Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2015-3306 Exploited |
Not yet scored | ProFTPD ProFTPD Operating systems & software |
ProFTPD Improper Access Control Vulnerability | 8 Oct 2026 |
| CVE-2021-3199 Exploited |
Not yet scored | ONLYOFFICE Docs Operating systems & software |
ONLYOFFICE Docs Server Path Traversal Vulnerability | 8 Oct 2026 |
| CVE-2026-102490 Exploited |
Not yet scored | Zammad GmbH Zammad Operating systems & software |
Zammad GmbH Zammad Improper Privilege Management Vulnerability | 2 Oct 2026 |
| CVE-2026-102489 Exploited |
Not yet scored | Zammad GmbH Zammad Operating systems & software |
Zammad GmbH Zammad Session Fixation Vulnerability | 2 Oct 2026 |
| CVE-2026-86950 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Out-of-Bounds Write Vulnerability | 29 Sep 2026 |
| CVE-2026-65660 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Code Injection Vulnerability | 25 Sep 2026 |
| CVE-2026-71362 Exploited |
Not yet scored | Adobe Commerce and Magento Operating systems & software |
Adobe Commerce and Magento Incorrect Authorization Vulnerability | 24 Sep 2026 |
| CVE-2026-93952 Exploited |
Not yet scored | Arista VeloCloud Orchestrator Operating systems & software |
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 22 Sep 2026 |
| CVE-2025-39682 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 18 Sep 2026 |
| CVE-2025-39964 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Race Condition Vulnerability | 18 Sep 2026 |
| CVE-2026-58704 Exploited |
Not yet scored | Google Pixel Operating systems & software |
Google Pixel Improper Authorization Vulnerability | 16 Sep 2026 |
| CVE-2026-42018 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Improper Authentication Vulnerability | 11 Sep 2026 |
| CVE-2026-84869 Exploited |
Not yet scored | ConnectWise ScreenConnect Operating systems & software |
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 11 Sep 2026 |
| CVE-2026-42016 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Incorrect Authorization Vulnerability | 11 Sep 2026 |
| CVE-2026-87491 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out of Bounds Write Vulnerability | 9 Sep 2026 |
| CVE-2026-81963 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Link Following Vulnerability | 8 Sep 2026 |
| CVE-2026-85880 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 8 Sep 2026 |
| CVE-2026-85046 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 4 Sep 2026 |
| CVE-2026-59822 Exploited |
Not yet scored | BerriAI LiteLLM Operating systems & software |
BerriAI LiteLLM Improper Authentication Vulnerability | 2 Sep 2026 |
| CVE-2026-48710 Exploited |
Not yet scored | Kludex Starlette Operating systems & software |
Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 2 Sep 2026 |
| CVE-2026-49869 Exploited |
Not yet scored | Kestra Kestra OSS Operating systems & software |
Kestra OSS OS Command Injection Vulnerability | 2 Sep 2026 |
| CVE-2026-82329 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Improper Authentication Vulnerability | 2 Sep 2026 |
| CVE-2026-81578 Exploited |
Not yet scored | PaperCut NG/MF Operating systems & software |
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | 31 Aug 2026 |
| CVE-2023-49105 Exploited |
Not yet scored | ownCloud ownCloud Operating systems & software |
ownCloud Improper Authentication Vulnerability | 27 Aug 2026 |
| CVE-2026-53362 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Unspecified Vulnerability | 27 Aug 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.