CVERadar

CVEs: Exploited in the wild, page 5

664 CVEs listed as exploited in the wild by CISA KEV or VulnCheck KEV, sorted by threat level then EPSS. Showing 481-600. Use search to combine filters.

CRITICAL 9.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-102489

Zammad GmbH Zammad Session Fixation Vulnerability

Zammad GmbH · Zammad · EPSS 1.26% · Threat 62
CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-59374

ASUS Live Update Embedded Malicious Code Vulnerability

ASUS · Live Update · EPSS 1.20% · Threat 62
CRITICAL 9.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-102764

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

BeyondTrust · Remote Support · EPSS 1.18% · Threat 62
CRITICAL 9.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-8398

Daemon Tools Lite Embedded Malicious Code Vulnerability

Daemon · Daemon Tools Lite · EPSS 0.96% · Threat 62
CRITICAL 9.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-114625

Arista VeloCloud Orchestrator SQL Injection Vulnerability

Arista · VeloCloud Orchestrator · EPSS 0.81% · Threat 62
CRITICAL 9.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-102490

Zammad GmbH Zammad Improper Privilege Management Vulnerability

Zammad GmbH · Zammad · EPSS 0.55% · Threat 62
MEDIUM 5.4
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-24054

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Microsoft · Windows · EPSS 62.27% · Threat 61
MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-32201

Microsoft SharePoint Server Improper Input Validation Vulnerability

Microsoft · SharePoint Server · EPSS 43.38% · Threat 61
HIGH 7.5
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-30397

Microsoft Windows Scripting Engine Type Confusion Vulnerability

Microsoft · Windows · EPSS 27.26% · Threat 61
HIGH 8.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-22719

Broadcom VMware Aria Operations Command Injection Vulnerability

Broadcom · VMware Aria Operations · EPSS 18.32% · Threat 61
HIGH 8.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-44207

Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

Acclaim Systems · USAHERDS · EPSS 17.58% · Threat 61
HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-5419

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Google · Chromium V8 · EPSS 7.82% · Threat 61
HIGH 8.2Ransomware
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-22225

VMware ESXi Arbitrary Write Vulnerability

VMware · ESXi · EPSS 1.02% · Threat 61
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2012-1854

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

Microsoft · Visual Basic for Applications (VBA) · EPSS 20.87% · Threat 60
HIGH 8.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-18577

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able · N-central · EPSS 14.62% · Threat 60
HIGH 8.1
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-6554

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · EPSS 14.14% · Threat 60
HIGH 7.2Ransomware
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-15410

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall · SMA1000 Appliances · EPSS 11.79% · Threat 60
HIGH 8.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-25108

Soliton Systems K.K FileZen OS Command Injection Vulnerability

Soliton Systems K.K · FileZen · EPSS 5.25% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-13223

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · EPSS 4.90% · Threat 60
HIGH 7.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-60710

Microsoft Windows Link Following Vulnerability

Microsoft · Windows · EPSS 4.61% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-43000

Apple Multiple products Use-After-Free Vulnerability

Apple · Multiple Products · EPSS 4.04% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-20953

Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

Oracle · Agile Product Lifecycle Management (PLM) · EPSS 3.93% · Threat 60
HIGH 7.8Ransomware
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-43226

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows · EPSS 3.28% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2022-48503

Apple Multiple Products Unspecified Vulnerability

Apple · Multiple Products · EPSS 3.21% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-87491

Google Chromium V8 Out of Bounds Write Vulnerability

Google · Chromium V8 · EPSS 3.14% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-7273

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

Zyxel · GS1900 Series Switches · EPSS 2.50% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-11645

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Google · Chromium V8 · EPSS 2.44% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-3909

Google Skia Out-of-Bounds Write Vulnerability

Google · Skia · EPSS 2.34% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-65660

Microsoft SharePoint Code Injection Vulnerability

Microsoft · SharePoint · EPSS 2.10% · Threat 60
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-27920

Srimax Output Messenger Directory Traversal Vulnerability

Srimax · Output Messenger · EPSS 1.86% · Threat 60
HIGH 8.3
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-2783

Google Chromium Mojo Sandbox Escape Vulnerability

Google · Chromium Mojo · EPSS 9.24% · Threat 59
HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-30154

reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

reviewdog · action-setup GitHub Action · EPSS 2.48% · Threat 59
HIGH 8.7
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-3928

Commvault Web Server Unspecified Vulnerability

Commvault · Web Server · EPSS 2.48% · Threat 59
HIGH 8.6
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-34621

Adobe Acrobat and Reader Prototype Pollution Vulnerability

Adobe · Acrobat and Reader · EPSS 2.18% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-31277

Apple Multiple Products Buffer Overflow Vulnerability

Apple · Multiple Products · EPSS 1.66% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-67277

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

MikroTik · RouterOS · EPSS 1.56% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96951

Microsoft Windows Command Injection Vulnerability

Microsoft · Windows · EPSS 1.51% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-86950

Apple Multiple Products Out-of-Bounds Write Vulnerability

Apple · Multiple Products · EPSS 1.24% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-3910

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Google · Chromium V8 · EPSS 1.07% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-8452

Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix · NetScaler ADC and NetScaler Gateway · EPSS 1.01% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-59822

BerriAI LiteLLM Improper Authentication Vulnerability

BerriAI · LiteLLM · EPSS 0.84% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-53266

Linux Kernel Out-of-Bounds Write Vulnerability

Linux · Kernel · EPSS 0.83% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-5281

Google Dawn Use-After-Free Vulnerability

Google · Dawn · EPSS 0.70% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48543

Android Runtime Use-After-Free Vulnerability

Android · Runtime · EPSS 0.63% · Threat 59
HIGH 8.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-88779

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix · NetScaler · EPSS 0.59% · Threat 59
HIGH 8.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-58704

Google Pixel Improper Authorization Vulnerability

Google · Pixel · EPSS 0.59% · Threat 59
HIGH 7.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-33825

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Microsoft · Defender · EPSS 0.40% · Threat 59
HIGH 7.8
Exploited in the wild · CISA KEVExploit-DBATT&CK inferred
CVE-2018-14634

Linux Kernel Integer Overflow Vulnerability

Linux · Kernel · EPSS 14.69% · Threat 58
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2022-20775

Cisco SD-WAN Path Traversal Vulnerability

Cisco · SD-WAN · EPSS 12.47% · Threat 58
HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-36424

Microsoft Windows Out-of-Bounds Read Vulnerability

Microsoft · Windows · EPSS 12.09% · Threat 58
HIGH 8.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-18556

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able · N-central · EPSS 7.88% · Threat 58
HIGH 8.4
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48595

Android Framework Integer Overflow Vulnerability

Android · Framework · EPSS 1.71% · Threat 58
HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-0322

Palo Alto Networks PAN-OS Code Injection Vulnerability

Palo Alto Networks · PAN-OS · EPSS 1.21% · Threat 58
HIGH 8.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-106931

EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

EG Secure Solutions · SiteGuard Server Edition · EPSS 1.17% · Threat 58
HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20349

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) · EPSS 1.01% · Threat 58
HIGH 8.6
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-21479

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Qualcomm · Multiple Chipsets · EPSS 0.84% · Threat 58
HIGH 8.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96656

Plex Media Server External Control of File Name or Path Vulnerability

Plex · Media Server · EPSS 0.82% · Threat 58
HIGH 8.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-54420

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

LiteSpeed · cPanel Plugin · EPSS 0.81% · Threat 58
HIGH 8.6
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-1976

Broadcom Brocade Fabric OS Code Injection Vulnerability

Broadcom · Brocade Fabric OS · EPSS 0.69% · Threat 58
HIGH 8.6
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21480

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Qualcomm · Multiple Chipsets · EPSS 0.46% · Threat 58
MEDIUM 5.3Ransomware
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20316

