BlackTreeCVE Intelligence
Crawlable CVE archiveNewest records firstCanonical reports with source provenance
CISA Known Exploited Vulnerabilities

Vulnerabilities exploited in the wild

Start with CVEs confirmed in CISA KEV. Browse the newest additions or compare the last 30 days by FIRST EPSS probability. Confirmation and forecast remain separate signals.

Priority discovery hub

Newest confirmed exploitation

1,756 current KEV records. Showing 50.

  1. CVE-2026-114625 ↗Arista VeloCloud Orchestrator SQL Injection VulnerabilityArista · VeloCloud OrchestratorAdded to KEV 23 Oct 2026 · remediation due 26 Oct 2026 · Critical · CVSS 9.4
  2. CVE-2026-110447 ↗Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCollabora · Collabora Online – Built-in CODE ServerAdded to KEV 23 Oct 2026 · remediation due 26 Oct 2026 · Critical · CVSS 9.2
  3. CVE-2026-110936 ↗Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens · Software CenterAdded to KEV 20 Oct 2026 · remediation due 3 Nov 2026 · High · CVSS 8.4
  4. CVE-2026-106931 ↗EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions · SiteGuard Server EditionAdded to KEV 20 Oct 2026 · remediation due 23 Oct 2026 · High · CVSS 8.5
  5. CVE-2026-96656 ↗Plex Media Server External Control of File Name or Path VulnerabilityPlex · Media ServerAdded to KEV 20 Oct 2026 · remediation due 23 Oct 2026 · High · CVSS 8.6
  6. CVE-2026-96655 ↗Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex · Media ServerAdded to KEV 20 Oct 2026 · remediation due 3 Nov 2026 · Medium · CVSS 5.3
  7. CVE-2026-96654 ↗Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityPlex · Media ServerAdded to KEV 20 Oct 2026 · remediation due 23 Oct 2026 · Medium · CVSS 6.9
  8. CVE-2026-96652 ↗Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex · Media ServerAdded to KEV 20 Oct 2026 · remediation due 3 Nov 2026 · Medium · CVSS 5.3
  9. CVE-2026-102764 ↗BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityBeyondTrust · Remote SupportAdded to KEV 16 Oct 2026 · remediation due 19 Oct 2026 · Critical · CVSS 9.3
  10. CVE-2025-61624 ↗Fortinet Multiple Products Path Traversal VulnerabilityFortinet · Multiple ProductsAdded to KEV 16 Oct 2026 · remediation due 19 Oct 2026 · Medium · CVSS 5.4
  11. CVE-2026-21589 ↗Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityAtlassian · Multiple ProductsAdded to KEV 15 Oct 2026 · remediation due 18 Oct 2026 · Critical · CVSS 9.3
  12. CVE-2026-0322 ↗Palo Alto Networks PAN-OS Code Injection VulnerabilityPalo Alto Networks · PAN-OSAdded to KEV 14 Oct 2026 · remediation due 17 Oct 2026 · High · CVSS 8.6
  13. CVE-2026-76519 ↗Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCisco · Secure Email GatewayAdded to KEV 14 Oct 2026 · remediation due 17 Oct 2026 · Critical · CVSS 9.8
  14. CVE-2026-105134 ↗Ahsay AhsayCBS Command Injection VulnerabilityAhsay · AhsayCBSAdded to KEV 14 Oct 2026 · remediation due 17 Oct 2026 · Critical · CVSS 10.0
  15. CVE-2026-105133 ↗Ahsay AhsayCBS Improper Authentication VulnerabilityAhsay · AhsayCBSAdded to KEV 14 Oct 2026 · remediation due 17 Oct 2026 · Medium · CVSS 6.9
  16. CVE-2026-96951 ↗Microsoft Windows Command Injection VulnerabilityMicrosoft · WindowsAdded to KEV 13 Oct 2026 · remediation due 16 Oct 2026 · High · CVSS 8.8
  17. CVE-2026-104935 ↗Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityIvanti · Connect SecureAdded to KEV 13 Oct 2026 · remediation due 16 Oct 2026 · High · CVSS 8.6
  18. CVE-2023-22894 ↗Strapi Cleartext Storage of Sensitive Information VulnerabilityStrapi · StrapiAdded to KEV 8 Oct 2026 · remediation due 11 Oct 2026 · Medium · CVSS 4.9
  19. CVE-2021-3199 ↗ONLYOFFICE Docs Server Path Traversal VulnerabilityONLYOFFICE · DocsAdded to KEV 8 Oct 2026 · remediation due 11 Oct 2026 · Critical · CVSS 9.8
  20. CVE-2016-3081 ↗Apache Struts Command Injection VulnerabilityApache · StrutsAdded to KEV 8 Oct 2026 · remediation due 11 Oct 2026 · High · CVSS 8.1
  21. CVE-2015-5477 ↗ ISC BIND Data Processing Errors VulnerabilityISC · BINDAdded to KEV 8 Oct 2026 · remediation due 11 Oct 2026 · High · CVSS 7.5
  22. CVE-2015-3306 ↗ProFTPD Improper Access Control VulnerabilityProFTPD · ProFTPDAdded to KEV 8 Oct 2026 · remediation due 11 Oct 2026 · Critical · CVSS 10.0
  23. CVE-2026-88779 ↗Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix · NetScalerAdded to KEV 4 Oct 2026 · remediation due 7 Oct 2026 · High · CVSS 8.7
  24. CVE-2026-102490 ↗Zammad GmbH Zammad Improper Privilege Management VulnerabilityZammad GmbH · ZammadAdded to KEV 2 Oct 2026 · remediation due 5 Oct 2026 · High · CVSS 8.5
