CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-84869ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions ConnectWise ScreenConnect Reported fix guidance → |
Known exploitedCISA KEV | 9.9Critical |
| CVE-2026-8452Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service NetScaler ADC, NetScaler Gateway Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-8398Daemon Tools Lite Embedded Malicious Code Vulnerability AVB Disc Soft DAEMON Tools Lite Reported fix guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection Vulnerability SonicWall SMA1000 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall SMA1000 Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-82329Potential authentication bypass leading to administrative access in Artifactory jfrog artifactory Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-82078PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector PaperCut PaperCut MF/NG Versions & vendor guidance → |
Known exploitedCISA KEV | 9.4Critical |
| CVE-2026-81963Windows Update Stack Elevation of Privilege Vulnerability Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2026-81578PaperCut MF/NG: Authentication Bypass PaperCut PaperCut MF/NG Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-8037OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF Progress Software LoadMaster, Progress Software ECS Connections Manager, Progress Software Object Scale Connection Manager, Progress Software MOVEit WAF Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2026-76519Cisco Secure Email Gateway Arbitrary File Write Vulnerability Cisco Cisco Secure Email Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-76504Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-76461Cisco Secure Email Gateway SQL Injection Vulnerability Cisco Cisco Secure Email Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-76460Cisco Identity Services Engine Authentication Bypass Vulnerability Cisco Cisco Identity Services Engine Software, Cisco Cisco ISE Passive Identity Connector Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-76418Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Cisco Secure Firewall Threat Defense (FTD) Software Versions & vendor guidance → |
Known exploitedCISA KEV | 8.6High |
| CVE-2026-75650Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) Adobe Adobe Commerce, Adobe Adobe Commerce B2B, Adobe Magento Open Source Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-7473Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass Arista Networks EOS Reported fix guidance → |
Known exploitedCISA KEV | 6.9Medium |
| CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Zimbra Collaboration Versions & vendor guidance → |
Known exploitedCISA KEV | 8.9High |
| CVE-2026-72898Metabase SQL injection via password reset endpoint Metabase Metabase Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Zyxel GS1900-48HPv2 firmware, Zyxel GS1900-8 firmware, Zyxel GS1900-8HP firmware, Zyxel GS1900-10HP firmware, Zyxel GS1900-16 firmware, Zyxel GS1900-24 firmware, Zyxel GS1900-24E firmware, Zyxel GS1900-24EP firmware, Zyxel GS1900-24HPv2 firmware, Zyxel GS1900-48 firmware Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-72530TrueConf Server Code Injection Vulnerability TrueConf TrueConf Server Reported fix guidance → |
Known exploitedCISA KEV | 9.5Critical |
| CVE-2026-72529TrueConf Server Missing Authentication for Critical Function Vulnerability TrueConf TrueConf Server Reported fix guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863) Adobe Adobe Commerce, Adobe Adobe Commerce B2B, Adobe Magento Open Source Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti Endpoint Manager Mobile Versions & vendor guidance → |
Known exploitedCISA KEV | 7.2High |
| CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.