Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-42018 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Improper Authentication Vulnerability | 11 Sep 2026 |
| CVE-2026-84869 Exploited |
Not yet scored | ConnectWise ScreenConnect Operating systems & software |
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 11 Sep 2026 |
| CVE-2026-42016 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Incorrect Authorization Vulnerability | 11 Sep 2026 |
| CVE-2026-87491 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out of Bounds Write Vulnerability | 9 Sep 2026 |
| CVE-2026-81963 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Link Following Vulnerability | 8 Sep 2026 |
| CVE-2026-85880 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 8 Sep 2026 |
| CVE-2026-85046 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 4 Sep 2026 |
| CVE-2026-59822 Exploited |
Not yet scored | BerriAI LiteLLM Operating systems & software |
BerriAI LiteLLM Improper Authentication Vulnerability | 2 Sep 2026 |
| CVE-2026-48710 Exploited |
Not yet scored | Kludex Starlette Operating systems & software |
Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 2 Sep 2026 |
| CVE-2026-49869 Exploited |
Not yet scored | Kestra Kestra OSS Operating systems & software |
Kestra OSS OS Command Injection Vulnerability | 2 Sep 2026 |
| CVE-2026-82329 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Improper Authentication Vulnerability | 2 Sep 2026 |
| CVE-2026-81578 Exploited |
Not yet scored | PaperCut NG/MF Operating systems & software |
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | 31 Aug 2026 |
| CVE-2023-49105 Exploited |
Not yet scored | ownCloud ownCloud Operating systems & software |
ownCloud Improper Authentication Vulnerability | 27 Aug 2026 |
| CVE-2026-53362 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Unspecified Vulnerability | 27 Aug 2026 |
| CVE-2019-1068 Exploited |
Not yet scored | Microsoft SQL Server Operating systems & software |
Microsoft SQL Server Remote Code Execution Vulnerability | 26 Aug 2026 |
| CVE-2021-23758 Exploited |
Not yet scored | Ajax.NET Professional Ajax.NET Professional Operating systems & software |
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | 26 Aug 2026 |
| CVE-2015-3246 Exploited |
Not yet scored | Red Hat Libuser Operating systems & software |
Red Hat Libuser Race Condition Vulnerability | 26 Aug 2026 |
| CVE-2015-5287 Exploited |
Not yet scored | Red Hat Automatic Bug Reporting Tool Operating systems & software |
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | 26 Aug 2026 |
| CVE-2022-0995 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Out-of-Bounds Write Vulnerability | 26 Aug 2026 |
| CVE-2026-21962 Exploited |
Not yet scored | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Operating systems & software |
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 24 Aug 2026 |
| CVE-2026-73570 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 21 Aug 2026 |
| CVE-2026-72530 Exploited |
Not yet scored | TrueConf Server Operating systems & software |
TrueConf Server Code Injection Vulnerability | 20 Aug 2026 |
| CVE-2026-72529 Exploited |
Not yet scored | TrueConf Server Operating systems & software |
TrueConf Server Missing Authentication for Critical Function Vulnerability | 20 Aug 2026 |
| CVE-2026-55040 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Weak Authentication Vulnerability | 18 Aug 2026 |
| CVE-2026-33824 Exploited |
Not yet scored | Microsoft Internet Key Exchange (IKE) Service Extensions Operating systems & software |
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 18 Aug 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.