Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-3502 Exploited |
Not yet scored | TrueConf Client Operating systems & software |
TrueConf Client Download of Code Without Integrity Check Vulnerability | 2 Apr 2026 |
| CVE-2026-5281 Exploited |
Not yet scored | Google Dawn Operating systems & software |
Google Dawn Use-After-Free Vulnerability | 1 Apr 2026 |
| CVE-2026-33017 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Code Injection Vulnerability | 25 Mar 2026 |
| CVE-2025-32432 Exploited |
Not yet scored | Craft CMS Craft CMS Operating systems & software |
Craft CMS Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2025-54068 Exploited |
Not yet scored | Laravel Livewire Operating systems & software |
Laravel Livewire Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2025-43510 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Improper Locking Vulnerability | 20 Mar 2026 |
| CVE-2025-43520 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Classic Buffer Overflow Vulnerability | 20 Mar 2026 |
| CVE-2025-31277 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Buffer Overflow Vulnerability | 20 Mar 2026 |
| CVE-2025-66376 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 18 Mar 2026 |
| CVE-2026-20963 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 18 Mar 2026 |
| CVE-2025-47813 Exploited |
Not yet scored | Wing FTP Server Wing FTP Server Operating systems & software |
Wing FTP Server Information Disclosure Vulnerability | 16 Mar 2026 |
| CVE-2026-3910 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 13 Mar 2026 |
| CVE-2026-3909 Exploited |
Not yet scored | Google Skia Operating systems & software |
Google Skia Out-of-Bounds Write Vulnerability | 13 Mar 2026 |
| CVE-2025-68613 Exploited |
Not yet scored | n8n n8n Operating systems & software |
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 11 Mar 2026 |
| CVE-2021-22054 Exploited |
Not yet scored | Omnissa Workspace One UEM Operating systems & software |
Omnissa Workspace ONE Server-Side Request Forgery | 9 Mar 2026 |
| CVE-2025-26399 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9 Mar 2026 |
| CVE-2017-7921 Exploited |
Not yet scored | Hikvision Multiple Products Operating systems & software |
Hikvision Multiple Products Improper Authentication Vulnerability | 5 Mar 2026 |
| CVE-2023-43000 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple products Use-After-Free Vulnerability | 5 Mar 2026 |
| CVE-2021-30952 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 5 Mar 2026 |
| CVE-2023-41974 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Use-After-Free Vulnerability | 5 Mar 2026 |
| CVE-2026-22719 Exploited |
Not yet scored | Broadcom VMware Aria Operations Operating systems & software |
Broadcom VMware Aria Operations Command Injection Vulnerability | 3 Mar 2026 |
| CVE-2026-25108 Exploited |
Not yet scored | Soliton Systems K.K FileZen Operating systems & software |
Soliton Systems K.K FileZen OS Command Injection Vulnerability | 24 Feb 2026 |
| CVE-2025-68461 Exploited |
Not yet scored | Roundcube Webmail Operating systems & software |
RoundCube Webmail Cross-site Scripting Vulnerability | 20 Feb 2026 |
| CVE-2021-22175 Exploited |
Not yet scored | GitLab GitLab Operating systems & software |
GitLab Server-Side Request Forgery (SSRF) Vulnerability | 18 Feb 2026 |
| CVE-2026-22769 Exploited |
Not yet scored | Dell RecoverPoint for Virtual Machines (RP4VMs) Operating systems & software |
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 18 Feb 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.