Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-72529 Exploited |
Not yet scored | TrueConf Server Operating systems & software |
TrueConf Server Missing Authentication for Critical Function Vulnerability | 20 Aug 2026 |
| CVE-2026-64849 Exploited |
Not yet scored | MLflow MLflow Cloud & SaaS |
MLflow Server-Side Request Forgery Vulnerability | 19 Aug 2026 |
| CVE-2026-55040 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Weak Authentication Vulnerability | 18 Aug 2026 |
| CVE-2026-33824 Exploited |
Not yet scored | Microsoft Internet Key Exchange (IKE) Service Extensions Operating systems & software |
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 18 Aug 2026 |
| CVE-2026-59310 Exploited |
Not yet scored | Broadcom VMware vCenter Operating systems & software |
Broadcom VMware vCenter Path Traversal Vulnerability | 18 Aug 2026 |
| CVE-2026-65400 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Improper Authentication Vulnerability | 18 Aug 2026 |
| CVE-2025-62593 Exploited |
Not yet scored | Ray-Project Ray Operating systems & software |
Ray-Project Ray Code Injection Vulnerability | 17 Aug 2026 |
| CVE-2026-20349 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Network & security devices |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 11 Aug 2026 |
| CVE-2026-68820 Exploited |
Not yet scored | Microsoft Windows Ancillary Function Driver for WinSock Operating systems & software |
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 11 Aug 2026 |
| CVE-2026-72898 Exploited |
Not yet scored | Metabase Metabase Applications & supply chain |
Metabase SQL Injection Vulnerability | 11 Aug 2026 |
| CVE-2026-8037 Exploited |
Not yet scored | Progress LoadMaster Operating systems & software |
Progress LoadMaster Command Injection Vulnerability | 7 Aug 2026 |
| CVE-2026-63077 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 5 Aug 2026 |
| CVE-2026-18556 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 4 Aug 2026 |
| CVE-2026-34486 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 4 Aug 2026 |
| CVE-2026-9198 Exploited |
Not yet scored | IBM Langflow Operating systems & software |
IBM Langflow Code Injection Vulnerability | 4 Aug 2026 |
| CVE-2026-18577 Exploited |
Not yet scored | N-able N-central Identity & access |
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 3 Aug 2026 |
| CVE-2026-20316 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Network & security devices |
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 29 Jul 2026 |
| CVE-2026-16812 Exploited |
Not yet scored | Arista VeloCloud Orchestrator Operating systems & software |
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 27 Jul 2026 |
| CVE-2025-68686 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 27 Jul 2026 |
| CVE-2026-16232 Exploited |
Not yet scored | Check Point SmartConsole Network & security devices |
Check Point SmartConsole Improper Authentication Vulnerability | 22 Jul 2026 |
| CVE-2026-50522 Exploited |
Not yet scored | Microsoft SharePoint Operating systems & software |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 22 Jul 2026 |
| CVE-2026-60137 Exploited |
Not yet scored | WordPress Core Applications & supply chain |
WordPress Core SQL Injection Vulnerability | 21 Jul 2026 |
| CVE-2026-63030 Exploited |
Not yet scored | WordPress Core Applications & supply chain |
WordPress Core Interpretation Conflict Vulnerability | 21 Jul 2026 |
| CVE-2026-0770 Exploited |
Not yet scored | Langflow Langflow Operating systems & software |
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 21 Jul 2026 |
| CVE-2021-27137 Exploited |
Not yet scored | DD-WRT DD-WRT Operating systems & software |
DD-WRT Stack-Based Buffer Overflow Vulnerability | 21 Jul 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.