CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 7 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-65916	8.1	—	—	—	—	CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBac	82d ago
CVE-2026-64815	8.1	—	—	—	jetbrains / intellij idea	In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files	82d ago
CVE-2026-59545	8.1	—	—	—	—	Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.	82d ago
CVE-2026-65757	8.1	—	—	—	—	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extensi	82d ago
CVE-2026-13072	8.1	—	—	—	mongodb / mongodb	When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON d	83d ago
CVE-2026-13059	8.1	—	—	—	mongodb / mongodb	An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected b	83d ago
CVE-2026-13190	8.1	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utiliti	83d ago
CVE-2026-13187	8.1	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, po	83d ago
CVE-2026-13186	8.1	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persisten	83d ago
CVE-2026-13185	8.1	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceM	83d ago
CVE-2026-13181	8.1	—	—	—	progress / telerik ui for asp.net ajax	In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName p	83d ago
CVE-2026-65596	8.1	—	—	—	n8n / n8n	n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-ba	83d ago
CVE-2026-4773	8.1	—	—	—	—	Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd.	83d ago
CVE-2026-15802	8.1	—	—	—	—	The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path vali	84d ago
CVE-2026-62547	8.1	—	—	—	oracle / workflow	Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).	84d ago
CVE-2026-62530	8.1	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR).	84d ago
CVE-2026-62514	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business Suite (compon	84d ago
CVE-2026-62504	8.1	—	—	—	oracle / time and labor	Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-62497	8.1	—	—	—	oracle / flow manufacturing	Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations)	84d ago
CVE-2026-62494	8.1	—	—	—	oracle / time and labor	Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-62472	8.1	—	—	—	oracle / installed base	Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).	84d ago
CVE-2026-62468	8.1	—	—	—	oracle / human resources	Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Cent	84d ago
CVE-2026-62451	8.1	—	—	—	oracle / work in process	Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-62445	8.1	—	—	—	oracle / order management	Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Too	84d ago
CVE-2026-61338	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Internal Operatio	84d ago
CVE-2026-61335	8.1	—	—	—	oracle / product workbench	Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61333	8.1	—	—	—	oracle / product workbench	Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61329	8.1	—	—	—	oracle / price protection	Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61327	8.1	—	—	—	oracle / bills of material	Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61310	8.1	—	—	—	oracle / product hub	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61301	8.1	—	—	—	oracle / process manufacturing financials	Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Intern	84d ago
CVE-2026-61297	8.1	—	—	—	oracle / customers online	Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61287	8.1	—	—	—	oracle / process manufacturing systems	Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal	84d ago
CVE-2026-61225	8.1	—	—	—	oracle / communications converged application server	Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (componen	84d ago
CVE-2026-61218	8.1	—	—	—	oracle / e-business suite secure enterprise search	Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (componen	84d ago
CVE-2026-61170	8.1	—	—	—	oracle / agile product lifecycle management	Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).	84d ago
CVE-2026-61163	8.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	84d ago
CVE-2026-61160	8.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	84d ago
CVE-2026-61150	8.1	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	84d ago
CVE-2026-61137	8.1	—	—	—	oracle / commerce platform	Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework)	84d ago
CVE-2026-61122	8.1	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).	84d ago
CVE-2026-61106	8.1	—	—	—	oracle / goldengate	Vulnerability in Oracle GoldenGate (component: Config Service Executable).	84d ago
CVE-2026-61105	8.1	—	—	—	oracle / banking trade finance	Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: In	84d ago
CVE-2026-61102	8.1	—	—	—	oracle / banking trade finance	Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: In	84d ago
CVE-2026-61092	8.1	—	—	—	oracle / webcenter enterprise capture	Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bu	84d ago
CVE-2026-61074	8.1	—	—	—	oracle / peoplesoft enterprise fin common objects	Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: ePro	84d ago
CVE-2026-61037	8.1	—	—	—	oracle / loans	Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61031	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite (component: Internal Oper	84d ago
CVE-2026-61030	8.1	—	—	—	oracle / process manufacturing product development	Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (componen	84d ago
CVE-2026-61024	8.1	—	—	—	oracle / irecruitment	Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61020	8.1	—	—	—	oracle / customers online	Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61019	8.1	—	—	—	oracle / customers online	Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-61005	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Interna	84d ago
CVE-2026-61004	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Internal Operati	84d ago
CVE-2026-61000	8.1	—	—	—	oracle / process manufacturing systems	Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal	84d ago
CVE-2026-60997	8.1	—	—	—	oracle / universal work queue	Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Non-Media Integrat	84d ago
CVE-2026-60986	8.1	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	84d ago
CVE-2026-60982	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Ope	84d ago
CVE-2026-60979	8.1	—	—	—	oracle / scripting	Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Internal Operations).	84d ago
CVE-2026-60974	8.1	—	—	—	oracle / e-business tax	Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).	84d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker