Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2025-61624 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Path Traversal Vulnerability | 16 Oct 2026 |
| CVE-2026-21589 Exploited |
Not yet scored | Atlassian Multiple Products Applications & supply chain |
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 15 Oct 2026 |
| CVE-2026-76519 Exploited |
Not yet scored | Cisco Secure Email Gateway Network & security devices |
Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 14 Oct 2026 |
| CVE-2026-105133 Exploited |
Not yet scored | Ahsay AhsayCBS Applications & supply chain |
Ahsay AhsayCBS Improper Authentication Vulnerability | 14 Oct 2026 |
| CVE-2026-0322 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Code Injection Vulnerability | 14 Oct 2026 |
| CVE-2026-105134 Exploited |
Not yet scored | Ahsay AhsayCBS Applications & supply chain |
Ahsay AhsayCBS Command Injection Vulnerability | 14 Oct 2026 |
| CVE-2026-104935 Exploited |
Not yet scored | Ivanti Connect Secure Network & security devices |
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 13 Oct 2026 |
| CVE-2026-96951 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Command Injection Vulnerability | 13 Oct 2026 |
| CVE-2023-22894 Exploited |
Not yet scored | Strapi Strapi Operating systems & software |
Strapi Cleartext Storage of Sensitive Information Vulnerability | 8 Oct 2026 |
| CVE-2015-5477 Exploited |
Not yet scored | ISC BIND Operating systems & software |
ISC BIND Data Processing Errors Vulnerability | 8 Oct 2026 |
| CVE-2016-3081 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Command Injection Vulnerability | 8 Oct 2026 |
| CVE-2015-3306 Exploited |
Not yet scored | ProFTPD ProFTPD Operating systems & software |
ProFTPD Improper Access Control Vulnerability | 8 Oct 2026 |
| CVE-2021-3199 Exploited |
Not yet scored | ONLYOFFICE Docs Operating systems & software |
ONLYOFFICE Docs Server Path Traversal Vulnerability | 8 Oct 2026 |
| CVE-2026-88779 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 4 Oct 2026 |
| CVE-2026-102490 Exploited |
Not yet scored | Zammad GmbH Zammad Operating systems & software |
Zammad GmbH Zammad Improper Privilege Management Vulnerability | 2 Oct 2026 |
| CVE-2026-102489 Exploited |
Not yet scored | Zammad GmbH Zammad Operating systems & software |
Zammad GmbH Zammad Session Fixation Vulnerability | 2 Oct 2026 |
| CVE-2026-104286 Exploited |
Not yet scored | Fortinet FortiMail Network & security devices |
Fortinet FortiMail Path Traversal Vulnerability | 1 Oct 2026 |
| CVE-2026-76504 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 30 Sep 2026 |
| CVE-2026-86950 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Out-of-Bounds Write Vulnerability | 29 Sep 2026 |
| CVE-2026-88771 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Improper Input Validation Vulnerability | 27 Sep 2026 |
| CVE-2026-88772 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 27 Sep 2026 |
| CVE-2026-67279 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 25 Sep 2026 |
| CVE-2026-65660 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Code Injection Vulnerability | 25 Sep 2026 |
| CVE-2026-87902 Exploited |
Not yet scored | WordPress Core Applications & supply chain |
WordPress Core Remote File Inclusion Vulnerability | 25 Sep 2026 |
| CVE-2026-5430 Exploited |
Not yet scored | WSO2 Multiple Products Network & security devices |
WSO2 Multiple Products Path Traversal Vulnerability | 24 Sep 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.