Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-33634 Exploited |
Not yet scored | Aquasecurity Trivy Cloud & SaaS |
Aquasecurity Trivy Embedded Malicious Code Vulnerability | 26 Mar 2026 |
| CVE-2026-33017 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Code Injection Vulnerability | 25 Mar 2026 |
| CVE-2025-32432 Exploited |
Not yet scored | Craft CMS Craft CMS Operating systems & software |
Craft CMS Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2025-54068 Exploited |
Not yet scored | Laravel Livewire Operating systems & software |
Laravel Livewire Code Injection Vulnerability | 20 Mar 2026 |
| CVE-2025-43510 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Improper Locking Vulnerability | 20 Mar 2026 |
| CVE-2025-43520 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Classic Buffer Overflow Vulnerability | 20 Mar 2026 |
| CVE-2025-31277 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Buffer Overflow Vulnerability | 20 Mar 2026 |
| CVE-2026-20131 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Cloud & SaaS |
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerabili… | 19 Mar 2026 |
| CVE-2025-66376 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | 18 Mar 2026 |
| CVE-2026-20963 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 18 Mar 2026 |
| CVE-2025-47813 Exploited |
Not yet scored | Wing FTP Server Wing FTP Server Operating systems & software |
Wing FTP Server Information Disclosure Vulnerability | 16 Mar 2026 |
| CVE-2026-3910 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 13 Mar 2026 |
| CVE-2026-3909 Exploited |
Not yet scored | Google Skia Operating systems & software |
Google Skia Out-of-Bounds Write Vulnerability | 13 Mar 2026 |
| CVE-2025-68613 Exploited |
Not yet scored | n8n n8n Operating systems & software |
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 11 Mar 2026 |
| CVE-2021-22054 Exploited |
Not yet scored | Omnissa Workspace One UEM Operating systems & software |
Omnissa Workspace ONE Server-Side Request Forgery | 9 Mar 2026 |
| CVE-2025-26399 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 9 Mar 2026 |
| CVE-2026-1603 Exploited |
Not yet scored | Ivanti Endpoint Manager (EPM) Network & security devices |
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 9 Mar 2026 |
| CVE-2021-22681 Exploited |
Not yet scored | Rockwell Multiple Products OT, ICS & IoT |
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | 5 Mar 2026 |
| CVE-2017-7921 Exploited |
Not yet scored | Hikvision Multiple Products Operating systems & software |
Hikvision Multiple Products Improper Authentication Vulnerability | 5 Mar 2026 |
| CVE-2023-43000 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple products Use-After-Free Vulnerability | 5 Mar 2026 |
| CVE-2021-30952 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 5 Mar 2026 |
| CVE-2023-41974 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Use-After-Free Vulnerability | 5 Mar 2026 |
| CVE-2026-22719 Exploited |
Not yet scored | Broadcom VMware Aria Operations Operating systems & software |
Broadcom VMware Aria Operations Command Injection Vulnerability | 3 Mar 2026 |
| CVE-2026-21385 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 3 Mar 2026 |
| CVE-2026-20127 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Controller and Manager Network & security devices |
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 25 Feb 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.