Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,487 CVEs1,766 in CISA KEV17,504 with EPSS ≥ 10%25,055 with a public exploitUpdated 31 October 2026
17,504 results · page 3 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2026-9514 | A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. | LOW 2.1EPSS 10.4% | 25 May 2026 |
| CVE-2026-9441 | Performing a manipulation of the argument rootAPmac results in command injection. | LOW 2.1EPSS 15.0% | 25 May 2026 |
| CVE-2026-9440 | A vulnerability was identified in Edimax BR-6478AC 1.23. | LOW 2.1EPSS 16.6% | 25 May 2026 |
| CVE-2026-46300 | Linux Kernel Missing Initialization of a Variable Vulnerability | KEVEXPLOITHIGH 7.8EPSS 15.7% | 23 May 2026 |
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | KEVHIGH 8.8EPSS 80.2% | 22 May 2026 |
| CVE-2026-9256 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. | CRITICAL 9.2EPSS 10.9% | 22 May 2026 |
| CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability | KEVCRITICAL 10.0EPSS 90.0% | 22 May 2026 |
| CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability | KEVCRITICAL 10.0EPSS 68.0% | 22 May 2026 |
| CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability | KEVCRITICAL 10.0EPSS 88.3% | 22 May 2026 |
| CVE-2026-34926 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | KEVMEDIUM 6.7EPSS 13.4% | 21 May 2026 |
| CVE-2026-48172 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | KEVCRITICAL 10.0EPSS 17.9% | 21 May 2026 |
| CVE-2026-9082 | Drupal Core SQL Injection Vulnerability | KEVEXPLOITCRITICAL 9.8EPSS 89.4% | 20 May 2026 |
| CVE-2026-23734 | Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration files by using URLs such as http://localhost:8080/bin/ssx/Main/WebHome?resource=/../../WEB-INF/xwiki.cfg&minify=false, leading to Path Traversal. | CRITICAL 9.3EPSS 18.5% | 20 May 2026 |
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability | KEVHIGH 7.5EPSS 63.1% | 20 May 2026 |
| CVE-2026-47323 | Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and… | CRITICAL 9.8EPSS 19.6% | 19 May 2026 |
| CVE-2026-45434 | Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06. | CRITICAL 9.8EPSS 21.3% | 19 May 2026 |
| CVE-2026-45829 | A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true… | CRITICAL 10.0EPSS 15.1% | 18 May 2026 |
| CVE-2026-41948 | Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by exploiting insufficient URL path sanitization. | CRITICAL 9.3EPSS 22.7% | 18 May 2026 |
| CVE-2026-2652 | A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) and served via uvicorn (ASGI). | HIGH 8.6EPSS 20.8% | 15 May 2026 |
| CVE-2026-42897 | Microsoft Exchange Server Cross-Site Scripting Vulnerability | KEVMEDIUM 6.1EPSS 70.7% | 14 May 2026 |
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | KEVCRITICAL 10.0EPSS 91.8% | 14 May 2026 |
| CVE-2026-8181 | The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. | CRITICAL 9.8EPSS 14.6% | 14 May 2026 |
| CVE-2026-0257 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | KEVHIGH 7.8EPSS 95.0% | 13 May 2026 |
| CVE-2026-44578 | From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. | HIGH 8.6EPSS 35.5% | 13 May 2026 |
| CVE-2026-42945 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. | CRITICAL 9.2EPSS 68.0% | 13 May 2026 |
| CVE-2026-34650 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. | HIGH 7.5EPSS 15.1% | 12 May 2026 |
| CVE-2026-34649 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. | HIGH 7.5EPSS 13.6% | 12 May 2026 |
| CVE-2026-34648 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. | HIGH 7.5EPSS 21.4% | 12 May 2026 |
| CVE-2026-41089 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | CRITICAL 9.8EPSS 79.6% | 12 May 2026 |
| CVE-2026-33112 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | HIGH 8.8EPSS 31.1% | 12 May 2026 |
| CVE-2026-43500 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_input_call_event() and the RESPONSE handler in rxrpc_verify_response() copy the… | EXPLOIT ×2HIGH 7.8EPSS 94.1% | 11 May 2026 |
| CVE-2026-7864 | SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information. | MEDIUM 6.9EPSS 16.1% | 8 May 2026 |
| CVE-2026-44338 | PraisonAI is a multi-agent teams system. | HIGH 7.3EPSS 32.6% | 8 May 2026 |
| CVE-2026-44127 | SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of… | HIGH 8.8EPSS 14.8% | 8 May 2026 |
| CVE-2026-43284 | In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. | EXPLOIT ×2HIGH 8.8EPSS 94.2% | 8 May 2026 |
| CVE-2026-42271 | BerriAI LiteLLM Command Injection Vulnerability | KEVHIGH 8.7EPSS 91.4% | 8 May 2026 |
| CVE-2026-42208 | BerriAI LiteLLM SQL Injection Vulnerability | KEVCRITICAL 9.3EPSS 89.4% | 8 May 2026 |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | KEVHIGH 7.2EPSS 34.5% | 7 May 2026 |
| CVE-2026-5786 | An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access. | HIGH 8.8EPSS 11.2% | 7 May 2026 |
| CVE-2026-34474 | Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. | EXPLOITHIGH 7.5EPSS 24.7% | 6 May 2026 |
| CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | KEVCRITICAL 9.3EPSS 41.7% | 6 May 2026 |
| CVE-2026-36356 | The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint. | EXPLOITCRITICAL 9.1EPSS 20.3% | 5 May 2026 |
| CVE-2026-23918 | Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. | EXPLOITHIGH 8.8EPSS 49.7% | 4 May 2026 |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | KEVEXPLOITCRITICAL 9.3EPSS 98.5% | 29 April 2026 |
| CVE-2026-27760 | OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the installer AJAX endpoint that allows unauthenticated attackers to execute arbitrary code by injecting PHP statements into the databaseConnectivity action parameter. | CRITICAL 9.2EPSS 33.0% | 28 April 2026 |
| CVE-2026-41268 | Prior to 3.1.0, Flowise is vulnerable to a critical unauthenticated remote command execution (RCE) vulnerability. | CRITICAL 9.8EPSS 17.4% | 23 April 2026 |
| CVE-2026-25874 | LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client… | CRITICAL 9.3EPSS 15.5% | 23 April 2026 |
| CVE-2026-3844 | The Breeze Cache plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fetch_gravatar_from_remote' function in all versions up to, and including, 2.4.4. | CRITICAL 9.8EPSS 27.7% | 23 April 2026 |
| CVE-2026-41679 | Prior to version 2026.416.0, an unauthenticated attacker can achieve full remote code execution on any network-accessible Paperclip instance running in `authenticated` mode with default configuration. | CRITICAL 10.0EPSS 31.7% | 23 April 2026 |
| CVE-2026-41176 | The RC endpoint `options/set` is exposed without `AuthRequired: true`, but it can mutate global runtime configuration, including the RC option block itself. | CRITICAL 9.2EPSS 32.7% | 23 April 2026 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.