CVE Tracker
5 recordsEvery published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.
VendorAllmicrosoft 85mozilla 43google 37openclaw 30linux 24ibm 19dlink 19wwbn 19mattermost 18samsung 17tenda 16adobe 16canva 15gvectors 14jettweb 13f5 13parseplatform 11raytha 11arubanetworks 10hcltech 10lenovo 9gl-inet 9redhat 9nextclickventures 9
| CVE | CVSS | EPSS | KEV sources | Patch window | Vendor / product | Summary | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-41053 | 8.8 | — | — | — | suse / rancher | Incorrect authentication caching in the team member ship expansion of the Rancher Github authentication provider c | 118d ago |
| CVE-2026-41052 | 8.8 | — | — | — | suse / rancher | Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher vers | 119d ago |
| CVE-2026-44543 | 8.7 | — | — | — | suse / local path provisioner | Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node. | 151d ago |
| CVE-2026-44937 | 8.2 | — | — | — | suse / rancher fleet | Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15. | 112d ago |
| CVE-2026-44946 | 7.4 | — | — | — | suse / rancher | A SAML authentication replay vulnerability in Rancher's Assertion Consumer Service (ACS) handler did not enforce o | 118d ago |
Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.