  25. CVE-2026-102489 ↗Zammad GmbH Zammad Session Fixation VulnerabilityZammad GmbH · ZammadAdded to KEV 2 Oct 2026 · remediation due 5 Oct 2026 · High · CVSS 8.7
  26. CVE-2026-104286 ↗Fortinet FortiMail Path Traversal VulnerabilityFortinet · FortiMailAdded to KEV 1 Oct 2026 · remediation due 4 Oct 2026 · Critical · CVSS 9.8
  27. CVE-2026-76504 ↗Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCisco · Catalyst SD-WAN ManagerAdded to KEV 30 Sept 2026 · remediation due 3 Oct 2026 · Critical · CVSS 9.8
  28. CVE-2026-86950 ↗Apple Multiple Products Out-of-Bounds Write VulnerabilityApple · Multiple ProductsAdded to KEV 29 Sept 2026 · remediation due 13 Oct 2026 · High · CVSS 8.8
  29. CVE-2026-88772 ↗Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix · NetScalerAdded to KEV 27 Sept 2026 · remediation due 30 Sept 2026 · Critical · CVSS 9.5
  30. CVE-2026-88771 ↗Citrix NetScaler Improper Input Validation VulnerabilityCitrix · NetScalerAdded to KEV 27 Sept 2026 · remediation due 30 Sept 2026 · Critical · CVSS 9.5
  31. CVE-2026-87902 ↗WordPress Core Remote File Inclusion VulnerabilityWordPress · CoreAdded to KEV 25 Sept 2026 · remediation due 28 Sept 2026 · High · CVSS 8.1
  32. CVE-2026-67279 ↗Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityMikrotik · RouterOSAdded to KEV 25 Sept 2026 · remediation due 28 Sept 2026 · Medium · CVSS 6.9
  33. CVE-2026-65660 ↗Microsoft SharePoint Code Injection VulnerabilityMicrosoft · SharePointAdded to KEV 25 Sept 2026 · remediation due 28 Sept 2026 · High · CVSS 8.8
  34. CVE-2026-71362 ↗Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe · Commerce and MagentoAdded to KEV 24 Sept 2026 · remediation due 27 Sept 2026 · Critical · CVSS 9.1
  35. CVE-2026-5430 ↗WSO2 Multiple Products Path Traversal Vulnerability WSO2 · Multiple ProductsAdded to KEV 24 Sept 2026 · remediation due 27 Sept 2026 · Critical · CVSS 10.0
  36. CVE-2026-94127 ↗F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityF5 · BIG-IP APMAdded to KEV 22 Sept 2026 · remediation due 25 Sept 2026 · Critical · CVSS 9.3
  37. CVE-2026-93616 ↗Check Point Multiple Products Path Traversal VulnerabilityCheck Point · Multiple ProductsAdded to KEV 22 Sept 2026 · remediation due 25 Sept 2026 · Critical · CVSS 9.8
  38. CVE-2026-93952 ↗Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityArista · VeloCloud OrchestratorAdded to KEV 22 Sept 2026 · remediation due 25 Sept 2026 · Critical · CVSS 9.5
  39. CVE-2026-85102 ↗Check Point Multiple Products Improper Certificate Validation VulnerabilityCheck Point · Multiple ProductsAdded to KEV 22 Sept 2026 · remediation due 25 Sept 2026 · Critical · CVSS 9.8
  40. CVE-2026-7273 ↗Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityZyxel · GS1900 Series SwitchesAdded to KEV 21 Sept 2026 · remediation due 24 Sept 2026 · High · CVSS 8.8
  41. CVE-2026-53266 ↗Linux Kernel Out-of-Bounds Write VulnerabilityLinux · KernelAdded to KEV 18 Sept 2026 · remediation due 21 Sept 2026 · High · CVSS 8.8
  42. CVE-2025-39964 ↗Linux Kernel Race Condition VulnerabilityLinux · KernelAdded to KEV 18 Sept 2026 · remediation due 21 Sept 2026 · High · CVSS 7.8
  43. CVE-2025-39682 ↗Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityLinux · KernelAdded to KEV 18 Sept 2026 · remediation due 21 Sept 2026 · Critical · CVSS 9.8
  44. CVE-2026-87886 ↗Acronis Backup Incorrect Default Permissions VulnerabilityAcronis · BackupAdded to KEV 16 Sept 2026 · remediation due 19 Sept 2026 · High · CVSS 7.8
  45. CVE-2026-76460 ↗Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCisco · Identity Services EngineAdded to KEV 16 Sept 2026 · remediation due 19 Sept 2026 · Critical · CVSS 10.0
  46. CVE-2026-58704 ↗Google Pixel Improper Authorization VulnerabilityGoogle · PixelAdded to KEV 16 Sept 2026 · remediation due 19 Sept 2026 · High · CVSS 8.8
  47. CVE-2026-76461 ↗Cisco Secure Email Gateway SQL Injection VulnerabilityCisco · Secure Email GatewayAdded to KEV 14 Sept 2026 · remediation due 17 Sept 2026 · Critical · CVSS 9.8
  48. CVE-2026-85706 ↗GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityGitLab · Community Edition and Enterprise EditionAdded to KEV 11 Sept 2026 · remediation due 14 Sept 2026 · Critical · CVSS 10.0
  49. CVE-2026-84869 ↗ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityConnectWise · ScreenConnectAdded to KEV 11 Sept 2026 · remediation due 14 Sept 2026 · Critical · CVSS 9.9
  50. CVE-2026-42018 ↗JFrog Artifactory Improper Authentication Vulnerabilityjfrog · artifactoryAdded to KEV 11 Sept 2026 · remediation due 25 Sept 2026 · High · CVSS 7.5