Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Critical9.2PHP PHP Use After FreeVuln · CVE-2026-109619 · php · php · AWS Security Bulletins · BSI CERT-Bund · Canadian Centre for Cyber Security · AWS, CiscoPatch nowKEVEPSS 5.99%Oct 21, 2026
Critical9.2PHP PHP Use After FreeVuln · CVE-2026-109618 · php · php · AWS Security Bulletins · BSI CERT-Bund · Canadian Centre for Cyber Security · AWS, CiscoPatch nowKEVEPSS 11.62%Oct 21, 2026
Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityVuln · CVE-2026-88772 · Citrix · NetScaler · Canadian Centre for Cyber Security · CISA KEV · Cloudflare Security · CitrixPatch nowKEVEPSS 5.30%Sep 27, 2026
Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityVuln · CVE-2026-88771 · Citrix · NetScaler · Canadian Centre for Cyber Security · CISA KEV · Cloudflare Security · CitrixPatch nowKEVEPSS 4.72%Sep 27, 2026
UnknownCVE-2026-10961 is listed by Cloudflare deploys protections against php2shell vulnerability | Cloudflare Blog.Vuln · CVE-2026-10961 · Cloudflare · Cloudflare Security · CVE.org · FIRST EPSSCheck if you run itEPSS 0.27%Unknown date
UnknownContinuous accountability for Verified bots | Cloudflare BlogVuln · CVE-2023-50387 · Cloudflare · Cloudflare Security · CVE.org · FIRST EPSSCheck this weekEPSS 99.99%Unknown date