Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-74759 | Not yet scored | - Cloud & SaaS |
Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS… | 1 Nov 2026 |
| CVE-2026-117685 | Not yet scored | - Cloud & SaaS |
The OCI registry's cross-repository blob mount checked the target package against the token's `public-only`… | 1 Nov 2026 |
| CVE-2026-20079 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cloud & SaaS |
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9 Sep 2026 |
| CVE-2026-66384 Exploited |
Not yet scored | JFrog Artifactory Cloud & SaaS |
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 27 Aug 2026 |
| CVE-2026-64849 Exploited |
Not yet scored | MLflow MLflow Cloud & SaaS |
MLflow Server-Side Request Forgery Vulnerability | 19 Aug 2026 |
| CVE-2026-25089 Exploited |
Not yet scored | Fortinet FortiSandbox Cloud & SaaS |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-54420 Exploited |
Not yet scored | LiteSpeed cPanel Plugin Cloud & SaaS |
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 15 Jun 2026 |
| CVE-2026-33634 Exploited |
Not yet scored | Aquasecurity Trivy Cloud & SaaS |
Aquasecurity Trivy Embedded Malicious Code Vulnerability | 26 Mar 2026 |
| CVE-2026-20131 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Cloud & SaaS |
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerabili… | 19 Mar 2026 |
| CVE-2025-62221 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Use After Free Vulnerability | 9 Dec 2025 |
| CVE-2025-53690 Exploited |
Not yet scored | Sitecore Multiple Products Cloud & SaaS |
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 4 Sep 2025 |
| CVE-2025-30154 Exploited |
Not yet scored | reviewdog action-setup GitHub Action Cloud & SaaS |
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | 24 Mar 2025 |
| CVE-2025-30066 Exploited |
Not yet scored | tj-actions changed-files GitHub Action Cloud & SaaS |
tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | 18 Mar 2025 |
| CVE-2024-50603 Exploited |
Not yet scored | Aviatrix Controllers Cloud & SaaS |
Aviatrix Controllers OS Command Injection Vulnerability | 16 Jan 2025 |
| CVE-2024-49039 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 12 Nov 2024 |
| CVE-2024-9380 Exploited |
Not yet scored | Ivanti Cloud Services Appliance (CSA) Cloud & SaaS |
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 9 Oct 2024 |
| CVE-2024-9379 Exploited |
Not yet scored | Ivanti Cloud Services Appliance (CSA) Cloud & SaaS |
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 9 Oct 2024 |
| CVE-2019-0344 Exploited |
Not yet scored | SAP Commerce Cloud Cloud & SaaS |
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 30 Sep 2024 |
| CVE-2024-8963 Exploited |
Not yet scored | Ivanti Cloud Services Appliance (CSA) Cloud & SaaS |
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 19 Sep 2024 |
| CVE-2024-8190 Exploited |
Not yet scored | Ivanti Cloud Services Appliance Cloud & SaaS |
Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 13 Sep 2024 |
| CVE-2024-24919 Exploited |
Not yet scored | Check Point Quantum Security Gateways Cloud & SaaS |
Check Point Quantum Security Gateways Information Disclosure Vulnerability | 30 May 2024 |
| CVE-2021-44529 Exploited |
Not yet scored | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Cloud & SaaS |
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | 25 Mar 2024 |
| CVE-2023-36036 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 14 Nov 2023 |
| CVE-2023-28434 Exploited |
Not yet scored | MinIO MinIO Cloud & SaaS |
MinIO Security Feature Bypass Vulnerability | 19 Sep 2023 |
| CVE-2023-27532 Exploited |
Not yet scored | Veeam Backup & Replication Cloud & SaaS |
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | 22 Aug 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.