Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-72530 Exploited |
Not yet scored | TrueConf Server Operating systems & software |
TrueConf Server Code Injection Vulnerability | 20 Aug 2026 |
| CVE-2026-72529 Exploited |
Not yet scored | TrueConf Server Operating systems & software |
TrueConf Server Missing Authentication for Critical Function Vulnerability | 20 Aug 2026 |
| CVE-2026-55040 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Weak Authentication Vulnerability | 18 Aug 2026 |
| CVE-2026-33824 Exploited |
Not yet scored | Microsoft Internet Key Exchange (IKE) Service Extensions Operating systems & software |
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 18 Aug 2026 |
| CVE-2026-59310 Exploited |
Not yet scored | Broadcom VMware vCenter Operating systems & software |
Broadcom VMware vCenter Path Traversal Vulnerability | 18 Aug 2026 |
| CVE-2026-65400 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Improper Authentication Vulnerability | 18 Aug 2026 |
| CVE-2025-62593 Exploited |
Not yet scored | Ray-Project Ray Operating systems & software |
Ray-Project Ray Code Injection Vulnerability | 17 Aug 2026 |
| CVE-2026-68820 Exploited |
Not yet scored | Microsoft Windows Ancillary Function Driver for WinSock Operating systems & software |
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 11 Aug 2026 |
| CVE-2026-8037 Exploited |
Not yet scored | Progress LoadMaster Operating systems & software |
Progress LoadMaster Command Injection Vulnerability | 7 Aug 2026 |
| CVE-2026-63077 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 5 Aug 2026 |
| CVE-2026-34486 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 4 Aug 2026 |
| CVE-2026-9198 Exploited |
Not yet scored | IBM Langflow Operating systems & software |
IBM Langflow Code Injection Vulnerability | 4 Aug 2026 |
| CVE-2026-16812 Exploited |
Not yet scored | Arista VeloCloud Orchestrator Operating systems & software |
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 27 Jul 2026 |
| CVE-2026-50522 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 22 Jul 2026 |
| CVE-2026-0770 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 21 Jul 2026 |
| CVE-2021-27137 Exploited |
Not yet scored | DD-WRT DD-WRT Operating systems & software |
DD-WRT Stack-Based Buffer Overflow Vulnerability | 21 Jul 2026 |
| CVE-2026-58644 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 16 Jul 2026 |
| CVE-2026-46817 Exploited |
Not yet scored | Oracle E-Business Suite Operating systems & software |
Oracle E-Business Suite Improper Privilege Management Vulnerability | 15 Jul 2026 |
| CVE-2023-4346 Exploited |
Not yet scored | KNX Association KNX Protocol Connection Authorization Option 1 Operating systems & software |
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 15 Jul 2026 |
| CVE-2026-56164 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 14 Jul 2026 |
| CVE-2026-56291 Exploited |
Not yet scored | Balbooa Forms Operating systems & software |
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 10 Jul 2026 |
| CVE-2026-55255 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 7 Jul 2026 |
| CVE-2026-56290 Exploited |
Not yet scored | Joomlack Page Builder Operating systems & software |
Joomlack Page Builder Improper Access Control Vulnerability | 7 Jul 2026 |
| CVE-2026-48282 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Path Traversal Vulnerability | 7 Jul 2026 |
| CVE-2026-45659 Exploited |
Not yet scored | Microsoft SharePoint Server Operating systems & software |
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 1 Jul 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.