Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2025-62593 Exploited |
Not yet scored | Ray-Project Ray Operating systems & software |
Ray-Project Ray Code Injection Vulnerability | 17 Aug 2026 |
| CVE-2026-20349 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Network & security devices |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 11 Aug 2026 |
| CVE-2026-68820 Exploited |
Not yet scored | Microsoft Windows Ancillary Function Driver for WinSock Operating systems & software |
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 11 Aug 2026 |
| CVE-2026-72898 Exploited |
Not yet scored | Metabase Metabase Applications & supply chain |
Metabase SQL Injection Vulnerability | 11 Aug 2026 |
| CVE-2026-8037 Exploited |
Not yet scored | Progress LoadMaster Operating systems & software |
Progress LoadMaster Command Injection Vulnerability | 7 Aug 2026 |
| CVE-2026-63077 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 5 Aug 2026 |
| CVE-2026-18556 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 4 Aug 2026 |
| CVE-2026-34486 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 4 Aug 2026 |
| CVE-2026-9198 Exploited |
Not yet scored | IBM Langflow Operating systems & software |
IBM Langflow Code Injection Vulnerability | 4 Aug 2026 |
| CVE-2026-18577 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 3 Aug 2026 |
| CVE-2026-20316 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Network & security devices |
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 29 Jul 2026 |
| CVE-2026-16812 Exploited |
Not yet scored | Arista VeloCloud Orchestrator Operating systems & software |
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 27 Jul 2026 |
| CVE-2025-68686 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 27 Jul 2026 |
| CVE-2026-16232 Exploited |
Not yet scored | Check Point SmartConsole Network & security devices |
Check Point SmartConsole Improper Authentication Vulnerability | 22 Jul 2026 |
| CVE-2026-50522 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 22 Jul 2026 |
| CVE-2026-60137 Exploited |
Not yet scored | WordPress Core Applications & supply chain |
WordPress Core SQL Injection Vulnerability | 21 Jul 2026 |
| CVE-2026-63030 Exploited |
Not yet scored | WordPress Core Applications & supply chain |
WordPress Core Interpretation Conflict Vulnerability | 21 Jul 2026 |
| CVE-2026-0770 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 21 Jul 2026 |
| CVE-2021-27137 Exploited |
Not yet scored | DD-WRT DD-WRT Operating systems & software |
DD-WRT Stack-Based Buffer Overflow Vulnerability | 21 Jul 2026 |
| CVE-2026-39808 Exploited |
Not yet scored | Fortinet FortiSandbox Network & security devices |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-25089 Exploited |
Not yet scored | Fortinet FortiSandbox Cloud & SaaS |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-58644 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 16 Jul 2026 |
| CVE-2026-46817 Exploited |
Not yet scored | Oracle E-Business Suite Operating systems & software |
Oracle E-Business Suite Improper Privilege Management Vulnerability | 15 Jul 2026 |
| CVE-2023-4346 Exploited |
Not yet scored | KNX Association KNX Protocol Connection Authorization Option 1 Operating systems & software |
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 15 Jul 2026 |
| CVE-2026-15410 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Code Injection Vulnerability | 14 Jul 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.