Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-94127 Exploited |
Not yet scored | F5 BIG-IP APM Identity & access |
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 22 Sep 2026 |
| CVE-2026-76460 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 16 Sep 2026 |
| CVE-2026-86218 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Static Code Injection Vulnerability | 8 Sep 2026 |
| CVE-2026-18556 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 4 Aug 2026 |
| CVE-2026-18577 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 3 Aug 2026 |
| CVE-2026-56155 Exploited |
Not yet scored | Microsoft Active Directory Federation Services Identity & access |
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 14 Jul 2026 |
| CVE-2026-48558 Exploited |
Not yet scored | SimpleHelp SimpleHelp Identity & access |
SimpleHelp Authentication Bypass Vulnerability | 29 Jun 2026 |
| CVE-2026-45321 Exploited |
Not yet scored | TanStack TanStack Identity & access |
TanStack Unspecified Vulnerability | 27 May 2026 |
| CVE-2026-3055 Exploited |
Not yet scored | Citrix NetScaler Identity & access |
Citrix NetScaler Out-of-Bounds Read Vulnerability | 30 Mar 2026 |
| CVE-2026-24858 Exploited |
Not yet scored | Fortinet Multiple Products Identity & access |
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 27 Jan 2026 |
| CVE-2025-59718 Exploited |
Not yet scored | Fortinet Multiple Products Identity & access |
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 16 Dec 2025 |
| CVE-2025-61757 Exploited |
Not yet scored | Oracle Fusion Middleware Identity & access |
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 21 Nov 2025 |
| CVE-2024-8068 Exploited |
Not yet scored | Citrix Session Recording Identity & access |
Citrix Session Recording Improper Privilege Management Vulnerability | 25 Aug 2025 |
| CVE-2025-8876 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Command Injection Vulnerability | 13 Aug 2025 |
| CVE-2025-8875 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Insecure Deserialization Vulnerability | 13 Aug 2025 |
| CVE-2025-20337 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Injection Vulnerability | 28 Jul 2025 |
| CVE-2025-20281 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Injection Vulnerability | 28 Jul 2025 |
| CVE-2025-2775 Exploited |
Not yet scored | SysAid SysAid On-Prem Identity & access |
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 Jul 2025 |
| CVE-2025-2776 Exploited |
Not yet scored | SysAid SysAid On-Prem Identity & access |
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 Jul 2025 |
| CVE-2025-23006 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Identity & access |
SonicWall SMA1000 Appliances Deserialization Vulnerability | 24 Jan 2025 |
| CVE-2024-9474 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Identity & access |
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 18 Nov 2024 |
| CVE-2024-0012 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Identity & access |
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 18 Nov 2024 |
| CVE-2024-37085 Exploited |
Not yet scored | VMware ESXi Identity & access |
VMware ESXi Authentication Bypass Vulnerability | 30 Jul 2024 |
| CVE-2023-7028 Exploited |
Not yet scored | GitLab GitLab CE/EE Identity & access |
GitLab Community and Enterprise Editions Improper Access Control Vulnerability | 1 May 2024 |
| CVE-2022-27518 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC) and Gateway Identity & access |
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 13 Dec 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.