CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2021-27860Arbitrary file upload vulnerability in FatPipe software FatPipe WARP, FatPipe IPVPN, FatPipe MPVPN Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27852Checkbox Survey Deserialization of Untrusted Data Vulnerability Checkbox Survey Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 5.5Medium |
| CVE-2021-27561Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27137DD-WRT Stack-Based Buffer Overflow Vulnerability DD-WRT DD-WRT Versions & vendor guidance → |
Known exploitedCISA KEV | 8.1High |
| CVE-2021-27104Accellion FTA OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27103Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27102Accellion FTA OS Command Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-27101Accellion FTA SQL Injection Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-27085Internet Explorer Remote Code Execution Vulnerability Microsoft Internet Explorer 11 Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-27065Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2013 Service Pack 1, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-27059Microsoft Office Remote Code Execution Vulnerability Microsoft Microsoft Office 2010 Service Pack 2, Microsoft Microsoft Office 2013 Service Pack 1, Microsoft Microsoft Office 2016 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.6High |
| CVE-2021-26858Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-26857Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2010 Service Pack 3, Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2013 Service Pack 1, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2021-26855Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Microsoft Exchange Server 2016 Cumulative Update 11, Microsoft Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Microsoft Exchange Server 2019, Microsoft Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Microsoft Exchange Server 2019 Cumulative Update 8 Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2021-26829OpenPLC ScadaBR Cross-site Scripting Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 5.4Medium |
| CVE-2021-26828OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability n/a n/a Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-26411Internet Explorer Memory Corruption Vulnerability Microsoft Internet Explorer 11, Microsoft Internet Explorer 9, Microsoft Microsoft Edge (EdgeHTML-based) Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2021-26086Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian Jira Server, Atlassian Jira Data Center Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2021-26085Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Atlassian Confluence Server, Atlassian Confluence Data Center Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2021-26084Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Atlassian Confluence Server, Atlassian Confluence Data Center Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2021-25489Samsung Mobile Devices Improper Input Validation Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 3.3Low |
| CVE-2021-25487Samsung Mobile Devices Out-of-Bounds Read Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 7.3High |
| CVE-2021-25395Samsung Mobile Devices Race Condition Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 6.4Medium |
| CVE-2021-25394Samsung Mobile Devices Race Condition Vulnerability Samsung Mobile Samsung Mobile Devices Versions & vendor guidance → |
Known exploitedCISA KEV | 6.4Medium |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.