Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

CriticalCVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLabCVE-2026-97229 · Rapid7 Vulnerability Database · Tenable CVE DatabaseOct 13, 2026
High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCVE-2026-104935 · Ivanti · Connect Secure · CISA KEV · CVE.org · NIST NVD · ivantiKEVOct 13, 2026
UnknownCVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsCVE-2026-21589 · Rapid7 Vulnerability DatabaseOct 7, 2026
Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCVE-2026-76504 · Cisco · Catalyst SD-WAN Manager · CISA KEV · CVE.org · FIRST EPSS · ciscoKEVEPSS 1.8%Sep 30, 2026
Critical9.5Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCVE-2026-88772 · Citrix · NetScaler · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 1.3%Sep 27, 2026
Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityCVE-2026-88771 · Citrix · NetScaler · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 1.1%Sep 27, 2026
Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityCVE-2026-94127 · F5 · BIG-IP APM · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 2.2%Sep 22, 2026
Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityCVE-2026-76461 · Cisco · Secure Email Gateway · CISA KEV · CVE.org · FIRST EPSS · ciscoKEVEPSS 29.5%Sep 14, 2026
Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityCVE-2026-85706 · GitLab · Community Edition and Enterprise Edition · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 93.0%Sep 11, 2026
High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityCVE-2026-83549 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 9.9%Sep 1, 2026
Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityCVE-2026-83548 · SonicWall · SMA1000 Appliances · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 8.0%Sep 1, 2026
High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityCVE-2026-81578 · PaperCut · NG/MF · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 85.6%Aug 28, 2026
UnknownRapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)CVE-2026-63520 · Rapid7 Vulnerability DatabaseAug 24, 2026
Critical9.3Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVE-2026-19490 · Citrix · NetScaler · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 23.2%Aug 19, 2026
UnknownRapid7 Analysis: KindaRails2Shell (CVE-2026-66066)CVE-2026-66066 · Rapid7 Vulnerability DatabaseAug 3, 2026
High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVE-2026-18577 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 14.6%Aug 2, 2026
High8.2N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVE-2026-18556 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 7.9%Aug 1, 2026
UnknownCritical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)CVE-2026-59309 · Rapid7 Vulnerability DatabaseJul 30, 2026
Critical9.8Broadcom VMware vCenter Path Traversal VulnerabilityCVE-2026-59310 · Broadcom · VMware vCenter · CISA KEV · CVE.org · FIRST EPSS · vmwareKEVEPSS 2.6%Jul 30, 2026
Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityCVE-2026-63077 · JetBrains · TeamCity · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 89.6%Jul 27, 2026
Critical9.1Microsoft SharePoint Weak Authentication VulnerabilityCVE-2026-55040 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 69.5%Jul 14, 2026