Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-3909 Exploited |
Not yet scored | Google Skia Operating systems & software |
Google Skia Out-of-Bounds Write Vulnerability | 13 Mar 2026 |
| CVE-2025-68613 Exploited |
Not yet scored | n8n n8n Operating systems & software |
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 11 Mar 2026 |
| CVE-2021-22054 Exploited |
Not yet scored | Omnissa Workspace One UEM Operating systems & software |
Omnissa Workspace ONE Server-Side Request Forgery | 9 Mar 2026 |
| CVE-2025-26399 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9 Mar 2026 |
| CVE-2026-1603 Exploited |
Not yet scored | Ivanti Endpoint Manager (EPM) Network & security devices |
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 9 Mar 2026 |
| CVE-2021-22681 Exploited |
Not yet scored | Rockwell Multiple Products OT, ICS & IoT |
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | 5 Mar 2026 |
| CVE-2017-7921 Exploited |
Not yet scored | Hikvision Multiple Products Operating systems & software |
Hikvision Multiple Products Improper Authentication Vulnerability | 5 Mar 2026 |
| CVE-2023-43000 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple products Use-After-Free Vulnerability | 5 Mar 2026 |
| CVE-2021-30952 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 5 Mar 2026 |
| CVE-2023-41974 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Use-After-Free Vulnerability | 5 Mar 2026 |
| CVE-2026-22719 Exploited |
Not yet scored | Broadcom VMware Aria Operations Operating systems & software |
Broadcom VMware Aria Operations Command Injection Vulnerability | 3 Mar 2026 |
| CVE-2026-21385 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 3 Mar 2026 |
| CVE-2026-20127 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Controller and Manager Network & security devices |
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 25 Feb 2026 |
| CVE-2022-20775 Exploited |
Not yet scored | Cisco SD-WAN Network & security devices |
Cisco SD-WAN Path Traversal Vulnerability | 25 Feb 2026 |
| CVE-2026-25108 Exploited |
Not yet scored | Soliton Systems K.K FileZen Operating systems & software |
Soliton Systems K.K FileZen OS Command Injection Vulnerability | 24 Feb 2026 |
| CVE-2025-49113 Exploited |
Not yet scored | Roundcube Webmail Applications & supply chain |
RoundCube Webmail Deserialization of Untrusted Data Vulnerability | 20 Feb 2026 |
| CVE-2025-68461 Exploited |
Not yet scored | Roundcube Webmail Operating systems & software |
RoundCube Webmail Cross-site Scripting Vulnerability | 20 Feb 2026 |
| CVE-2021-22175 Exploited |
Not yet scored | GitLab GitLab Operating systems & software |
GitLab Server-Side Request Forgery (SSRF) Vulnerability | 18 Feb 2026 |
| CVE-2026-22769 Exploited |
Not yet scored | Dell RecoverPoint for Virtual Machines (RP4VMs) Operating systems & software |
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 18 Feb 2026 |
| CVE-2008-0015 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 17 Feb 2026 |
| CVE-2020-7796 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | 17 Feb 2026 |
| CVE-2024-7694 Exploited |
Not yet scored | TeamT5 ThreatSonar Anti-Ransomware Operating systems & software |
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | 17 Feb 2026 |
| CVE-2026-2441 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium CSS Use-After-Free Vulnerability | 17 Feb 2026 |
| CVE-2026-1731 Exploited |
Not yet scored | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) Operating systems & software |
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 13 Feb 2026 |
| CVE-2026-20700 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Buffer Overflow Vulnerability | 12 Feb 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.