CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile Access checkpoint Quantum Security Gateway, checkpoint Spark Firewalls Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-50522Microsoft SharePoint Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-49869Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter` kestra-io kestra Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48939Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 icagenda.com iCagenda extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48908Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 joomshaper.net SP Page Builder extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48907Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48710Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks Kludex starlette Versions & vendor guidance → |
Known exploitedCISA KEV | 6.5Medium |
| CVE-2026-48558SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification SimpleHelp SimpleHelp Versions & vendor guidance → |
Known exploitedCISA KEV | 9.5Critical |
| CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) Adobe Adobe Commerce, Adobe Adobe Commerce B2B, Adobe Magento Open Source, Adobe Adobe Commerce Events Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-48282ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Adobe ColdFusion 2025, Adobe ColdFusion 2023 Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed Technologies cPanel Plugin, LiteSpeed Technologies WHM Plugin Reported fix guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48027Compromised Nx Console version 18.95.0 nrwl nx-console Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-46817Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle Corporation Oracle Payments Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing Linux Linux Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2026-45659Microsoft SharePoint Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-45498Microsoft Defender Denial of Service Vulnerability Microsoft Microsoft Defender Antimalware Platform Versions & vendor guidance → |
Known exploitedCISA KEV | 4Medium |
| CVE-2026-45321Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys @tanstack arktype-adapter, @tanstack eslint-plugin-router, @tanstack eslint-plugin-start, @tanstack history, @tanstack nitro-v2-vite-plugin, @tanstack react-router, @tanstack react-router-devtools, @tanstack react-router-ssr-query, @tanstack react-start, @tanstack react-start-client, @tanstack react-start-rsc, @tanstack react-start-server, @tanstack router-cli, @tanstack router-core, @tanstack router-devtools, @tanstack router-devtools-core, @tanstack router-generator, @tanstack router-plugin, @tanstack router-ssr-query-core, @tanstack router-utils, @tanstack outer-vite-plugin, @tanstack solid-router, @tanstack solid-router-devtools, @tanstack solid-router-ssr-query, @tanstack solid-start, @tanstack solid-start-client, @tanstack solid-start-server, @tanstack start-client-core, @tanstack start-fn-stubs, @tanstack start-plugin-core, @tanstack start-server-core, @tanstack start-static-server-functions, @tanstack start-storage-context, @tanstack valibot-adapter, @tanstack virtual-file-routes, @tanstack vue-router, @tanstack vue-router-devtools, @tanstack vue-router-ssr-query, @tanstack vue-start, @tanstack vue-start-client, @tanstack vue-start-server, @tanstack zod-adapter Versions & vendor guidance → |
Known exploitedCISA KEV | 9.6Critical |
| CVE-2026-45247Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection Mirasvit Full Page Cache Warmer for Magento 2 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-42897Microsoft Exchange Server Spoofing Vulnerability Microsoft Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Microsoft Exchange Server Subscription Edition RTM Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpoints BerriAI litellm Versions & vendor guidance → |
Known exploitedCISA KEV | 8.7High |
| CVE-2026-42208LiteLLM: SQL injection in Proxy API key verification BerriAI litellm Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactory jfrog artifactory Versions & vendor guidance → |
Known exploitedCISA KEV | 7.5High |
| CVE-2026-42016Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation jfrog artifactory Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2026-41940WebPros cPanel and WHM Authentication Bypass via Login Flow WebPros cPanel, WebPros WP Squared, WebPros WHM Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-41709ESX insufficient logging vulnerability VMware Cloud Foundation, VMware vSphere Foundation, VMware ESX, VMware Telco Cloud Platform Versions & vendor guidance → |
Known exploitedCISA KEV | 2.7Low |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.