Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited onlyCheckedFix range storedEPSS

Reset

UnknownN-able N-central Incomplete Filtering of Special ElementsVuln · CVE-2026-86206 · N-able · N-central · CVE.org · FIRST EPSS · Nuclei Templates · N-ablePatch nowKEVEPSS 1.12%Sep 10, 2026
Critical9.8Check Point Multiple Products Improper Certificate Validation VulnerabilityVuln · CVE-2026-85102 · Check Point · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Check PointPatch nowKEVEPSS 54.14%Sep 9, 2026
UnknownN-able N-central Authentication Bypass by Primary WeaknessVuln · CVE-2026-86207 · N-able · N-central · CVE.org · FIRST EPSS · Nuclei Templates · N-ablePatch nowKEVEPSS 1.25%Sep 9, 2026
High8.8Google Chromium V8 Out of Bounds Write VulnerabilityVuln · CVE-2026-87491 · google · chrome · CISA KEV · CVE.org · FIRST EPSS · Chrome, GooglePatch nowKEVEPSS 3.51%Sep 8, 2026
High7.8Microsoft Windows Heap-Based Buffer Overflow VulnerabilityVuln · CVE-2026-85880 · microsoft · windows 10 1607 · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 0.39%Sep 8, 2026
High7.8Microsoft Windows Link Following VulnerabilityVuln · CVE-2026-81963 · microsoft · windows 11 23h2 · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 0.39%Sep 8, 2026
Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityVuln · CVE-2026-75650 · Cloudflare · Commerce and Magento · CISA KEV · Cloudflare WAF rules · CVE.org · Adobe, MagentoPatch nowKEVEPSS 3.95%Sep 7, 2026
Critical10.0N-able N-central Static Code Injection VulnerabilityVuln · CVE-2026-86218 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSS · N-ablePatch nowKEVEPSS 15.38%Sep 5, 2026
High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityVuln · CVE-2026-83549 · sonicwall · sma8200v · CISA KEV · CVE.org · FIRST EPSS · SonicWallPatch nowKEVEPSS 9.89%Sep 1, 2026
Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityVuln · CVE-2026-83548 · sonicwall · sma8200v · CISA KEV · CVE.org · FIRST EPSS · SonicWallPatch nowKEVEPSS 8.04%Sep 1, 2026
Critical9.8JFrog Artifactory Improper Authentication VulnerabilityVuln · CVE-2026-82329 · Cloudflare · artifactory · CISA KEV · Cloudflare WAF rules · CVE.org · JFrogPatch nowKEVEPSS 14.37%Aug 28, 2026
UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPVuln · CVE-2026-82222 · WordPress · WordPress · CVE.org · FIRST EPSS · Nuclei Templates · PHP, WordPressPatch nowKEVEPSS 2.25%Aug 28, 2026
Critical9.4PaperCut NG/MF Unsafe Reflection VulnerabilityVuln · CVE-2026-82078 · papercut · papercut mf · CISA KEV · CVE.org · FIRST EPSS · PaperCutPatch nowKEVEPSS 63.05%Aug 28, 2026
High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityVuln · CVE-2026-81578 · papercut · papercut mf · CISA KEV · CVE.org · FIRST EPSS · PaperCutPatch nowKEVEPSS 84.73%Aug 28, 2026
UnknownImproper Verification of Cryptographic SignatureVuln · CVE-2026-76581 · wpmudev · WPMU DEV Dashboard · CVE.org · FIRST EPSS · ThreatFox · WordPressPatch nowKEVEPSS 0.43%Aug 27, 2026
UnknownWeak Password Recovery Mechanism for Forgotten PasswordVuln · CVE-2026-19632 · cozmoslabs · TranslatePress – Translate Multilingual sites with AI Translation · CVE.org · FIRST EPSS · urlscan.io · WordPressPatch nowKEVEPSS 4.50%Aug 25, 2026
UnknownRed Hat build_of_keycloak Weak Password Recovery Mechanism for Forgotten PasswordVuln · CVE-2026-18963 · Red Hat · build_of_keycloak · CVE.org · FIRST EPSS · Exploit Database · Keycloak, Red HatPatch nowKEVEPSS 4.68%Aug 25, 2026
Critical9.3Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityVuln · CVE-2026-19490 · citrix · netscaler application delivery controller · CISA KEV · CVE.org · FIRST EPSS · CitrixPatch nowKEVEPSS 32.65%Aug 19, 2026
Critical9.8Gitea Code Injection VulnerabilityVuln · CVE-2026-60004 · gitea · gitea · Canadian Centre for Cyber Security · CISA KEV · CVE.orgPatch nowKEVEPSS 23.99%Aug 19, 2026
Critical9.1GitLab GitLab Improper Control of Generation of Code ('Code Injection')Vuln · CVE-2026-19478 · gitlab · gitlab · CVE.org · FIRST EPSS · GitLab Security Releases · GitLabPatch nowKEVEPSS 2.15%Aug 17, 2026
Unknownpodsfoundation pods Incorrect AuthorizationVuln · CVE-2026-19598 · sc0ttkclark · Pods – Custom Content Types and Fields · CVE.org · FIRST EPSS · urlscan.io · WordPressPatch nowKEVEPSS 2.30%Aug 15, 2026
High8.9Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityVuln · CVE-2026-73570 · synacor · zimbra collaboration suite · CISA KEV · CVE.org · FIRST EPSS · ZimbraPatch nowKEVEPSS 71.66%Aug 13, 2026
High7.5JFrog Artifactory Improper Authentication VulnerabilityVuln · CVE-2026-42018 · Cloudflare · artifactory · CISA KEV · Cloudflare WAF rules · CVE.org · JFrogPatch nowKEVEPSS 9.80%Aug 12, 2026
High8.8Microsoft SharePoint Code Injection VulnerabilityVuln · CVE-2026-65660 · Microsoft · SharePoint · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SharePointPatch nowKEVEPSS 8.19%Aug 11, 2026
High7.0Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityVuln · CVE-2026-68820 · microsoft · windows 10 1607 · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsPatch nowKEVEPSS 8.57%Aug 11, 2026

Sort