Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityCVE-2026-85706 · GitLab · Community Edition and Enterprise Edition · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 93.0%Sep 11, 2026
Critical10.0N-able N-central Static Code Injection VulnerabilityCVE-2026-86218 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 14.5%Sep 5, 2026
High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityCVE-2026-83549 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 9.9%Sep 1, 2026
Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityCVE-2026-83548 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 8.0%Sep 1, 2026
Critical9.4PaperCut NG/MF Unsafe Reflection VulnerabilityCVE-2026-82078 · PaperCut · NG/MF · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 63.5%Aug 28, 2026
High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityCVE-2026-81578 · PaperCut · NG/MF · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 85.6%Aug 28, 2026
Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityCVE-2026-63077 · JetBrains · TeamCity · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 89.6%Jul 27, 2026
Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityCVE-2026-16232 · Check Point · SmartConsole · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 78.0%Jul 22, 2026
Critical9.8WordPress Core Interpretation Conflict VulnerabilityCVE-2026-63030 · WordPress · Core · CISA KEV · CVE.org · FIRST EPSS · wordpressKEVEPSS 10.6%Jul 17, 2026
Medium5.9WordPress Core SQL Injection VulnerabilityCVE-2026-60137 · WordPress · Core · CISA KEV · CVE.org · FIRST EPSS · wordpressKEVEPSS 5.3%Jul 17, 2026
Critical9.8IBM Langflow Code Injection VulnerabilityCVE-2026-9198 · IBM · Langflow · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 28.7%Jul 17, 2026
High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityCVE-2026-15410 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 11.8%Jul 14, 2026
Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityCVE-2026-15409 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 6.8%Jul 14, 2026
Critical9.5SimpleHelp Authentication Bypass VulnerabilityCVE-2026-48558 · SimpleHelp · SimpleHelp · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 5.7%Jun 12, 2026
Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityCVE-2026-48907 · Widget Factory · Joomla Content Editor · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 16.2%Jun 5, 2026
Critical9.8Drupal Core SQL Injection VulnerabilityCVE-2026-9082 · Drupal · Core · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 15.7%May 20, 2026
Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVE-2026-20182 · Cisco · Catalyst SD-WAN · CISA KEV · CVE.org · FIRST EPSS · ciscoKEVEPSS 91.8%May 14, 2026
High8.7BerriAI LiteLLM Command Injection VulnerabilityCVE-2026-42271 · BerriAI · LiteLLM · CISA KEV · CVE.org · FIRST EPSS · redhatKEVEPSS 92.6%May 7, 2026
Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityCVE-2026-42208 · BerriAI · LiteLLM · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 5.8%May 7, 2026
Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityCVE-2026-41940 · WebPros · cPanel & WHM and WP2 (WordPress Squared) · CISA KEV · CVE.org · FIRST EPSS · wordpressKEVEPSS 98.5%Apr 29, 2026
High7.8Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityCVE-2026-31431 · Linux · Kernel · CISA KEV · CVE.org · FIRST EPSS · linux, redhatKEVEPSS 3.4%Apr 22, 2026
High8.8Apache ActiveMQ Improper Input Validation VulnerabilityCVE-2026-34197 · Apache · ActiveMQ · CISA KEV · CVE.org · FIRST EPSS · apacheKEVEPSS 15.5%Apr 7, 2026
Critical9.3Citrix NetScaler Out-of-Bounds Read VulnerabilityCVE-2026-3055 · Citrix · NetScaler · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 4.0%Mar 23, 2026
Critical9.3Langflow Code Injection VulnerabilityCVE-2026-33017 · Langflow · Langflow · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 24.8%Mar 19, 2026
Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVE-2026-20079 · Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management · CISA KEV · CVE.org · FIRST EPSS · ciscoKEVEPSS 88.2%Mar 4, 2026