CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-60778	8.1	—	—	—	oracle / payments	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).	99d ago
CVE-2026-60771	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component	99d ago
CVE-2026-60768	8.1	—	—	—	oracle / applications framework	Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Graph / Charting	99d ago
CVE-2026-60764	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Common Compon	99d ago
CVE-2026-60756	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issue	99d ago
CVE-2026-60749	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60741	8.1	—	—	—	oracle / cost management	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60740	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60736	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: Definition).	99d ago
CVE-2026-60735	8.1	—	—	—	oracle / sales offline	Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60732	8.1	—	—	—	oracle / ireceivables	Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: AR Web Utilities).	99d ago
CVE-2026-60714	8.1	—	—	—	oracle / price protection	Vulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60710	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60708	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Intern	99d ago
CVE-2026-60706	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Process Manufacturing Inventory product of Oracle E-Business Suite (component: Interna	99d ago
CVE-2026-60700	8.1	—	—	—	oracle / universal work queue	Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: UWQ Server Issues)	99d ago
CVE-2026-60691	8.1	—	—	—	oracle / content manager	Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60686	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle U.S.	99d ago
CVE-2026-60670	8.1	—	—	—	oracle / applications technology stack	Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite (component: Client Sy	99d ago
CVE-2026-60653	8.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Manageme	99d ago
CVE-2026-60621	8.1	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security)	99d ago
CVE-2026-60599	8.1	—	—	—	oracle / peoplesoft enterprise campus software campus community	Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tr	99d ago
CVE-2026-60560	8.1	—	—	—	oracle / identity manager	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).	99d ago
CVE-2026-60558	8.1	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	99d ago
CVE-2026-60543	8.1	—	—	—	oracle / soa suite	Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: B2B Engine).	99d ago
CVE-2026-60520	8.1	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	99d ago
CVE-2026-60462	8.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	99d ago
CVE-2026-60450	8.1	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	99d ago
CVE-2026-60417	8.1	—	—	—	oracle / unified directory	Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).	99d ago
CVE-2026-60416	8.1	—	—	—	oracle / access manager	Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).	99d ago
CVE-2026-60323	8.1	—	—	—	oracle / identity manager	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).	99d ago
CVE-2026-60312	8.1	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60281	8.1	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60277	8.1	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60273	8.1	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60222	8.1	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60201	8.1	—	—	—	oracle / weblogic server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60192	8.1	—	—	—	oracle / mysql connector\/net	Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net).	99d ago
CVE-2026-60169	8.1	—	—	—	oracle / hospitality simphony	Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS)	99d ago
CVE-2026-47028	8.1	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: A	99d ago
CVE-2026-47019	8.1	—	—	—	oracle / product hub	Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog).	99d ago
CVE-2026-47014	8.1	—	—	—	oracle / product workbench	Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Security).	99d ago
CVE-2026-10678	8.1	—	—	—	zephyrproject / zephyr	The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-registe	99d ago
CVE-2026-8982	8.1	—	—	—	autel / maxicharger single charger firmware	Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51.	99d ago
CVE-2026-50758	8.1	—	—	—	—	Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbit	99d ago
CVE-2026-47418	8.1	—	—	—	—	PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.	99d ago
CVE-2026-47417	8.1	—	—	—	—	PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.	99d ago
CVE-2026-47412	8.1	—	—	—	—	PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.	99d ago
CVE-2026-47409	8.1	—	—	—	—	PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.	99d ago
CVE-2026-47406	8.1	—	—	—	—	PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system.	99d ago
CVE-2026-47398	8.1	—	—	—	—	PraisonAI is a multi-agent teams system.	99d ago
CVE-2026-47129	8.1	—	—	—	—	NextCRM is open-source customer relationship management (CRM) software.	100d ago
CVE-2026-13381	8.1	—	—	—	vsee / clinic	VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/a	100d ago
CVE-2026-32821	8.1	—	—	—	—	dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data.	100d ago
CVE-2026-62418	8.1	—	—	—	apache / syncope	Low-privileged authenticated Server-Side Request Forgery (SSRF) vulnerability in Apache Syncope via Connectors and	100d ago
CVE-2026-63756	8.1	—	—	—	surrealdb / surrealdb	SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that	100d ago
CVE-2026-63735	8.1	—	—	—	surrealdb / surrealdb	SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authe	100d ago
CVE-2026-13142	8.1	—	—	—	—	The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or	100d ago
CVE-2026-64176	8.1	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on	101d ago
CVE-2026-63925	8.1	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: macsec: fix replay protection at XPN lower-PN	101d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker