Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityKEVEPSS 88.5%Feb 25, 2026
- Critical9.9BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityKEVEPSS 91.7%Feb 6, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.6%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.7%Jan 29, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 84.2%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Security Control Bypass VulnerabilityKEVEPSS 73.6%Jan 28, 2026
- Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityKEVEPSS 63.0%Jan 22, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityKEVEPSS 99.0%Jan 21, 2026
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityKEVEPSS 85.7%Dec 28, 2025
- High8.8n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityKEVEPSS 99.0%Dec 19, 2025
- High8.7MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityKEVEPSS 83.2%Dec 19, 2025
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityKEVEPSS 90.2%Dec 16, 2025
- High7.1Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityKEVEPSS 53.3%Dec 12, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityKEVEPSS 99.8%Dec 3, 2025
- Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityKEVEPSS 60.5%Nov 25, 2025
- High7.2Fortinet FortiWeb OS Command Injection VulnerabilityKEVEPSS 55.6%Nov 18, 2025
- Critical9.8Fortinet FortiWeb Path Traversal VulnerabilityKEVEPSS 91.8%Nov 14, 2025
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityKEVEPSS 84.6%Nov 6, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Oct 14, 2025
- High7.5Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties VulnerabilityKEVEPSS 92.1%Oct 9, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityKEVEPSS 99.7%Oct 4, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityKEVEPSS 94.5%Sep 9, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityKEVEPSS 86.3%Aug 28, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Jul 19, 2025
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityKEVEPSS 93.9%Jul 10, 2025