracle / hcm common architecture	Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integ	55d ago
CVE-2026-70743	8.2	—	—	—	oracle / hyperion financial management	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).	55d ago
CVE-2026-70722	8.2	—	—	—	oracle / advanced inbound telephony	Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Ope	55d ago
CVE-2026-70703	8.2	—	—	—	oracle / agile engineering data management product of oracle supply chain	Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineeri	55d ago
CVE-2026-70702	8.2	—	—	—	oracle / payments	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).	55d ago
CVE-2026-62605	8.2	—	—	—	oracle / partner management	Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations)	55d ago
CVE-2026-62598	8.2	—	—	—	oracle / hyperion calculation manager	Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).	55d ago
CVE-2026-62485	8.2	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Event	55d ago
CVE-2026-62448	8.2	—	—	—	oracle / email center	Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component).	55d ago
CVE-2026-61340	8.2	—	—	—	oracle / mes for process manufacturing	Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Internal	55d ago
CVE-2026-61302	8.2	—	—	—	oracle / business intelligence	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod A	55d ago
CVE-2026-61222	8.2	—	—	—	oracle / webcenter portal	Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).	55d ago
CVE-2026-61054	8.2	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	55d ago
CVE-2026-61038	8.2	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	55d ago
CVE-2026-61016	8.2	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	55d ago
CVE-2026-61011	8.2	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	55d ago
CVE-2026-60955	8.2	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	55d ago
CVE-2026-60944	8.2	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	55d ago
CVE-2026-60796	8.2	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).	55d ago
CVE-2026-60592	8.2	—	—	—	oracle / mysql cluster	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator).	55d ago
CVE-2026-47719	8.2	—	—	—	—	FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.	55d ago
CVE-2026-73356	8.2	—	—	—	—	Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.	55d ago
CVE-2026-73350	8.2	—	—	—	—	Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.	55d ago
CVE-2026-65832	8.2	—	—	—	—	Deskflow is a keyboard and mouse sharing app.	56d ago
CVE-2026-63409	8.2	—	—	—	—	Deskflow is a keyboard and mouse sharing app.	56d ago
CVE-2026-75048	8.2	—	—	—	—	In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible	56d ago
CVE-2026-74802	8.2	—	—	—	—	SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/	56d ago
CVE-2026-74801	8.2	—	—	—	—	SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments fo	56d ago
CVE-2026-74516	8.2	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC	58d ago
CVE-2026-74355	8.2	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe er	58d ago
CVE-2026-72057	8.2	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across d	58d ago
CVE-2026-72035	8.2	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue	58d ago
CVE-2026-72021	8.2	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP stat	58d ago
CVE-2026-17081	8.2	—	—	—	ibm / db2 mirror for i	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limi	59d ago
CVE-2026-73666	8.2	—	—	—	—	OpenChoreo is a developer platform for Kubernetes.	60d ago
CVE-2026-73658	8.2	—	—	—	—	Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.	60d ago
CVE-2026-18509	8.2	—	—	—	ibm / i	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navig	60d ago
CVE-2026-17272	8.2	—	—	—	ibm / i	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.	60d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker