Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2025-48700 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 20 Apr 2026 |
| CVE-2026-20128 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 20 Apr 2026 |
| CVE-2024-27199 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Relative Path Traversal Vulnerability | 20 Apr 2026 |
| CVE-2026-34197 Exploited |
Not yet scored | Apache ActiveMQ Operating systems & software |
Apache ActiveMQ Improper Input Validation Vulnerability | 16 Apr 2026 |
| CVE-2009-0238 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Remote Code Execution | 14 Apr 2026 |
| CVE-2026-32201 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Improper Input Validation Vulnerability | 14 Apr 2026 |
| CVE-2012-1854 Exploited |
Not yet scored | Microsoft Visual Basic for Applications (VBA) Applications & supply chain |
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | 13 Apr 2026 |
| CVE-2025-60710 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Link Following Vulnerability | 13 Apr 2026 |
| CVE-2023-21529 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | 13 Apr 2026 |
| CVE-2023-36424 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Out-of-Bounds Read Vulnerability | 13 Apr 2026 |
| CVE-2020-9715 Exploited |
Not yet scored | Adobe Acrobat Operating systems & software |
Adobe Acrobat Use-After-Free Vulnerability | 13 Apr 2026 |
| CVE-2026-21643 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS SQL Injection Vulnerability | 13 Apr 2026 |
| CVE-2026-34621 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Prototype Pollution Vulnerability | 13 Apr 2026 |
| CVE-2026-1340 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 8 Apr 2026 |
| CVE-2026-35616 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS Improper Access Control Vulnerability | 6 Apr 2026 |
| CVE-2026-3502 Exploited |
Not yet scored | TrueConf Client Operating systems & software |
TrueConf Client Download of Code Without Integrity Check Vulnerability | 2 Apr 2026 |
| CVE-2026-5281 Exploited |
Not yet scored | Google Dawn Operating systems & software |
Google Dawn Use-After-Free Vulnerability | 1 Apr 2026 |
| CVE-2026-3055 Exploited |
Not yet scored | Citrix NetScaler Identity & access |
Citrix NetScaler Out-of-Bounds Read Vulnerability | 30 Mar 2026 |
| CVE-2025-53521 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 27 Mar 2026 |
| CVE-2026-33634 Exploited |
Not yet scored | Aquasecurity Trivy Cloud & SaaS |
Aquasecurity Trivy Embedded Malicious Code Vulnerability | 26 Mar 2026 |
| CVE-2026-33017 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Code Injection Vulnerability | 25 Mar 2026 |
| CVE-2025-32432 Exploited |
Not yet scored | Craft CMS Craft CMS Operating systems & software |
Craft CMS Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2025-54068 Exploited |
Not yet scored | Laravel Livewire Operating systems & software |
Laravel Livewire Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2025-43510 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Improper Locking Vulnerability | 20 Mar 2026 |
| CVE-2025-43520 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Classic Buffer Overflow Vulnerability | 20 Mar 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.