CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

4 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-4249	8.6	high	wso2 / api control plane	The throttling event handling mechanism in multiple WSO2 products accepts user-supplied JSON payloads without suffi	61d ago
CVE-2025-10470	8.6	high	wso2 / identity server	The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting	117d ago
CVE-2026-2053	8.3	high	wso2 / api manager	The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validat	71d ago
CVE-2025-10908	7.3	high	wso2 / identity server	Due to a lack of user account state validation during authentication, locked user accounts can be successfully aut	117d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker