CVE Tracker
4 recordsEvery published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 4 added to KEV in the last 7 days.
VendorAllmicrosoft 85mozilla 43google 37openclaw 30linux 24ibm 19dlink 19wwbn 19mattermost 18samsung 17tenda 16adobe 16canva 15gvectors 14jettweb 13f5 13parseplatform 11raytha 11arubanetworks 10hcltech 10lenovo 9gl-inet 9redhat 9nextclickventures 9
| CVE | CVSS | EPSS | KEV sources | Patch window | Vendor / product | Summary | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-41045 | 8.1 | — | — | — | presire / qsnapper | A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to | 126d ago |
| CVE-2026-41046 | 7.3 | — | — | — | presire / qsnapper | A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attac | 126d ago |
| CVE-2026-41049 | 7.1 | — | — | — | presire / qsnapper | Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allo | 126d ago |
| CVE-2026-41048 | 7.1 | — | — | — | presire / qsnapper | Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a lo | 126d ago |
Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.