Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,739 CVEs1,716 in CISA KEV17,392 with EPSS ≥ 10%25,049 with a public exploitUpdated 21 September 2026
39,248 results · page 74 of 785
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2026-53405 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. | CRITICAL 9.8EPSS 0.75% | 20 July 2026 |
| CVE-2026-12701 | A path traversal vulnerability was found in pulpcore. | CRITICAL 9.0EPSS 1.19% | 20 July 2026 |
| CVE-2026-57309 | A Blind SQL injection vulnerability has been identified in Windu CMS. | CRITICAL 9.3EPSS 0.53% | 20 July 2026 |
| CVE-2026-64622 | The GET /approvals/?status=all, GET /approvals/:id, GET /approvals/stats, and GET /approvals/sse routes disclose full ApprovalEntry content including action/target shell-command strings, file paths, justifications, and risk levels. | CRITICAL 9.3EPSS 0.45% | 20 July 2026 |
| CVE-2026-64621 | FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_file_apply_to_settings() (client/common/file.c) when parsing the selectedmonitors field of a .rdp connection file. | CRITICAL 9.3EPSS 0.30% | 20 July 2026 |
| CVE-2026-64620 | FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). | CRITICAL 9.3EPSS 0.85% | 20 July 2026 |
| CVE-2026-63756 | SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unauthenticated requests to inherit authenticated session state. | CRITICAL 9.2EPSS 0.37% | 20 July 2026 |
| CVE-2026-16242 | A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic. | CRITICAL 9.4EPSS 0.80% | 20 July 2026 |
| CVE-2026-16235 | Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. | CRITICAL 9.8EPSS 0.55% | 20 July 2026 |
| CVE-2026-13147 | The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts (Server-Side Request Forgery). | CRITICAL 9.1EPSS 0.91% | 20 July 2026 |
| CVE-2026-44359 | Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's main_matrix.yml workflow is triggered by pull_request_target and multiple jobs check out the attacker's fork code and execute it with access to repository secrets and elevated… | CRITICAL 10.0EPSS 1.80% | 20 July 2026 |
| CVE-2026-64162 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedule_worker() had already been called (and after… | CRITICAL 9.8EPSS 0.35% | 19 July 2026 |
| CVE-2026-64160 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Fix potential tearing in using ->remote_i_size and ->zero_point by copying i_size_read() and i_size_write() and… | CRITICAL 9.8EPSS 0.41% | 19 July 2026 |
| CVE-2026-64150 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs Quoting sashiko: In the error path, local_bh_enable() is called before local_unlock_nested_bh(). | CRITICAL 9.8EPSS 0.44% | 19 July 2026 |
| CVE-2026-64142 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_list lookups ksmbd_durable_scavenger() has two related races against any walker that iterates f_ci->m_fp_list, including… | CRITICAL 9.8EPSS 0.53% | 19 July 2026 |
| CVE-2026-64136 | In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change… | CRITICAL 9.8EPSS 0.49% | 19 July 2026 |
| CVE-2026-64132 | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sashiko: In ipv6_hop_ioam(), the hdr pointer is initialized to point into the skb's linear data buffer. | CRITICAL 9.8EPSS 0.49% | 19 July 2026 |
| CVE-2026-64125 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUF_EEE_EN | RBUF_PM_EN in RBUF_ENERGY_CTRL breaks the RX path on GENET hardware once MAC EEE becomes active. | CRITICAL 9.8EPSS 0.55% | 19 July 2026 |
| CVE-2026-64122 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_reporter_timeout_recover() accesses sq->netdev after mlx5e_safe_reopen_channels() has torn down and freed the… | CRITICAL 9.8EPSS 0.46% | 19 July 2026 |
| CVE-2026-64113 | In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames whose source MAC matches the VF's own address (VEPA multicast workaround) by freeing… | CRITICAL 9.8EPSS 0.55% | 19 July 2026 |
| CVE-2026-64106 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits than the virtual… | CRITICAL 9.0EPSS 0.15% | 19 July 2026 |
| CVE-2026-64102 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field (c_hdr->mpa_len, 16 bit big-endian,… | CRITICAL 9.8EPSS 0.50% | 19 July 2026 |
| CVE-2026-64091 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. | CRITICAL 9.8EPSS 0.43% | 19 July 2026 |
| CVE-2026-64089 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last_changeset_len len was declared as s16, but the field is never intended to hold a negative value. | CRITICAL 9.8EPSS 0.55% | 19 July 2026 |
| CVE-2026-64080 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification handlers currently look up a notifier callback under notify_lock, drop the lock, and then dereference the… | CRITICAL 9.3EPSS 0.14% | 19 July 2026 |
| CVE-2026-64069 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When the preparation of a new subrequest for a read fails, if the subrequest has already been added to the… | CRITICAL 9.8EPSS 0.44% | 19 July 2026 |
