CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 4 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-7770	8.8	—	—	—	ibm / i access client solutions	IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execu	148d ago
CVE-2026-43623	8.8	—	—	—	—	microtar through 0.1.0 contains a stack-based buffer overflow vulnerability in the raw_to_header() function in src	148d ago
CVE-2026-10270	8.8	—	—	—	dlink / di-7001mini-8g firmware	A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1.	148d ago
CVE-2026-10259	8.8	—	—	—	—	A security vulnerability has been detected in H3C Magic B0 up to 100R002.	148d ago
CVE-2026-49298	8.8	—	—	—	apache / airflow	A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Exe	148d ago
CVE-2026-49157	8.8	—	—	—	apache / activemq	Incorrect Default Permissions vulnerability in Apache ActiveMQ.	148d ago
CVE-2026-45505	8.8	—	—	—	apache / activemq	Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Activ	148d ago
CVE-2026-42359	8.8	—	—	—	apache / airflow	A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API us	148d ago
CVE-2026-10206	8.8	—	—	—	—	A vulnerability was detected in D-Link DI-8400 up to 16.07.26A1.	148d ago
CVE-2026-10192	8.8	—	—	—	—	A vulnerability was identified in Tenda W12 3.0.0.7(4763).	149d ago
CVE-2026-10191	8.8	—	—	—	—	A vulnerability was determined in Tenda W12 3.0.0.7(4763).	149d ago
CVE-2026-10189	8.8	—	—	—	—	A vulnerability has been found in Tenda W12 3.0.0.7(4763).	149d ago
CVE-2026-10188	8.8	—	—	—	—	A flaw has been found in Tenda W12 3.0.0.7(4763).	149d ago
CVE-2026-10183	8.8	—	—	—	—	A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10181	8.8	—	—	—	—	A vulnerability was found in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10179	8.8	—	—	—	—	A flaw has been found in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10165	8.8	—	—	—	—	A vulnerability was identified in Edimax BR-6478AC 1.23.	149d ago
CVE-2026-10164	8.8	—	—	—	—	A vulnerability was found in Edimax BR-6478AC 1.23.	149d ago
CVE-2026-10163	8.8	—	—	—	—	A vulnerability has been found in Edimax BR-6478AC 1.23.	149d ago
CVE-2026-10162	8.8	—	—	—	—	A flaw has been found in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10161	8.8	—	—	—	—	A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10160	8.8	—	—	—	—	A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10159	8.8	—	—	—	—	A weakness has been identified in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10158	8.8	—	—	—	—	A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20.	149d ago
CVE-2026-10126	8.8	—	—	—	—	A security flaw has been discovered in Edimax BR-6478AC 1.23.	150d ago
CVE-2026-10125	8.8	—	—	—	—	A vulnerability was identified in Edimax BR-6478AC 1.23.	150d ago
CVE-2026-10124	8.8	—	—	—	—	A vulnerability was determined in Shibby Tomato up to 1.28.	150d ago
CVE-2026-10123	8.8	—	—	—	—	A vulnerability was found in TRENDnet TEW-432BRP 3.10B20.	150d ago
CVE-2026-10122	8.8	—	—	—	—	A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20.	150d ago
CVE-2026-10121	8.8	—	—	—	—	A flaw has been found in TRENDnet TEW-432BRP 3.10B20.	150d ago
CVE-2018-25409	8.8	—	—	—	—	SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malici	150d ago
CVE-2026-10120	8.8	—	—	—	—	A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20.	150d ago
CVE-2026-10119	8.8	—	—	—	—	A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20.	150d ago
CVE-2026-7465exploited	8.8	1.2%	1/3	+3d	—	The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Co	150d ago
CVE-2026-48557	8.8	—	—	—	—	Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaul	150d ago
CVE-2026-44421	8.8	—	—	—	freerdp / freerdp	FreeRDP is a free implementation of the Remote Desktop Protocol.	150d ago
CVE-2026-44420	8.8	—	—	—	freerdp / freerdp	FreeRDP is a free implementation of the Remote Desktop Protocol.	150d ago
CVE-2026-5768	8.8	—	—	—	—	The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforc	151d ago
CVE-2026-47125	8.8	—	—	—	—	Arcane is an interface for managing Docker containers, images, networks, and volumes.	151d ago
CVE-2026-45662	8.8	—	—	—	—	Dokploy is a free, self-hostable Platform as a Service (PaaS).	151d ago
CVE-2026-35674	8.8	—	—	—	openclaw / openclaw	OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped	151d ago
CVE-2026-10067	8.8	—	—	—	—	A vulnerability was detected in Shibby Tomato 1.28.	151d ago
CVE-2026-10066	8.8	—	—	—	—	A security vulnerability has been detected in Shibby Tomato up to 1.28.	151d ago
CVE-2026-10065	8.8	—	—	—	—	A weakness has been identified in Shibby Tomato 1.28.	151d ago
CVE-2018-25388	8.8	—	—	—	—	HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicio	151d ago
CVE-2026-10063	8.8	—	—	—	trendnet / tew-432brp firmware	A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20.	151d ago
CVE-2026-10062	8.8	—	—	—	trendnet / tew-432brp firmware	A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20.	151d ago
CVE-2026-45578	8.8	—	—	—	wwbn / avideo	WWBN AVideo is an open source video platform.	151d ago
CVE-2026-44239	8.8	—	—	—	sangoma / freepbx	FreePBX is an open source IP PBX.	151d ago
CVE-2026-44238	8.8	—	—	—	sangoma / freepbx	FreePBX is an open source IP PBX.	151d ago
CVE-2026-49195	8.8	—	—	—	acer / predator connect w6x firmware	Unauthenticated Debug Service.	151d ago
CVE-2025-11993	8.8	—	—	—	—	The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in	151d ago
CVE-2026-9999	8.8	—	—	—	google / chrome	Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to	151d ago
CVE-2026-9995	8.8	—	—	—	google / chrome	Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod	151d ago
CVE-2026-9992	8.8	—	—	—	google / chrome	Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c	151d ago
CVE-2026-9984	8.8	—	—	—	google / chrome	Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbit	151d ago
CVE-2026-9983	8.8	—	—	—	google / chrome	Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	151d ago
CVE-2026-9978	8.8	—	—	—	google / chrome	Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	151d ago
CVE-2026-9976	8.8	—	—	—	google / chrome	Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute a	151d ago
CVE-2026-9973	8.8	—	—	—	google / chrome	Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c	151d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker