CVE Radar:Know what’s exposed. Fix what matters.
Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.
1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 8 of 71
- Added to KEVMay 20, 2026CVE-2008-42509.8 CRITICAL⚡ Known ExploitedMicrosoft WindowsMicrosoft Windows Buffer Overflow VulnerabilityMicrosoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.
Score Severity Version Vector String 9.8 CRITICAL 3.1CISA-ADP CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 10.0 HIGH 2.0NVD AV:N/AC:L/Au:N/C:C/I:C/A:C - Added to KEVMay 15, 2026CVE-2026-428978.1 HIGH⚡ Known ExploitedMicrosoft MicrosoftMicrosoft Exchange Server Cross-Site Scripting VulnerabilityMicrosoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be executed in the browser context.
Score Severity Version Vector String 8.1 HIGH 3.1CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N 6.1 MEDIUM 3.1NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Added to KEVMay 14, 2026CVE-2026-2018210.0 CRITICAL⚡ Known ExploitedCisco Catalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.
Score Severity Version Vector String 10.0 CRITICAL 3.1CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Added to KEVMay 8, 2026CVE-2026-422089.3 CRITICAL⚡ Known ExploitedBerriAI LiteLLMBerriAI LiteLLM SQL Injection VulnerabilityBerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.
Score Severity Version Vector String 9.3 CRITICAL 4.0CNA CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 9.8 CRITICAL 3.1NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Added to KEVMay 7, 2026CVE-2026-69737.2 HIGH⚡ Known ExploitedIvanti Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityIvanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.
Score Severity Version Vector String 7.2 HIGH 3.1CNA CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Added to KEVMay 6, 2026CVE-2026-03009.3 CRITICAL⚡ Known ExploitedPalo Alto Networks PAN-OSPalo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPalo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.
Score Severity Version Vector String 9.3 CRITICAL 4.0CNA CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:A/AU:Y/R:U/V:C/RE:M/U:Red 9.8 CRITICAL 3.1NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Added to KEVMay 1, 2026CVE-2026-314317.8 HIGH⚡ Known ExploitedLinux KernelLinux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityLinux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
Score Severity Version Vector String 7.8 HIGH 3.1CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 30, 2026CVE-2026-419409.3 CRITICAL⚡ Known ExploitedWebPros cPanel & WHM and WP2 (WordPress Squared)WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityWebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
Score Severity Version Vector String 9.3 CRITICAL 4.0CNA CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 9.8 CRITICAL 3.1CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 28, 2026CVE-2026-322024.3 MEDIUM⚡ Known ExploitedMicrosoft WindowsMicrosoft Windows Protection Mechanism Failure VulnerabilityMicrosoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.
Score Severity Version Vector String 4.3 MEDIUM 3.1CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Added to KEVApr 28, 2026CVE-2024-17088.4 HIGH⚡ Known ExploitedConnectWise ScreenConnectConnectWise ScreenConnect Path Traversal VulnerabilityConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.
Score Severity Version Vector String 8.4 HIGH 3.1CNA CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H - Added to KEVApr 24, 2026CVE-2025-296357.2 HIGH⚡ Known ExploitedD-Link DIR-823XD-Link DIR-823X Command Injection VulnerabilityD-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Score Severity Version Vector String 7.2 HIGH 3.1CISA-ADP CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 24, 2026CVE-2024-577287.2 HIGH⚡ Known ExploitedSimpleHelp SimpleHelpSimpleHelp Path Traversal VulnerabilitySimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
Score Severity Version Vector String 7.2 HIGH 3.1NVD CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 24, 2026CVE-2024-577269.9 CRITICAL⚡ Known ExploitedSimpleHelp SimpleHelpSimpleHelp Missing Authorization VulnerabilitySimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
Score Severity Version Vector String 9.9 CRITICAL 3.1NVD CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - Added to KEVApr 24, 2026CVE-2024-73999.8 CRITICAL⚡ Known ExploitedSamsung MagicINFO 9 ServerSamsung MagicINFO 9 Server Path Traversal VulnerabilitySamsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.
Score Severity Version Vector String 9.8 CRITICAL 3.1NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 8.8 HIGH 3.1CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 23, 2026CVE-2026-399879.3 CRITICAL⚡ Known ExploitedMarimo MarimoMarimo Remote Code Execution VulnerabilityMarimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands.
Score Severity Version Vector String 9.3 CRITICAL 4.0CNA CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 9.8 CRITICAL 3.1NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 22, 2026CVE-2026-338257.8 HIGH⚡ Known ExploitedMicrosoft DefenderMicrosoft Defender Insufficient Granularity of Access Control VulnerabilityMicrosoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.
Score Severity Version Vector String 7.8 HIGH 3.1CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 20, 2026CVE-2026-201337.5 HIGH⚡ Known ExploitedCisco Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information on affected systems.
Score Severity Version Vector String 7.5 HIGH 3.1NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 6.5 MEDIUM 3.1CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Added to KEVApr 20, 2026CVE-2026-201287.5 HIGH⚡ Known ExploitedCisco Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.
Score Severity Version Vector String 7.5 HIGH 3.1CNA CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Added to KEVApr 20, 2026CVE-2026-201225.4 MEDIUM⚡ Known ExploitedCisco Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.
Score Severity Version Vector String 5.4 MEDIUM 3.1CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Added to KEVApr 20, 2026CVE-2025-487006.1 MEDIUM⚡ Known ExploitedSynacor Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilitySynacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information.
Score Severity Version Vector String 6.1 MEDIUM 3.1CISA-ADP CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Added to KEVApr 20, 2026CVE-2025-3297510.0 CRITICAL⚡ Known ExploitedQuest KACE Systems Management Appliance (SMA)Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityQuest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials.
Score Severity Version Vector String 10.0 CRITICAL 3.1CISA-ADP CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Added to KEVApr 20, 2026CVE-2025-27497.2 HIGH⚡ Known ExploitedKentico Kentico XperienceKentico Xperience Path Traversal VulnerabilityKentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.
Score Severity Version Vector String 7.2 HIGH 3.1CNA CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Added to KEVApr 20, 2026CVE-2024-271997.3 HIGH⚡ Known ExploitedJetBrains TeamCityJetBrains TeamCity Relative Path Traversal VulnerabilityJetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.
Score Severity Version Vector String 7.3 HIGH 3.1CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Added to KEVApr 20, 2026CVE-2023-273517.5 HIGH⚡ Known ExploitedPaperCut NG/MFPaperCut NG/MF Improper Authentication VulnerabilityPaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.
Score Severity Version Vector String 7.5 HIGH 3.1NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 8.2 HIGH 3.0CNA CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - Added to KEVApr 16, 2026CVE-2026-341978.8 HIGH⚡ Known ExploitedApache ActiveMQApache ActiveMQ Improper Input Validation VulnerabilityApache ActiveMQ contains an improper input validation vulnerability that allows for code injection.
Score Severity Version Vector String 8.8 HIGH 3.1CISA-ADP CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H