CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

43 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 9 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-76197	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (	56d ago
CVE-2026-76195	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (	56d ago
CVE-2026-76193	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result i	56d ago
CVE-2026-71398	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrar	70d ago
CVE-2026-27302	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrar	70d ago
CVE-2026-48362	10	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Inject	70d ago
CVE-2026-48331	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result i	78d ago
CVE-2026-48330	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command	78d ago
CVE-2026-48323	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engi	78d ago
CVE-2026-48449	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrar	83d ago
CVE-2026-48316	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	106d ago
CVE-2026-48286	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vuln	112d ago
CVE-2026-48283	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type	112d ago
CVE-2026-48282exploited	10	42.4%	3/3	+2d	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restrict	112d ago
CVE-2026-48281	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	112d ago
CVE-2026-48277	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	112d ago
CVE-2026-48276	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type	112d ago
CVE-2026-48303	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vuln	133d ago
CVE-2026-47938	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (	133d ago
CVE-2026-48326	9.9	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command	78d ago
CVE-2026-48322	9.9	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could re	98d ago
CVE-2026-48318	9.9	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner	98d ago
CVE-2026-48333	9.8	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privileg	78d ago
CVE-2026-71384	9.6	—	—	—	adobe / coldfusion	is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.	70d ago
CVE-2026-48317	9.6	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code	78d ago
CVE-2026-48284	9.6	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution	98d ago
CVE-2026-48359	9.6	—	—	—	adobe / experience manager	Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerabi	98d ago
CVE-2026-48259	9.6	—	—	—	adobe / experience manager	Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in ar	98d ago
CVE-2026-47928	9.6	—	—	—	adobe / coldfusion	ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that co	133d ago
CVE-2026-34659	9.6	—	—	—	adobe / connect desktop application	Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulne	161d ago
CVE-2026-48334	9.3	—	—	—	adobe / illustrator	Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code executio	98d ago
CVE-2026-48325	9.3	—	—	—	adobe / coldfusion	ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitr	98d ago
CVE-2026-48321	9.3	—	—	—	adobe / coldfusion	ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.	98d ago
CVE-2026-48356	9.3	—	—	—	adobe / commerce	Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result i	98d ago
CVE-2026-48315	9.3	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	112d ago
CVE-2026-48313exploited	9.3	3.0%	1/3	+32d	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restrict	112d ago
CVE-2026-34691	9.3	—	—	—	adobe / experience manager	Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scri	133d ago
CVE-2026-34660	9.3	—	—	—	adobe / connect desktop application	Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability	161d ago
CVE-2026-48324	9.1	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	98d ago
CVE-2026-48319	9.1	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner	98d ago
CVE-2026-48358	9.1	—	—	—	adobe / commerce	Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitr	98d ago
CVE-2026-48381	9	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command	70d ago
CVE-2026-48327	9	—	—	—	adobe / coldfusion	ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution i	98d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker