Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-25108 Exploited |
Not yet scored | Soliton Systems K.K FileZen Operating systems & software |
Soliton Systems K.K FileZen OS Command Injection Vulnerability | 24 Feb 2026 |
| CVE-2025-68461 Exploited |
Not yet scored | Roundcube Webmail Operating systems & software |
RoundCube Webmail Cross-site Scripting Vulnerability | 20 Feb 2026 |
| CVE-2021-22175 Exploited |
Not yet scored | GitLab GitLab Operating systems & software |
GitLab Server-Side Request Forgery (SSRF) Vulnerability | 18 Feb 2026 |
| CVE-2026-22769 Exploited |
Not yet scored | Dell RecoverPoint for Virtual Machines (RP4VMs) Operating systems & software |
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 18 Feb 2026 |
| CVE-2008-0015 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 17 Feb 2026 |
| CVE-2020-7796 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | 17 Feb 2026 |
| CVE-2024-7694 Exploited |
Not yet scored | TeamT5 ThreatSonar Anti-Ransomware Operating systems & software |
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | 17 Feb 2026 |
| CVE-2026-2441 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium CSS Use-After-Free Vulnerability | 17 Feb 2026 |
| CVE-2026-1731 Exploited |
Not yet scored | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) Operating systems & software |
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 13 Feb 2026 |
| CVE-2026-20700 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Buffer Overflow Vulnerability | 12 Feb 2026 |
| CVE-2025-15556 Exploited |
Not yet scored | Notepad++ Notepad++ Operating systems & software |
Notepad++ Download of Code Without Integrity Check Vulnerability | 12 Feb 2026 |
| CVE-2025-40536 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Security Control Bypass Vulnerability | 12 Feb 2026 |
| CVE-2026-21514 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 10 Feb 2026 |
| CVE-2026-21513 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 10 Feb 2026 |
| CVE-2026-21525 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows NULL Pointer Dereference Vulnerability | 10 Feb 2026 |
| CVE-2026-21510 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 10 Feb 2026 |
| CVE-2026-21533 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Improper Privilege Management Vulnerability | 10 Feb 2026 |
| CVE-2026-21519 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Type Confusion Vulnerability | 10 Feb 2026 |
| CVE-2025-11953 Exploited |
Not yet scored | React Native Community CLI Operating systems & software |
React Native Community CLI OS Command Injection Vulnerability | 5 Feb 2026 |
| CVE-2025-64328 Exploited |
Not yet scored | Sangoma FreePBX Operating systems & software |
Sangoma FreePBX OS Command Injection Vulnerability | 3 Feb 2026 |
| CVE-2019-19006 Exploited |
Not yet scored | Sangoma FreePBX Operating systems & software |
Sangoma FreePBX Improper Authentication Vulnerability | 3 Feb 2026 |
| CVE-2025-40551 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 3 Feb 2026 |
| CVE-2018-14634 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Integer Overflow Vulnerability | 26 Jan 2026 |
| CVE-2025-52691 Exploited |
Not yet scored | SmarterTools SmarterMail Operating systems & software |
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | 26 Jan 2026 |
| CVE-2026-24061 Exploited |
Not yet scored | GNU InetUtils Operating systems & software |
GNU InetUtils Argument Injection Vulnerability | 26 Jan 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.