Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2025-55182 Exploited |
Not yet scored | Meta React Server Components Operating systems & software |
Meta React Server Components Remote Code Execution Vulnerability | 5 Dec 2025 |
| CVE-2021-26828 Exploited |
Not yet scored | OpenPLC ScadaBR OT, ICS & IoT |
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | 3 Dec 2025 |
| CVE-2025-48633 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Information Disclosure Vulnerability | 2 Dec 2025 |
| CVE-2025-48572 Exploited |
Not yet scored | Android Framework Operating systems & software |
Android Framework Privilege Escalation Vulnerability | 2 Dec 2025 |
| CVE-2021-26829 Exploited |
Not yet scored | OpenPLC ScadaBR OT, ICS & IoT |
OpenPLC ScadaBR Cross-site Scripting Vulnerability | 28 Nov 2025 |
| CVE-2025-61757 Exploited |
Not yet scored | Oracle Fusion Middleware Identity & access |
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 21 Nov 2025 |
| CVE-2025-13223 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 19 Nov 2025 |
| CVE-2025-58034 Exploited |
Not yet scored | Fortinet FortiWeb Network & security devices |
Fortinet FortiWeb OS Command Injection Vulnerability | 18 Nov 2025 |
| CVE-2025-64446 Exploited |
Not yet scored | Fortinet FortiWeb Network & security devices |
Fortinet FortiWeb Path Traversal Vulnerability | 14 Nov 2025 |
| CVE-2025-12480 Exploited |
Not yet scored | Gladinet Triofox Operating systems & software |
Gladinet Triofox Improper Access Control Vulnerability | 12 Nov 2025 |
| CVE-2025-62215 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Race Condition Vulnerability | 12 Nov 2025 |
| CVE-2025-9242 Exploited |
Not yet scored | WatchGuard Firebox Operating systems & software |
WatchGuard Firebox Out-of-Bounds Write Vulnerability | 12 Nov 2025 |
| CVE-2025-21042 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 10 Nov 2025 |
| CVE-2025-48703 Exploited |
Not yet scored | CWP Control Web Panel Operating systems & software |
CWP Control Web Panel OS Command Injection Vulnerability | 4 Nov 2025 |
| CVE-2025-11371 Exploited |
Not yet scored | Gladinet CentreStack and Triofox Operating systems & software |
Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability | 4 Nov 2025 |
| CVE-2025-41244 Exploited |
Not yet scored | Broadcom VMware Aria Operations and VMware Tools Operating systems & software |
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | 30 Oct 2025 |
| CVE-2025-24893 Exploited |
Not yet scored | XWiki Platform Operating systems & software |
XWiki Platform Eval Injection Vulnerability | 30 Oct 2025 |
| CVE-2025-6204 Exploited |
Not yet scored | Dassault Systèmes DELMIA Apriso Operating systems & software |
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | 28 Oct 2025 |
| CVE-2025-6205 Exploited |
Not yet scored | Dassault Systèmes DELMIA Apriso Operating systems & software |
Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | 28 Oct 2025 |
| CVE-2025-54236 Exploited |
Not yet scored | Adobe Commerce and Magento Applications & supply chain |
Adobe Commerce and Magento Improper Input Validation Vulnerability | 24 Oct 2025 |
| CVE-2025-59287 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | 24 Oct 2025 |
| CVE-2025-61932 Exploited |
Not yet scored | Motex LANSCOPE Endpoint Manager Operating systems & software |
Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | 22 Oct 2025 |
| CVE-2025-61884 Exploited |
Not yet scored | Oracle E-Business Suite Operating systems & software |
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | 20 Oct 2025 |
| CVE-2022-48503 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Unspecified Vulnerability | 20 Oct 2025 |
| CVE-2025-2746 Exploited |
Not yet scored | Kentico Xperience CMS Operating systems & software |
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 20 Oct 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.