Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-1731 Exploited |
Not yet scored | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) Operating systems & software |
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 13 Feb 2026 |
| CVE-2026-20700 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Buffer Overflow Vulnerability | 12 Feb 2026 |
| CVE-2024-43468 Exploited |
Not yet scored | Microsoft Configuration Manager Applications & supply chain |
Microsoft Configuration Manager SQL Injection Vulnerability | 12 Feb 2026 |
| CVE-2025-15556 Exploited |
Not yet scored | Notepad++ Notepad++ Operating systems & software |
Notepad++ Download of Code Without Integrity Check Vulnerability | 12 Feb 2026 |
| CVE-2025-40536 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Security Control Bypass Vulnerability | 12 Feb 2026 |
| CVE-2026-21514 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 10 Feb 2026 |
| CVE-2026-21513 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 10 Feb 2026 |
| CVE-2026-21525 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows NULL Pointer Dereference Vulnerability | 10 Feb 2026 |
| CVE-2026-21510 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 10 Feb 2026 |
| CVE-2026-21533 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Improper Privilege Management Vulnerability | 10 Feb 2026 |
| CVE-2026-21519 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Type Confusion Vulnerability | 10 Feb 2026 |
| CVE-2025-11953 Exploited |
Not yet scored | React Native Community CLI Operating systems & software |
React Native Community CLI OS Command Injection Vulnerability | 5 Feb 2026 |
| CVE-2026-24423 Exploited |
Not yet scored | SmarterTools SmarterMail Applications & supply chain |
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability | 5 Feb 2026 |
| CVE-2021-39935 Exploited |
Not yet scored | GitLab Community and Enterprise Editions Applications & supply chain |
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | 3 Feb 2026 |
| CVE-2025-64328 Exploited |
Not yet scored | Sangoma FreePBX Operating systems & software |
Sangoma FreePBX OS Command Injection Vulnerability | 3 Feb 2026 |
| CVE-2019-19006 Exploited |
Not yet scored | Sangoma FreePBX Operating systems & software |
Sangoma FreePBX Improper Authentication Vulnerability | 3 Feb 2026 |
| CVE-2025-40551 Exploited |
Not yet scored | SolarWinds Web Help Desk Operating systems & software |
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | 3 Feb 2026 |
| CVE-2026-1281 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 29 Jan 2026 |
| CVE-2026-24858 Exploited |
Not yet scored | Fortinet Multiple Products Identity & access |
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 27 Jan 2026 |
| CVE-2018-14634 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Integer Overflow Vulnerability | 26 Jan 2026 |
| CVE-2025-52691 Exploited |
Not yet scored | SmarterTools SmarterMail Operating systems & software |
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | 26 Jan 2026 |
| CVE-2026-23760 Exploited |
Not yet scored | SmarterTools SmarterMail Applications & supply chain |
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability | 26 Jan 2026 |
| CVE-2026-24061 Exploited |
Not yet scored | GNU InetUtils Operating systems & software |
GNU InetUtils Argument Injection Vulnerability | 26 Jan 2026 |
| CVE-2026-21509 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Security Feature Bypass Vulnerability | 26 Jan 2026 |
| CVE-2024-37079 Exploited |
Not yet scored | Broadcom VMware vCenter Server Operating systems & software |
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | 23 Jan 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.