Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
417,489 CVEs1,766 in CISA KEV17,506 with EPSS ≥ 10%25,055 with a public exploitUpdated 31 October 2026
17,506 results · page 6 of 351
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2026-2847 | A vulnerability was detected in UTT HiPER 520 1.7.7-160105. | HIGH 7.3EPSS 10.5% | 20 February 2026 |
| CVE-2026-2846 | A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. | HIGH 7.3EPSS 11.0% | 20 February 2026 |
| CVE-2026-2824 | Executing a manipulation of the argument destination can lead to command injection. | LOW 2.1EPSS 17.1% | 20 February 2026 |
| CVE-2026-2823 | A vulnerability was detected in Comfast CF-E7 2.6.0.9. | LOW 2.1EPSS 18.9% | 20 February 2026 |
| CVE-2026-26980 | Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the database. | EXPLOITHIGH 7.5EPSS 71.1% | 20 February 2026 |
| CVE-2026-2670 | A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA… | HIGH 7.3EPSS 13.9% | 18 February 2026 |
| CVE-2026-2329 | An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. | CRITICAL 9.3EPSS 41.7% | 18 February 2026 |
| CVE-2026-26119 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | HIGH 8.8EPSS 11.3% | 17 February 2026 |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | KEVCRITICAL 10.0EPSS 13.5% | 17 February 2026 |
| CVE-2026-2615 | Executing a manipulation of the argument del_flag can lead to command injection. | HIGH 7.3EPSS 13.4% | 17 February 2026 |
| CVE-2026-2537 | A vulnerability was identified in Comfast CF-E4 2.6.0.1. | LOW 2.0EPSS 28.0% | 16 February 2026 |
| CVE-2026-2535 | A vulnerability was found in Comfast CF-N1 V2 2.6.0.2. | LOW 2.1EPSS 15.6% | 16 February 2026 |
| CVE-2026-2534 | A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2. | LOW 2.1EPSS 15.0% | 16 February 2026 |
| CVE-2026-2441 | Google Chromium CSS Use-After-Free Vulnerability | KEVEXPLOITHIGH 8.8EPSS 55.0% | 13 February 2026 |
| CVE-2026-26190 | Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. | CRITICAL 9.8EPSS 39.3% | 13 February 2026 |
| CVE-2026-1357 | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. | CRITICAL 9.8EPSS 35.1% | 11 February 2026 |
| CVE-2026-21513 | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | KEVHIGH 8.8EPSS 15.9% | 10 February 2026 |
| CVE-2026-21510 | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | KEVHIGH 8.8EPSS 61.2% | 10 February 2026 |
| CVE-2026-21249 | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally. | LOW 3.3EPSS 11.4% | 10 February 2026 |
| CVE-2026-0652 | On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization. | HIGH 8.7EPSS 23.3% | 10 February 2026 |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | KEVHIGH 7.5EPSS 88.3% | 10 February 2026 |
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | KEVMEDIUM 5.9EPSS 29.5% | 10 February 2026 |
| CVE-2026-25939 | From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on actions. | CRITICAL 9.3EPSS 12.7% | 9 February 2026 |
| CVE-2026-25895 | A path traversal vulnerability in FUXA allows an unauthenticated, remote attacker to write arbitrary files to arbitrary locations on the server filesystem. | EXPLOITCRITICAL 9.5EPSS 13.0% | 9 February 2026 |
| CVE-2026-2184 | A vulnerability was detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. | MEDIUM 6.9EPSS 10.7% | 8 February 2026 |
| CVE-2026-2131 | A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. | LOW 2.1EPSS 17.5% | 8 February 2026 |
| CVE-2026-2085 | A security vulnerability has been detected in D-Link DWR-M921 1.1.50. | HIGH 7.3EPSS 10.5% | 7 February 2026 |
| CVE-2026-2080 | A vulnerability has been found in UTT HiPER 810 1.7.4-141218. | HIGH 7.3EPSS 10.8% | 7 February 2026 |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | KEVCRITICAL 9.9EPSS 93.1% | 6 February 2026 |
| CVE-2026-21643 | Fortinet FortiClient EMS SQL Injection Vulnerability | KEVCRITICAL 9.8EPSS 97.7% | 6 February 2026 |
| CVE-2026-2000 | A vulnerability was found in DCN DCME-320 up to 20260121. | LOW 2.0EPSS 19.7% | 6 February 2026 |
| CVE-2026-25512 | Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerability in Group-Office. | CRITICAL 9.4EPSS 20.1% | 4 February 2026 |
| CVE-2026-1207 | Raster lookups on ``RasterField`` (only implemented on PostGIS) allows remote attackers to inject SQL via the band index parameter. | MEDIUM 5.4EPSS 12.8% | 3 February 2026 |
| CVE-2026-25137 | From 21.11 to before 25.11 and 26.05, every NixOS based Odoo setup publicly exposes the database manager without any authentication. | CRITICAL 9.1EPSS 10.3% | 2 February 2026 |
| CVE-2026-22778 | From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. | CRITICAL 9.8EPSS 18.3% | 2 February 2026 |
| CVE-2026-0599 | A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching during input validation in VLM mode. | HIGH 7.5EPSS 29.5% | 2 February 2026 |
| CVE-2026-25253 | OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value. | HIGH 8.8EPSS 32.4% | 1 February 2026 |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | KEVCRITICAL 9.8EPSS 98.6% | 29 January 2026 |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | KEVCRITICAL 9.8EPSS 98.7% | 29 January 2026 |
| CVE-2020-36962 | Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. | MEDIUM 5.3EPSS 12.5% | 28 January 2026 |
| CVE-2026-1056 | The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' function in all versions up to, and including, 12.0.3. | CRITICAL 9.8EPSS 13.3% | 28 January 2026 |
| CVE-2025-40554 | SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that, if exploited, could allow an attacker to invoke specific actions within Web Help Desk. | CRITICAL 9.8EPSS 60.6% | 28 January 2026 |
| CVE-2025-40553 | SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. | CRITICAL 9.8EPSS 68.0% | 28 January 2026 |
| CVE-2025-40552 | SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication. | CRITICAL 9.8EPSS 52.0% | 28 January 2026 |
| CVE-2025-40551 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | KEVCRITICAL 9.8EPSS 84.2% | 28 January 2026 |
| CVE-2025-40536 | SolarWinds Web Help Desk Security Control Bypass Vulnerability | KEVCRITICAL 9.8EPSS 73.6% | 28 January 2026 |
| CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | KEVCRITICAL 9.8EPSS 86.6% | 27 January 2026 |
| CVE-2025-15467 | Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. | HIGH 8.8EPSS 74.8% | 27 January 2026 |
| CVE-2026-1470 | n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. | CRITICAL 9.9EPSS 20.4% | 27 January 2026 |
| CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability | KEVHIGH 7.8EPSS 70.8% | 26 January 2026 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.