Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-59310 Exploited |
Not yet scored | Broadcom VMware vCenter Operating systems & software |
Broadcom VMware vCenter Path Traversal Vulnerability | 18 Aug 2026 |
| CVE-2026-65400 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Improper Authentication Vulnerability | 18 Aug 2026 |
| CVE-2025-62593 Exploited |
Not yet scored | Ray-Project Ray Operating systems & software |
Ray-Project Ray Code Injection Vulnerability | 17 Aug 2026 |
| CVE-2026-68820 Exploited |
Not yet scored | Microsoft Windows Ancillary Function Driver for WinSock Operating systems & software |
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 11 Aug 2026 |
| CVE-2026-8037 Exploited |
Not yet scored | Progress LoadMaster Operating systems & software |
Progress LoadMaster Command Injection Vulnerability | 7 Aug 2026 |
| CVE-2026-63077 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 5 Aug 2026 |
| CVE-2026-34486 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 4 Aug 2026 |
| CVE-2026-9198 Exploited |
Not yet scored | IBM Langflow Operating systems & software |
IBM Langflow Code Injection Vulnerability | 4 Aug 2026 |
| CVE-2026-16812 Exploited |
Not yet scored | Arista VeloCloud Orchestrator Operating systems & software |
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 27 Jul 2026 |
| CVE-2026-50522 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 22 Jul 2026 |
| CVE-2026-0770 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 21 Jul 2026 |
| CVE-2021-27137 Exploited |
Not yet scored | DD-WRT DD-WRT Operating systems & software |
DD-WRT Stack-Based Buffer Overflow Vulnerability | 21 Jul 2026 |
| CVE-2026-58644 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 16 Jul 2026 |
| CVE-2026-46817 Exploited |
Not yet scored | Oracle E-Business Suite Operating systems & software |
Oracle E-Business Suite Improper Privilege Management Vulnerability | 15 Jul 2026 |
| CVE-2023-4346 Exploited |
Not yet scored | KNX Association KNX Protocol Connection Authorization Option 1 Operating systems & software |
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 15 Jul 2026 |
| CVE-2026-56164 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 14 Jul 2026 |
| CVE-2026-56291 Exploited |
Not yet scored | Balbooa Forms Operating systems & software |
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 10 Jul 2026 |
| CVE-2026-55255 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 7 Jul 2026 |
| CVE-2026-56290 Exploited |
Not yet scored | Joomlack Page Builder Operating systems & software |
Joomlack Page Builder Improper Access Control Vulnerability | 7 Jul 2026 |
| CVE-2026-48282 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Path Traversal Vulnerability | 7 Jul 2026 |
| CVE-2026-45659 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 1 Jul 2026 |
| CVE-2026-12569 Exploited |
Not yet scored | PTC Windchill and FlexPLM Operating systems & software |
PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 25 Jun 2026 |
| CVE-2026-34910 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Improper Input Validation Vulnerability | 23 Jun 2026 |
| CVE-2025-67038 Exploited |
Not yet scored | Lantronix EDS5000 Operating systems & software |
Lantronix EDS5000 Code Injection Vulnerability | 23 Jun 2026 |
| CVE-2026-34909 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Path Traversal Vulnerability | 23 Jun 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.