CVE tracker
Scroll across the table to compare exploitation and severity.
| CVE / vulnerability | Exploitation | CVSS |
|---|---|---|
| CVE-2026-56291Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 balbooa.com balbooa.com Balbooa Forms extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-56290Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 joomlack.fr JoomlaCK.fr Page Builder CK extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 5.3Medium |
| CVE-2026-56155Active Directory Federation Services Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2026-55803Drupal core - Critical - PHP object injection - SA-CORE-2026-005 Drupal Drupal core Versions & vendor guidance → |
Not in downloaded KEV | 5.9Medium |
| CVE-2026-55649GeoNode has Stored XSS in Documents metadata abstract field GeoNode geonode Versions & vendor guidance → |
Not in downloaded KEV | 6.3Medium |
| CVE-2026-55607Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV | 7.7High |
| CVE-2026-55255Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow langflow-ai langflow Versions & vendor guidance → |
Known exploitedCISA KEV | 8.4High |
| CVE-2026-55098Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735 Basekick-Labs arc Versions & vendor guidance → |
Not in downloaded KEV | 6.5Medium |
| CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 9.1Critical |
| CVE-2026-54724Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpoint kiwitcms Kiwi Versions & vendor guidance → |
Not in downloaded KEV | 6.1Medium |
| CVE-2026-54499Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders stanfordnlp stanza Versions & vendor guidance → |
Not in downloaded KEV | 7.5High |
| CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed Technologies cPanel Plugin Reported fix guidance → |
Known exploitedCISA KEV | 8.5High |
| CVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch anthropics claude-code Versions & vendor guidance → |
Not in downloaded KEV | 6Medium |
| CVE-2026-5430Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover WSO2 WSO2 Universal Gateway, WSO2 WSO2 Traffic Manager, WSO2 WSO2 API Control Plane, WSO2 WSO2 API Manager, WSO2 WSO2 Carbon API Manager Rest API Utility Reported fix guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-54121Active Directory Certificate Services Elevation of Privilege Vulnerability Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation), Microsoft Windows Server 2016, Microsoft Windows Server 2016 (Server Core installation), Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation) Versions & vendor guidance → |
Not in downloaded KEV | 8.8High |
| CVE-2026-53362ipv6: account for fraggap on the paged allocation path Linux Linux Versions & vendor guidance → |
Known exploitedCISA KEV | 7.8High |
| CVE-2026-53266netfilter: bridge: make ebt_snat ARP rewrite writable Linux Linux Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-5281Google Dawn Use-After-Free Vulnerability Google Chrome Versions & vendor guidance → |
Known exploitedCISA KEV | 8.8High |
| CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile Access checkpoint Quantum Security Gateway, checkpoint Spark Firewalls Versions & vendor guidance → |
Known exploitedCISA KEV | 9.3Critical |
| CVE-2026-50522Microsoft SharePoint Remote Code Execution Vulnerability Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition Versions & vendor guidance → |
Known exploitedCISA KEV | 9.8Critical |
| CVE-2026-49869Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter` kestra-io kestra Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48939Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15 icagenda.com iCagenda extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48908Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 joomshaper.net SP Page Builder extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
| CVE-2026-48907Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla Versions & vendor guidance → |
Known exploitedCISA KEV | 10Critical |
Data sources, freshness & score definitions
The full downloaded KEV catalog is tracked, alongside CVEs found in monitored sources. This is not the entire CVE universe. CVE record enrichment rotates in bounded batches; missing fields remain unknown.
CISA KEV: checked 13 Nov 2026, 00:20 Jerusalem · 1779 records
CVE Program: checked 13 Nov 2026, 00:20 Jerusalem · 117 records · 3 records unavailable
FIRST EPSS: checked 13 Nov 2026, 00:20 Jerusalem · 2223 records
CVSS describes reported technical severity. EPSS estimates exploitation probability in the next 30 days. KEV inclusion records known exploitation, not whether your own systems are exposed.