CVE tracker — Exploitation, versions & score history

Scroll across the table to compare exploitation and severity.

Matching CVEs and exploitation evidence. CVSS measures reported severity. Unknown scores are not zero.
CVE / vulnerability	Exploitation	CVSS
CVE-2026-20262 Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2026-20253 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise Splunk Splunk Enterprise Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2026-20245 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability Cisco Cisco Catalyst SD-WAN Controller, Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance →	Known exploitedCISA KEV	7.8High
CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability Cisco Cisco Unified Communications Manager Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco Cisco Catalyst SD-WAN Controller, Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance →	Known exploitedCISA KEV	6.5Medium
CVE-2026-20131 Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability Cisco Cisco Secure Firewall Management Center (FMC) Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2026-20122 Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability Cisco Cisco Catalyst SD-WAN Manager Versions & vendor guidance →	Known exploitedCISA KEV	5.4Medium
CVE-2026-20079 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability Cisco Cisco Secure Firewall Management Center (FMC) Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2026-20045 Cisco Unified Communications Products Remote Code Execution Vulnerability Cisco Cisco Unified Communications Manager, Cisco Cisco Unified Communications Manager IM and Presence Service, Cisco Cisco Unity Connection Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability SonicWall SonicOS Versions & vendor guidance →	Known exploitedCISA KEV	7.5High
CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 NetScaler ADC, NetScaler Gateway Versions & vendor guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2026-18577 Incomplete patch leads to administrative account takeover N-able N-central Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2026-18556 Unauthenticated administrative account takeover N-able N-central Versions & vendor guidance →	Known exploitedCISA KEV	8.2High
CVE-2026-1731 Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA) Versions & vendor guidance →	Known exploitedCISA KEV	9.9Critical
CVE-2026-16812 VeloCloud Orchestrator OS Command Injection Arista Networks VeloCloud Orchestrator On-Prem Reported fix guidance →	Known exploitedCISA KEV	10Critical
CVE-2026-16232 Authentication Bypass in the SmartConsole Login Process Using an Application Token checkpoint Quantum Security Management, checkpoint Multi-Domain Security Management Versions & vendor guidance →	Known exploitedCISA KEV	9.3Critical
CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti Endpoint Manager Versions & vendor guidance →	Known exploitedCISA KEV	8.6High
CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall SMA1000 Versions & vendor guidance →	Known exploitedCISA KEV	7.2High
CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall SMA1000 Versions & vendor guidance →	Known exploitedCISA KEV	10Critical
CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile Versions & vendor guidance →	Known exploitedCISA KEV	9.8Critical
CVE-2026-12569 Remote Code Execution (RCE) vulnerability in Windchill PDMlink PTC Windchill PDMLink, PTC FlexPLM Versions & vendor guidance →	Known exploitedCISA KEV	9.3Critical

Data sources, freshness & score definitions

The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.

CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records

CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable

FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records

CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.