Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.5ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure VulnerabilityCVE-2026-20190 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 0.5%Aug 13, 2026
High7.2ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution VulnerabilityCVE-2026-20181 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 8.9%Aug 13, 2026
Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityCVE-2026-20148 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 6.5%Aug 13, 2026
High7.2ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCVE-2026-20147 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 10.4%Aug 13, 2026
High7.8ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation VulnerabilityCVE-2026-12410 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 0.2%Aug 13, 2026
High7.8ZDI-26-567: Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation VulnerabilityCVE-2024-13962 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 0.2%Aug 13, 2026
High7.5ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution VulnerabilityZDI-26-561 · Zero Day InitiativeAug 12, 2026
High7.5ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution VulnerabilityZDI-26-560 · Zero Day InitiativeAug 12, 2026
High7.5ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution VulnerabilityZDI-26-559 · Zero Day InitiativeAug 12, 2026
Medium6.8ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation VulnerabilityZDI-26-558 · Zero Day InitiativeAug 12, 2026
Medium4.3ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure VulnerabilityZDI-26-557 · Zero Day InitiativeAug 12, 2026
Medium5.4ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery VulnerabilityCVE-2026-91131 · CVE.org · Zero Day InitiativeAug 12, 2026
Medium5.4ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery VulnerabilityCVE-2026-91129 · CVE.org · FIRST EPSS · Zero Day InitiativeEPSS 0.2%Aug 12, 2026
High7.8ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation VulnerabilityCVE-2026-62712 · microsoft · windows 10 1607 · CVE.org · FIRST EPSS · NIST NVD · microsoftEPSS 0.3%Aug 11, 2026
Critical9.8Progress LoadMaster Command Injection VulnerabilityCVE-2026-8037 · Progress · LoadMaster · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 77.4%Jun 4, 2026