Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-74760 | Not yet scored | - Identity & access |
Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the… | 1 Nov 2026 |
| CVE-2026-120263 | Not yet scored | - Identity & access |
When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and registration is enabled, the… | 1 Nov 2026 |
| CVE-2026-118394 | Not yet scored | - Identity & access |
The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether to limit the `groups` claim to public… | 1 Nov 2026 |
| CVE-2026-94127 Exploited |
Not yet scored | F5 BIG-IP APM Identity & access |
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 22 Sep 2026 |
| CVE-2026-76460 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 16 Sep 2026 |
| CVE-2026-86218 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Static Code Injection Vulnerability | 8 Sep 2026 |
| CVE-2026-18556 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 4 Aug 2026 |
| CVE-2026-18577 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 3 Aug 2026 |
| CVE-2026-56155 Exploited |
Not yet scored | Microsoft Active Directory Federation Services Identity & access |
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 14 Jul 2026 |
| CVE-2026-48558 Exploited |
Not yet scored | SimpleHelp SimpleHelp Identity & access |
SimpleHelp Authentication Bypass Vulnerability | 29 Jun 2026 |
| CVE-2026-45321 Exploited |
Not yet scored | TanStack TanStack Identity & access |
TanStack Unspecified Vulnerability | 27 May 2026 |
| CVE-2026-3055 Exploited |
Not yet scored | Citrix NetScaler Identity & access |
Citrix NetScaler Out-of-Bounds Read Vulnerability | 30 Mar 2026 |
| CVE-2026-24858 Exploited |
Not yet scored | Fortinet Multiple Products Identity & access |
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 27 Jan 2026 |
| CVE-2025-59718 Exploited |
Not yet scored | Fortinet Multiple Products Identity & access |
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 16 Dec 2025 |
| CVE-2025-61757 Exploited |
Not yet scored | Oracle Fusion Middleware Identity & access |
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 21 Nov 2025 |
| CVE-2024-8068 Exploited |
Not yet scored | Citrix Session Recording Identity & access |
Citrix Session Recording Improper Privilege Management Vulnerability | 25 Aug 2025 |
| CVE-2025-8875 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Insecure Deserialization Vulnerability | 13 Aug 2025 |
| CVE-2025-8876 Exploited |
Not yet scored | N-able N-Central Identity & access |
N-able N-Central Command Injection Vulnerability | 13 Aug 2025 |
| CVE-2025-20281 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Injection Vulnerability | 28 Jul 2025 |
| CVE-2025-20337 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Injection Vulnerability | 28 Jul 2025 |
| CVE-2025-2775 Exploited |
Not yet scored | SysAid SysAid On-Prem Identity & access |
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 Jul 2025 |
| CVE-2025-2776 Exploited |
Not yet scored | SysAid SysAid On-Prem Identity & access |
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 22 Jul 2025 |
| CVE-2025-23006 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Identity & access |
SonicWall SMA1000 Appliances Deserialization Vulnerability | 24 Jan 2025 |
| CVE-2024-0012 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Identity & access |
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 18 Nov 2024 |
| CVE-2024-9474 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Identity & access |
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 18 Nov 2024 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.