Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-62853 | Critical CVSS 9.9 |
- OT, ICS & IoT |
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts… | 30 Oct 2026 |
| CVE-2026-62849 | Critical CVSS 9.1 |
- OT, ICS & IoT |
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the… | 30 Oct 2026 |
| CVE-2026-110936 Exploited |
Not yet scored | Siemens Software Center OT, ICS & IoT |
Siemens Software Center Uncontrolled Search Path Element Vulnerability | 20 Oct 2026 |
| CVE-2021-22681 Exploited |
Not yet scored | Rockwell Multiple Products OT, ICS & IoT |
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | 5 Mar 2026 |
| CVE-2021-26828 Exploited |
Not yet scored | OpenPLC ScadaBR OT, ICS & IoT |
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | 3 Dec 2025 |
| CVE-2021-26829 Exploited |
Not yet scored | OpenPLC ScadaBR OT, ICS & IoT |
OpenPLC ScadaBR Cross-site Scripting Vulnerability | 28 Nov 2025 |
| CVE-2025-27915 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) OT, ICS & IoT |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 7 Oct 2025 |
| CVE-2024-21893 Exploited |
Not yet scored | Ivanti Connect Secure, Policy Secure, and Neurons OT, ICS & IoT |
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | 31 Jan 2024 |
| CVE-2024-21887 Exploited |
Not yet scored | Ivanti Connect Secure and Policy Secure OT, ICS & IoT |
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | 10 Jan 2024 |
| CVE-2023-46805 Exploited |
Not yet scored | Ivanti Connect Secure and Policy Secure OT, ICS & IoT |
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | 10 Jan 2024 |
| CVE-2023-6448 Exploited |
Not yet scored | Unitronics Vision PLC and HMI OT, ICS & IoT |
Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 11 Dec 2023 |
| CVE-2018-7841 Exploited |
Not yet scored | Schneider Electric U.motion Builder OT, ICS & IoT |
Schneider Electric U.motion Builder SQL Injection Vulnerability | 15 Apr 2022 |
| CVE-2016-4523 Exploited |
Not yet scored | Trihedral VTScada (formerly VTS) OT, ICS & IoT |
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | 15 Apr 2022 |
| CVE-2016-8562 Exploited |
Not yet scored | Siemens SIMATIC CP OT, ICS & IoT |
Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | 3 Mar 2022 |
| CVE-2020-11261 Exploited |
Not yet scored | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,… OT, ICS & IoT |
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | 1 Dec 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.