Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.6Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCVE-2026-104935 · Ivanti · Connect Secure · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · CISA KEV · IvantiKEVEPSS 26.0%Oct 13, 2026
Critical9.8In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Pr…CVE-2026-76268 · splunk · splunk · CVE.org · FIRST EPSS · Nuclei Templates · SplunkEPSS 0.4%Oct 7, 2026
High8.1WordPress Core Remote File Inclusion VulnerabilityCVE-2026-87902 · WordPress · WordPress · CISA KEV · CVE.org · FIRST EPSS · WordPressKEVEPSS 40.0%Sep 22, 2026
Critical9.8Check Point Multiple Products Path Traversal VulnerabilityCVE-2026-93616 · Check Point · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · Check PointKEVEPSS 75.9%Sep 22, 2026
Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityCVE-2026-85706 · GitLab · GitLab · CISA KEV · CVE.org · FIRST EPSS · GitLabKEVEPSS 93.0%Sep 11, 2026
Critical10.0N-able N-central Static Code Injection VulnerabilityCVE-2026-86218 · N-able · N-central · CISA KEV · CVE.org · FIRST EPSS · N-ableKEVEPSS 13.3%Sep 5, 2026
Critical9.8JFrog Artifactory Improper Authentication VulnerabilityCVE-2026-82329 · JFrog · Artifactory · CISA KEV · CVE.org · FIRST EPSS · JFrogKEVEPSS 14.1%Aug 28, 2026
UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPCVE-2026-82222 · WordPress · WordPress · Nuclei Templates · Patchstack Database · PHP, WordPressAug 28, 2026
High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityCVE-2026-81578 · PaperCut · NG/MF · CISA KEV · CVE.org · FIRST EPSS · PaperCutKEVEPSS 85.6%Aug 28, 2026
Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.CVE-2026-76904 · CVE.org · FIRST EPSS · Nuclei TemplatesEPSS 4.0%Aug 21, 2026
Critical9.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.CVE-2026-77806 · CVE.org · Nuclei Templates · NIST NVDAug 21, 2026
Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityCVE-2026-71362 · Adobe · Commerce and Magento · CISA KEV · CVE.org · FIRST EPSS · Adobe, MagentoKEVEPSS 87.5%Aug 11, 2026
Critical10.0Metabase SQL Injection VulnerabilityCVE-2026-72898 · Metabase · Metabase · CISA KEV · CVE.org · FIRST EPSS · MetabaseKEVEPSS 97.3%Aug 10, 2026
UnknownCVE-2026-93674 has a public Nuclei detection template.CVE-2026-93674 · Nuclei TemplatesUnknown date
UnknownCVE-2026-91136 has a public Nuclei detection template.CVE-2026-91136 · Nuclei TemplatesUnknown date
UnknownCVE-2026-90898 has a public Nuclei detection template.CVE-2026-90898 · Nuclei TemplatesUnknown date
UnknownCVE-2026-89063 has a public Nuclei detection template.CVE-2026-89063 · Nuclei TemplatesUnknown date
UnknownCVE-2026-89013 has a public Nuclei detection template.CVE-2026-89013 · Nuclei TemplatesUnknown date
UnknownCVE-2026-88062 has a public Nuclei detection template.CVE-2026-88062 · Nuclei TemplatesUnknown date
UnknownCVE-2026-87820 has a public Nuclei detection template.CVE-2026-87820 · Nuclei TemplatesUnknown date
UnknownCVE-2026-86426 has a public Nuclei detection template.CVE-2026-86426 · Nuclei TemplatesUnknown date
UnknownCVE-2026-86242 has a public Nuclei detection template.CVE-2026-86242 · Nuclei TemplatesUnknown date
UnknownCVE-2026-86207 has a public Nuclei detection template.CVE-2026-86207 · Nuclei TemplatesUnknown date
UnknownCVE-2026-86206 has a public Nuclei detection template.CVE-2026-86206 · Nuclei TemplatesUnknown date
UnknownCVE-2026-85688 has a public Nuclei detection template.CVE-2026-85688 · Nuclei TemplatesUnknown date