Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-49869 Exploited |
Not yet scored | Kestra Kestra OSS Operating systems & software |
Kestra OSS OS Command Injection Vulnerability | 2 Sep 2026 |
| CVE-2026-82329 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Improper Authentication Vulnerability | 2 Sep 2026 |
| CVE-2026-9586 Exploited |
Not yet scored | Sangoma Switchvox Network & security devices |
Sangoma Switchvox SQL Injection Vulnerability | 2 Sep 2026 |
| CVE-2026-83549 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2 Sep 2026 |
| CVE-2026-82078 Exploited |
Not yet scored | PaperCut NG/MF Applications & supply chain |
PaperCut NG/MF Unsafe Reflection Vulnerability | 31 Aug 2026 |
| CVE-2026-81578 Exploited |
Not yet scored | PaperCut NG/MF Operating systems & software |
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | 31 Aug 2026 |
| CVE-2026-66384 Exploited |
Not yet scored | JFrog Artifactory Cloud & SaaS |
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 27 Aug 2026 |
| CVE-2023-49105 Exploited |
Not yet scored | ownCloud ownCloud Operating systems & software |
ownCloud Improper Authentication Vulnerability | 27 Aug 2026 |
| CVE-2026-53362 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Unspecified Vulnerability | 27 Aug 2026 |
| CVE-2021-23758 Exploited |
Not yet scored | Ajax.NET Professional Ajax.NET Professional Operating systems & software |
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | 26 Aug 2026 |
| CVE-2019-1068 Exploited |
Not yet scored | Microsoft SQL Server Operating systems & software |
Microsoft SQL Server Remote Code Execution Vulnerability | 26 Aug 2026 |
| CVE-2015-3246 Exploited |
Not yet scored | Red Hat Libuser Operating systems & software |
Red Hat Libuser Race Condition Vulnerability | 26 Aug 2026 |
| CVE-2015-5287 Exploited |
Not yet scored | Red Hat Automatic Bug Reporting Tool Operating systems & software |
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | 26 Aug 2026 |
| CVE-2022-0995 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Out-of-Bounds Write Vulnerability | 26 Aug 2026 |
| CVE-2026-8452 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 26 Aug 2026 |
| CVE-2026-60004 Exploited |
Not yet scored | Gitea Gitea Applications & supply chain |
Gitea Code Injection Vulnerability | 25 Aug 2026 |
| CVE-2026-21962 Exploited |
Not yet scored | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Operating systems & software |
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 24 Aug 2026 |
| CVE-2026-73570 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 21 Aug 2026 |
| CVE-2026-72530 Exploited |
Not yet scored | TrueConf Server Operating systems & software |
TrueConf Server Code Injection Vulnerability | 20 Aug 2026 |
| CVE-2026-72529 Exploited |
Not yet scored | TrueConf Server Operating systems & software |
TrueConf Server Missing Authentication for Critical Function Vulnerability | 20 Aug 2026 |
| CVE-2026-64849 Exploited |
Not yet scored | MLflow MLflow Cloud & SaaS |
MLflow Server-Side Request Forgery Vulnerability | 19 Aug 2026 |
| CVE-2026-55040 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Weak Authentication Vulnerability | 18 Aug 2026 |
| CVE-2026-33824 Exploited |
Not yet scored | Microsoft Internet Key Exchange (IKE) Service Extensions Operating systems & software |
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 18 Aug 2026 |
| CVE-2026-59310 Exploited |
Not yet scored | Broadcom VMware vCenter Operating systems & software |
Broadcom VMware vCenter Path Traversal Vulnerability | 18 Aug 2026 |
| CVE-2026-65400 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Improper Authentication Vulnerability | 18 Aug 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.