| CVE-2026-64068 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests… | CRITICAL 9.8EPSS 0.34% | 19 July 2026 |
| CVE-2026-64067 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests locklessly The list of subrequests attached to stream->subrequests is accessed without locks by… | CRITICAL 9.8EPSS 0.29% | 19 July 2026 |
| CVE-2026-64066 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_to_pagecache() so that it pauses the generation of new subrequests if an already-issued subrequest fails. | CRITICAL 9.8EPSS 0.44% | 19 July 2026 |
| CVE-2026-64061 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_gaps() Fix netfs_read_gaps() to release the sink page it uses after waiting for the request to complete. | CRITICAL 9.8EPSS 0.47% | 19 July 2026 |
| CVE-2026-64056 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be… | CRITICAL 9.8EPSS 0.55% | 19 July 2026 |
| CVE-2026-64055 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmac_rx() NAPI poll function assembles packets in an SKB from a ring buffer. | CRITICAL 9.8EPSS 0.51% | 19 July 2026 |
| CVE-2026-64047 | In the Linux kernel, the following vulnerability has been resolved: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring When an sk_msg scatterlist ring wraps (sg.end < sg.start), tls_push_record() chains the tail portion of the ring… | CRITICAL 9.8EPSS 0.51% | 19 July 2026 |
| CVE-2026-64046 | In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 (start != 0) the current code will create a chain link to content type right after the wrap link:… | CRITICAL 9.8EPSS 0.51% | 19 July 2026 |
| CVE-2026-64037 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled When the TLC notification disables AMSDU for a TID, the MLD driver sets max_tid_amsdu_len to the sentinel value… | CRITICAL 9.8EPSS 0.43% | 19 July 2026 |
| CVE-2026-64035 | In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type:… | CRITICAL 9.8EPSS 0.44% | 19 July 2026 |
| CVE-2026-64034 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer In mana_hwc_rx_event_handler(), resp->response.hwc_msg_id is read from DMA-coherent memory and bounds-checked, then… | CRITICAL 9.3EPSS 0.15% | 19 July 2026 |
| CVE-2026-64033 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation cleanup In the error path of rtrs_srv_create_path_files(), the sysfs root folders may already have been created and srv_path->kobj… | CRITICAL 9.8EPSS 0.49% | 19 July 2026 |
| CVE-2026-64025 | In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx sk_psock_strp_data_ready() already checks tls_sw_has_ctx_rx() and defers to psock->saved_data_ready when a TLS RX context is… | CRITICAL 9.8EPSS 0.44% | 19 July 2026 |
| CVE-2026-64024 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Blamed commit moved the TIME_WAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would… | CRITICAL 9.4EPSS 0.39% | 19 July 2026 |
| CVE-2026-64018 | In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. | CRITICAL 9.3EPSS 0.14% | 19 July 2026 |
| CVE-2026-64016 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd_reopen_durable_fd() republishes the same ksmbd_file into the session volatile-id table. | CRITICAL 9.8EPSS 0.67% | 19 July 2026 |
| CVE-2026-64007 | In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skb_ensure_writable synproxy_tstamp_adjust() rewrites the TCP timestamp option in place and then patches the TCP checksum via… | CRITICAL 9.8EPSS 0.51% | 19 July 2026 |
| CVE-2026-64000 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is linearized before access by adding sizeof(struct hsr_sup_tlv) to the pskb_may_pull()… | CRITICAL 9.8EPSS 0.49% | 19 July 2026 |
| CVE-2026-63994 | In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Sashiko found that iptunnel_pmtud_build_icmp() and iptunnel_pmtud_build_icmpv6() were caching ip_hdr()… | CRITICAL 9.8EPSS 0.51% | 19 July 2026 |
| CVE-2026-63993 | In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_pmtu() can change skb->head. | CRITICAL 9.8EPSS 0.51% | 19 July 2026 |
| CVE-2026-63992 | In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() In some cases, iptunnel_pmtud_check_icmp() can be called while skb transport header is not set. | CRITICAL 9.1EPSS 0.51% | 19 July 2026 |
| CVE-2026-63984 | In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() ipv6_rpl_srh_decompress() computes: outhdr->hdrlen = (((n + 1) * sizeof(struct in6_addr)) >> 3); hdrlen is __u8. | CRITICAL 9.8EPSS 0.51% | 19 July 2026 |
| CVE-2026-63979 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference to accept_doit handshake_req_next() removes the request from the per-net pending list and drops hn_lock before… | CRITICAL 9.8EPSS 0.61% | 19 July 2026 |
| CVE-2026-63978 | In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arguments to list_splice_init() in handshake_net_exit() are reversed. | CRITICAL 9.8EPSS 0.62% | 19 July 2026 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.