Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2618new in the last 7 days
- 2added as actively exploited
- 195critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-1340 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 8 Apr 2026 |
| CVE-2026-35616 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS Improper Access Control Vulnerability | 6 Apr 2026 |
| CVE-2026-3502 Exploited |
Not yet scored | TrueConf Client Operating systems & software |
TrueConf Client Download of Code Without Integrity Check Vulnerability | 2 Apr 2026 |
| CVE-2026-5281 Exploited |
Not yet scored | Google Dawn Operating systems & software |
Google Dawn Use-After-Free Vulnerability | 1 Apr 2026 |
| CVE-2026-3055 Exploited |
Not yet scored | Citrix NetScaler Identity & access |
Citrix NetScaler Out-of-Bounds Read Vulnerability | 30 Mar 2026 |
| CVE-2025-53521 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 27 Mar 2026 |
| CVE-2026-33634 Exploited |
Not yet scored | Aquasecurity Trivy Cloud & SaaS |
Aquasecurity Trivy Embedded Malicious Code Vulnerability | 26 Mar 2026 |
| CVE-2026-33017 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Code Injection Vulnerability | 25 Mar 2026 |
| CVE-2025-32432 Exploited |
Not yet scored | Craft CMS Craft CMS Operating systems & software |
Craft CMS Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2025-31277 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Buffer Overflow Vulnerability | 20 Mar 2026 |
| CVE-2025-43520 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Classic Buffer Overflow Vulnerability | 20 Mar 2026 |
| CVE-2025-43510 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Improper Locking Vulnerability | 20 Mar 2026 |
| CVE-2025-54068 Exploited |
Not yet scored | Laravel Livewire Operating systems & software |
Laravel Livewire Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2026-20131 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Cloud & SaaS |
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerabili… | 19 Mar 2026 |
| CVE-2025-66376 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 18 Mar 2026 |
| CVE-2026-20963 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 18 Mar 2026 |
| CVE-2025-47813 Exploited |
Not yet scored | Wing FTP Server Wing FTP Server Operating systems & software |
Wing FTP Server Information Disclosure Vulnerability | 16 Mar 2026 |
| CVE-2026-3910 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 13 Mar 2026 |
| CVE-2026-3909 Exploited |
Not yet scored | Google Skia Operating systems & software |
Google Skia Out-of-Bounds Write Vulnerability | 13 Mar 2026 |
| CVE-2025-68613 Exploited |
Not yet scored | n8n n8n Operating systems & software |
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 11 Mar 2026 |
| CVE-2025-26399 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9 Mar 2026 |
| CVE-2026-1603 Exploited |
Not yet scored | Ivanti Endpoint Manager (EPM) Network & security devices |
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 9 Mar 2026 |
| CVE-2021-22054 Exploited |
Not yet scored | Omnissa Workspace One UEM Operating systems & software |
Omnissa Workspace ONE Server-Side Request Forgery | 9 Mar 2026 |
| CVE-2023-41974 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Use-After-Free Vulnerability | 5 Mar 2026 |
| CVE-2021-30952 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 5 Mar 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.