CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

70 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-18835	9.9	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary com	16d ago
CVE-2026-16816	9.9	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary com	17d ago
CVE-2026-15068	9.9	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authenticated attacker to execute arbitrary	17d ago
CVE-2026-17186	9.9	critical	ibm / db2 mirror for i	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to impro	22d ago
CVE-2026-16860	9.9	critical	ibm / i	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncon	24d ago
CVE-2026-17160	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an in	16d ago
CVE-2026-17157	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	16d ago
CVE-2026-17152	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buf	16d ago
CVE-2026-17145	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to impro	16d ago
CVE-2026-17142	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to i	16d ago
CVE-2026-17141	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buf	16d ago
CVE-2026-17136	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a for	16d ago
CVE-2026-17122	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	16d ago
CVE-2026-17118	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use	16d ago
CVE-2026-17040	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buf	16d ago
CVE-2026-16919	9.8	critical	ibm / aix	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to impro	17d ago
CVE-2026-16917	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an in	17d ago
CVE-2026-16913	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	17d ago
CVE-2026-16894	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	17d ago
CVE-2026-16885	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	17d ago
CVE-2026-16882	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to i	17d ago
CVE-2026-16872	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	17d ago
CVE-2026-16864	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	17d ago
CVE-2026-16862	9.8	critical	ibm / aix	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta	17d ago
CVE-2026-16845	9.8	critical	ibm / aix	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a hea	17d ago
CVE-2026-16840	9.8	critical	ibm / aix	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an ou	17d ago
CVE-2026-16834	9.8	critical	ibm / aix	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an	17d ago
CVE-2026-16656	9.8	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to imprope	17d ago
CVE-2026-17184	9.8	critical	ibm / db2 mirror for i	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external con	22d ago
CVE-2026-17182	9.8	critical	ibm / db2 mirror for i	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter	22d ago
CVE-2026-17482	9.8	critical	ibm / documentation offline	IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to impro	23d ago
CVE-2026-17083	9.8	critical	ibm / i	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer o	24d ago
CVE-2026-17218	9.8	critical	ibm / i	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write	24d ago
CVE-2026-16956	9.8	critical	ibm / db2 mirror for i	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper	24d ago
CVE-2026-12943	9.8	critical	ibm / hardware management console	IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Po	37d ago
CVE-2026-12118	9.8	critical	ibm / webmethods integration	IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitr	37d ago
CVE-2026-15435	9.8	critical	ibm / app connect enterprise	IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacke	37d ago
CVE-2026-14512	9.8	critical	ibm / websphere application server	IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserializati	39d ago
CVE-2026-14446	9.8	critical	ibm / websphere application server	IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the a	39d ago
CVE-2026-10109	9.8	critical	ibm / db2	IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pr	67d ago
CVE-2026-8175	9.8	critical	ibm / aspera high-speed transfer endpoint	IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.	101d ago
CVE-2026-3660	9.8	critical	ibm / engineering lifecycle management	IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to upda	102d ago
CVE-2026-9170	9.8	critical	ibm / http server	IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improp	102d ago
CVE-2026-8633	9.8	critical	ibm / websphere application server	IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application S	102d ago
CVE-2026-16903	9.6	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a d	17d ago
CVE-2026-16835	9.6	critical	ibm / power system e1080 \(9080-hex\) firmware	IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu	17d ago
CVE-2026-16687	9.6	critical	ibm / power system e1180 \(9080-heu\) firmware	IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu	17d ago
CVE-2026-17276	9.6	critical	ibm / i	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper au	24d ago
CVE-2026-16839	9.4	critical	ibm / aix	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to	17d ago
CVE-2026-14525	9.4	critical	ibm / websphere application server	IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is v	23d ago
CVE-2026-14529	9.4	critical	ibm / websphere application server	IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0	38d ago
CVE-2026-17422	9.3	critical	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buff	16d ago
CVE-2026-16822	9.3	critical	ibm / aix	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server a	17d ago
CVE-2026-17181	9.3	critical	ibm / db2 mirror for i	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to	22d ago
CVE-2026-11707	9.3	critical	ibm / websphere application server	IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-s	37d ago
CVE-2026-14973	9.3	critical	ibm / aspera	IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the us	39d ago
CVE-2026-15091	9.3	critical	ibm / engineering ai hub	IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to i	50d ago
CVE-2026-11712	9.3	critical	ibm / websphere application server	IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administr	67d ago
CVE-2026-11708	9.3	critical	ibm / websphere application server	IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administr	67d ago
CVE-2026-3627	9.1	critical	ibm / concert	IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection.	8d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker