LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes

CVE Tracker

2 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.

SeverityAllcriticalhighmediumlowExploitedIn CISA KEV
VendorAllmicrosoft 85mozilla 43google 37openclaw 30linux 24ibm 19dlink 19wwbn 19mattermost 18samsung 17tenda 16adobe 16canva 15gvectors 14jettweb 13f5 13parseplatform 11raytha 11arubanetworks 10hcltech 10lenovo 9gl-inet 9redhat 9nextclickventures 9
CVECVSSEPSSKEV sourcesPatch windowVendor / productSummaryPublished
CVE-2026-444429.9———frappe / erpnextERPNext is a free and open source Enterprise Resource Planning tool.165d ago
CVE-2026-318779.8———frappe / frappeFrappe is a full-stack web application framework.228d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.