CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

237 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 9 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-76197	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (	57d ago
CVE-2026-76195	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (	57d ago
CVE-2026-76193	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result i	57d ago
CVE-2026-71398	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrar	71d ago
CVE-2026-27302	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrar	71d ago
CVE-2026-48362	10	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Inject	71d ago
CVE-2026-48331	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result i	78d ago
CVE-2026-48330	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command	78d ago
CVE-2026-48323	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engi	78d ago
CVE-2026-48449	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrar	83d ago
CVE-2026-48316	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	107d ago
CVE-2026-48286	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vuln	113d ago
CVE-2026-48283	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type	113d ago
CVE-2026-48282exploited	10	42.4%	3/3	+2d	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restrict	113d ago
CVE-2026-48281	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	113d ago
CVE-2026-48277	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	113d ago
CVE-2026-48276	10	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type	113d ago
CVE-2026-48303	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vuln	134d ago
CVE-2026-47938	10	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (	134d ago
CVE-2026-48326	9.9	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command	78d ago
CVE-2026-48322	9.9	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could re	99d ago
CVE-2026-48318	9.9	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner	99d ago
CVE-2026-48333	9.8	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privileg	78d ago
CVE-2026-71384	9.6	—	—	—	adobe / coldfusion	is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.	71d ago
CVE-2026-48317	9.6	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code	78d ago
CVE-2026-48284	9.6	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution	99d ago
CVE-2026-48359	9.6	—	—	—	adobe / experience manager	Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerabi	99d ago
CVE-2026-48259	9.6	—	—	—	adobe / experience manager	Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in ar	99d ago
CVE-2026-47928	9.6	—	—	—	adobe / coldfusion	ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that co	134d ago
CVE-2026-34659	9.6	—	—	—	adobe / connect desktop application	Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulne	162d ago
CVE-2026-48334	9.3	—	—	—	adobe / illustrator	Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code executio	99d ago
CVE-2026-48325	9.3	—	—	—	adobe / coldfusion	ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitr	99d ago
CVE-2026-48321	9.3	—	—	—	adobe / coldfusion	ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.	99d ago
CVE-2026-48356	9.3	—	—	—	adobe / commerce	Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result i	99d ago
CVE-2026-48315	9.3	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that co	113d ago
CVE-2026-48313exploited	9.3	3.0%	1/3	+32d	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restrict	113d ago
CVE-2026-34691	9.3	—	—	—	adobe / experience manager	Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scri	134d ago
CVE-2026-34660	9.3	—	—	—	adobe / connect desktop application	Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability	162d ago
CVE-2026-48324	9.1	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')	99d ago
CVE-2026-48319	9.1	—	—	—	adobe / coldfusion	ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner	99d ago
CVE-2026-48358	9.1	—	—	—	adobe / commerce	Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitr	99d ago
CVE-2026-48381	9	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command	71d ago
CVE-2026-48327	9	—	—	—	adobe / coldfusion	ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution i	99d ago
CVE-2026-71387	8.8	—	—	—	adobe / coldfusion	ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution i	71d ago
CVE-2026-71386	8.8	—	—	—	adobe / coldfusion	is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the con	71d ago
CVE-2026-48307	8.8	—	—	—	adobe / coldfusion	ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabili	113d ago
CVE-2026-47932	8.8	—	—	—	adobe / coldfusion	ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restrict	134d ago
CVE-2026-21273	8.7	—	—	—	adobe / coldfusion	is affected by an Improper Input Validation vulnerability that could result in privilege escalation.	71d ago
CVE-2026-47994	8.7	—	—	—	adobe / commerce	Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-priv	99d ago
CVE-2026-34686	8.7	—	—	—	adobe / commerce	Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected	162d ago
CVE-2026-34653	8.7	—	—	—	adobe / commerce	Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected	162d ago
CVE-2026-48441	8.6	—	—	—	adobe / lightroom	Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	71d ago
CVE-2026-48397	8.6	—	—	—	adobe / lightroom	Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary	71d ago
CVE-2026-48448	8.6	—	—	—	adobe / campaign	Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command	83d ago
CVE-2026-48396	8.6	—	—	—	adobe / bridge	Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in th	85d ago
CVE-2026-48395	8.6	—	—	—	adobe / bridge	Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the	85d ago
CVE-2026-48388	8.6	—	—	—	adobe / photoshop installer	Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have result	85d ago
CVE-2026-48275	8.6	—	—	—	adobe / illustrator	Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in	99d ago
CVE-2026-48350	8.6	—	—	—	adobe / animate	Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabi	99d ago
CVE-2026-48310	8.6	—	—	—	adobe / experience manager	Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Trav	99d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker