CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-67279SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS Mikrotik RouterOS Versions & vendor guidance → |
Known exploitedCISA KEV | 6.9Medium |
| CVE-2026-67277Kernel memory disclosure and denial of service in MikroTik RouterOS btest service Mikrotik RouterOS Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-66384Authenticated users may write data outside the intended Docker cache path jfrog artifactory Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2026-65660Microsoft SharePoint Server Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-65400Apple macOS Improper Authentication Vulnerability Apple macOS Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) mlflow mlflow Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data Vulnerability JetBrains TeamCity Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-63030WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution WordPress WordPress Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-60137WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query WordPress WordPress Versions & vendor guidance → |
Known exploitedCISA KEV | 5.9Medium |
| CVE-2026-60004Gitea Code Injection Vulnerability Gitea Gitea Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-59822LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback BerriAI litellm Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-59310vCenter directory-traversal vulnerability VMware Cloud Foundation, VMware vSphere Foundation, VMware vCenter, VMware Telco Cloud Infrastructure, VMware Telco Cloud Platform Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-58704Google Pixel Improper Authorization Vulnerability Google Android Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-58644Microsoft SharePoint Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-56291Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 balbooa.com balbooa.com Balbooa Forms extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-56290Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 joomlack.fr JoomlaCK.fr Page Builder CK extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2026-56155Active Directory Federation Services Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow langflow-ai langflow Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed Technologies cPanel Plugin Reported fix guidance → |
Known exploitedCISA KEV | 8.5High |
| CVE-2026-5430Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover WSO2 WSO2 Universal Gateway, WSO2 WSO2 Traffic Manager, WSO2 WSO2 API Control Plane, WSO2 WSO2 API Manager, WSO2 WSO2 Carbon API Manager Rest API Utility Reported fix guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-53362ipv6: account for fraggap on the paged allocation path Linux Linux Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2026-53266netfilter: bridge: make ebt_snat ARP rewrite writable Linux Linux Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-5281Google Dawn Use-After-Free Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.