Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-93952 Exploited |
Not yet scored | Arista VeloCloud Orchestrator Operating systems & software |
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 22 Sep 2026 |
| CVE-2026-7273 Exploited |
Not yet scored | Zyxel GS1900 Series Switches Network & security devices |
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 21 Sep 2026 |
| CVE-2025-39682 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 18 Sep 2026 |
| CVE-2025-39964 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Race Condition Vulnerability | 18 Sep 2026 |
| CVE-2026-53266 Exploited |
Not yet scored | Linux Kernel Hardware & firmware |
Linux Kernel Out-of-Bounds Write Vulnerability | 18 Sep 2026 |
| CVE-2026-58704 Exploited |
Not yet scored | Google Pixel Operating systems & software |
Google Pixel Improper Authorization Vulnerability | 16 Sep 2026 |
| CVE-2026-76460 Exploited |
Not yet scored | Cisco Identity Services Engine Identity & access |
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 16 Sep 2026 |
| CVE-2026-87886 Exploited |
Not yet scored | Acronis Backup Applications & supply chain |
Acronis Backup Incorrect Default Permissions Vulnerability | 16 Sep 2026 |
| CVE-2026-76461 Exploited |
Not yet scored | Cisco Secure Email Gateway Network & security devices |
Cisco Secure Email Gateway SQL Injection Vulnerability | 14 Sep 2026 |
| CVE-2026-42018 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Improper Authentication Vulnerability | 11 Sep 2026 |
| CVE-2026-85706 Exploited |
Not yet scored | GitLab Community Edition and Enterprise Edition Applications & supply chain |
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 11 Sep 2026 |
| CVE-2026-84869 Exploited |
Not yet scored | ConnectWise ScreenConnect Operating systems & software |
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 11 Sep 2026 |
| CVE-2026-42016 Exploited |
Not yet scored | JFrog Artifactory Operating systems & software |
JFrog Artifactory Incorrect Authorization Vulnerability | 11 Sep 2026 |
| CVE-2026-86060 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | 10 Sep 2026 |
| CVE-2026-67277 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | 10 Sep 2026 |
| CVE-2026-87491 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out of Bounds Write Vulnerability | 9 Sep 2026 |
| CVE-2026-20079 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cloud & SaaS |
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9 Sep 2026 |
| CVE-2026-19490 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9 Sep 2026 |
| CVE-2025-25249 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 9 Sep 2026 |
| CVE-2026-75650 Exploited |
Not yet scored | Adobe Commerce and Magento Applications & supply chain |
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 8 Sep 2026 |
| CVE-2026-81963 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Link Following Vulnerability | 8 Sep 2026 |
| CVE-2026-86218 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Static Code Injection Vulnerability | 8 Sep 2026 |
| CVE-2026-85880 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 8 Sep 2026 |
| CVE-2026-85046 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 4 Sep 2026 |
| CVE-2026-83548 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2 Sep 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.