Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-20230 Exploited |
Not yet scored | Cisco Unified Communications Manager Network & security devices |
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 25 Jun 2026 |
| CVE-2026-34910 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Improper Input Validation Vulnerability | 23 Jun 2026 |
| CVE-2025-67038 Exploited |
Not yet scored | Lantronix EDS5000 Operating systems & software |
Lantronix EDS5000 Code Injection Vulnerability | 23 Jun 2026 |
| CVE-2026-34909 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Path Traversal Vulnerability | 23 Jun 2026 |
| CVE-2026-34908 Exploited |
Not yet scored | Ubiquiti UniFi OS Operating systems & software |
Ubiquiti UniFi OS Improper Access Control Vulnerability | 23 Jun 2026 |
| CVE-2026-20253 Exploited |
Not yet scored | Splunk Enterprise Operating systems & software |
Splunk Enterprise Missing Authentication for Critical Function Vulnerability | 18 Jun 2026 |
| CVE-2026-48907 Exploited |
Not yet scored | Widget Factory Joomla Content Editor Applications & supply chain |
Widget Factory Joomla Content Editor Improper Access Control Vulnerability | 16 Jun 2026 |
| CVE-2026-54420 Exploited |
Not yet scored | LiteSpeed cPanel Plugin Cloud & SaaS |
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 15 Jun 2026 |
| CVE-2026-20262 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 15 Jun 2026 |
| CVE-2026-35273 Exploited |
Not yet scored | Oracle PeopleSoft Enterprise PeopleTools Operating systems & software |
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 12 Jun 2026 |
| CVE-2026-10520 Exploited |
Not yet scored | Ivanti Sentry Network & security devices |
Ivanti Sentry OS Command Injection Vulnerability | 11 Jun 2026 |
| CVE-2026-11645 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 9 Jun 2026 |
| CVE-2026-7473 Exploited |
Not yet scored | Arista Extensible Operating System Network & security devices |
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 9 Jun 2026 |
| CVE-2026-20245 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 9 Jun 2026 |
| CVE-2026-50751 Exploited |
Not yet scored | Check Point Security Gateway Network & security devices |
Check Point Security Gateway Improper Authentication Vulnerability | 8 Jun 2026 |
| CVE-2026-42271 Exploited |
Not yet scored | BerriAI LiteLLM Operating systems & software |
BerriAI LiteLLM Command Injection Vulnerability | 8 Jun 2026 |
| CVE-2026-28318 Exploited |
Not yet scored | SolarWinds Serv-U Operating systems & software |
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 5 Jun 2026 |
| CVE-2026-45247 Exploited |
Not yet scored | Mirasvit Mirasvit Full Page Cache Warmer Applications & supply chain |
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 3 Jun 2026 |
| CVE-2022-0492 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Authentication Vulnerability | 2 Jun 2026 |
| CVE-2025-48595 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Integer Overflow Vulnerability | 2 Jun 2026 |
| CVE-2024-21182 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 1 Jun 2026 |
| CVE-2026-0257 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 29 May 2026 |
| CVE-2026-48027 Exploited |
Not yet scored | Nx Nx Console Operating systems & software |
Nx Console Embedded Malicious Code Vulnerability | 27 May 2026 |
| CVE-2026-45321 Exploited |
Not yet scored | TanStack TanStack Identity & access |
TanStack Unspecified Vulnerability | 27 May 2026 |
| CVE-2026-8398 Exploited |
Not yet scored | Daemon Daemon Tools Lite Operating systems & software |
Daemon Tools Lite Embedded Malicious Code Vulnerability | 27 May 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.