Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-39808 Exploited |
Not yet scored | Fortinet FortiSandbox Network & security devices |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-25089 Exploited |
Not yet scored | Fortinet FortiSandbox Cloud & SaaS |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-58644 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 16 Jul 2026 |
| CVE-2026-46817 Exploited |
Not yet scored | Oracle E-Business Suite Operating systems & software |
Oracle E-Business Suite Improper Privilege Management Vulnerability | 15 Jul 2026 |
| CVE-2023-4346 Exploited |
Not yet scored | KNX Association KNX Protocol Connection Authorization Option 1 Operating systems & software |
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 15 Jul 2026 |
| CVE-2026-15410 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Code Injection Vulnerability | 14 Jul 2026 |
| CVE-2026-56155 Exploited |
Not yet scored | Microsoft Active Directory Federation Services Identity & access |
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 14 Jul 2026 |
| CVE-2026-56164 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 14 Jul 2026 |
| CVE-2026-15409 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 14 Jul 2026 |
| CVE-2008-4128 Exploited |
Not yet scored | Cisco IOS Network & security devices |
Cisco IOS Cross-Site Request Forgery Vulnerability | 13 Jul 2026 |
| CVE-2026-56291 Exploited |
Not yet scored | Balbooa Forms Operating systems & software |
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 10 Jul 2026 |
| CVE-2026-48939 Exploited |
Not yet scored | iCagenda iCagenda Applications & supply chain |
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 10 Jul 2026 |
| CVE-2026-48908 Exploited |
Not yet scored | JoomShaper SP Page Builder Applications & supply chain |
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | 7 Jul 2026 |
| CVE-2026-55255 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 7 Jul 2026 |
| CVE-2026-56290 Exploited |
Not yet scored | Joomlack Page Builder Operating systems & software |
Joomlack Page Builder Improper Access Control Vulnerability | 7 Jul 2026 |
| CVE-2026-48282 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Path Traversal Vulnerability | 7 Jul 2026 |
| CVE-2026-45659 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 1 Jul 2026 |
| CVE-2026-48558 Exploited |
Not yet scored | SimpleHelp SimpleHelp Identity & access |
SimpleHelp Authentication Bypass Vulnerability | 29 Jun 2026 |
| CVE-2026-12569 Exploited |
Not yet scored | PTC Windchill and FlexPLM Operating systems & software |
PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 25 Jun 2026 |
| CVE-2026-20230 Exploited |
Not yet scored | Cisco Unified Communications Manager Network & security devices |
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 25 Jun 2026 |
| CVE-2026-34910 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Improper Input Validation Vulnerability | 23 Jun 2026 |
| CVE-2025-67038 Exploited |
Not yet scored | Lantronix EDS5000 Operating systems & software |
Lantronix EDS5000 Code Injection Vulnerability | 23 Jun 2026 |
| CVE-2026-34909 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Path Traversal Vulnerability | 23 Jun 2026 |
| CVE-2026-34908 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Improper Access Control Vulnerability | 23 Jun 2026 |
| CVE-2026-20253 Exploited |
Not yet scored | Splunk Enterprise Operating systems & software |
Splunk Enterprise Missing Authentication for Critical Function Vulnerability | 18 Jun 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.