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Cisco · Secure Firewall Management Center (FMC) · EPSS 35.10% · Threat 57
HIGH 7.8
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-21333

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

Microsoft · Windows · EPSS 10.07% · Threat 57
HIGH 7.8
Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred
CVE-2026-83549

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

SonicWall · SMA1000 Appliances · EPSS 9.89% · Threat 57
HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-41992

Apple Multiple Products Kernel Privilege Escalation Vulnerability

Apple · Multiple Products · EPSS 9.52% · Threat 57
HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0995

Linux Kernel Out-of-Bounds Write Vulnerability

Linux · Kernel · EPSS 8.86% · Threat 57
HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-41244

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Broadcom · VMware Aria Operations and VMware Tools · EPSS 8.63% · Threat 57
HIGH 8.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-27137

DD-WRT Stack-Based Buffer Overflow Vulnerability

DD-WRT · DD-WRT · EPSS 4.00% · Threat 57
HIGH 8.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-55255

Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Langflow · Langflow · EPSS 0.89% · Threat 57
HIGH 8.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-110936

Siemens Software Center Uncontrolled Search Path Element Vulnerability

Siemens · Software Center · EPSS 0.24% · Threat 57
MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-26829

OpenPLC ScadaBR Cross-site Scripting Vulnerability

OpenPLC · ScadaBR · EPSS 48.05% · Threat 56
MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20262

Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

Cisco · Catalyst SD-WAN Manager · EPSS 28.17% · Threat 56
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2022-23748

Dante Discovery Process Control Vulnerability

Audinate · Dante Discovery · EPSS 8.33% · Threat 56
HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2023-0386

Linux Kernel Improper Ownership Management Vulnerability

Linux · Kernel · EPSS 7.88% · Threat 56
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2021-30952

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Apple · Multiple Products · EPSS 6.96% · Threat 56
HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-24990

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Microsoft · Windows · EPSS 6.37% · Threat 56
HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0492

Linux Kernel Improper Authentication Vulnerability

Linux · Kernel · EPSS 5.53% · Threat 56
HIGH 7.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-5287

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Red Hat · Automatic Bug Reporting Tool · EPSS 5.00% · Threat 56
HIGH 8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-48384

Git Link Following Vulnerability

Git · Git · EPSS 4.38% · Threat 56
HIGH 8.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-22224

VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

VMware · ESXi and Workstation · EPSS 1.56% · Threat 56
MEDIUM 4.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-47813

Wing FTP Server Information Disclosure Vulnerability

Wing FTP Server · Wing FTP Server · EPSS 62.51% · Threat 55
HIGH 7.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-12686

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) · EPSS 13.70% · Threat 55
HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-42018

JFrog Artifactory Improper Authentication Vulnerability

JFrog · Artifactory · EPSS 9.80% · Threat 55
HIGH 7.4
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-3246

Red Hat Libuser Race Condition Vulnerability

Red Hat · Libuser · EPSS 8.50% · Threat 55
HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20128

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Cisco · Catalyst SD-WAN Manager · EPSS 7.32% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21533

Microsoft Windows Improper Privilege Management Vulnerability

Microsoft · Windows · EPSS 4.15% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-53197

Linux Kernel Out-of-Bounds Access Vulnerability

Linux · Kernel · EPSS 4.12% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-24985

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

Microsoft · Windows · EPSS 3.89% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-85880

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Microsoft · Windows · EPSS 3.62% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-31431

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Linux · Kernel · EPSS 3.44% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-53104

Linux Kernel Out-of-Bounds Write Vulnerability

Linux · Kernel · EPSS 3.40% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-59230

Microsoft Windows Improper Access Control Vulnerability

Microsoft · Windows · EPSS 2.66% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-62221

Microsoft Windows Use After Free Vulnerability

Microsoft · Windows · EPSS 2.50% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21519

Microsoft Windows Type Confusion Vulnerability

Microsoft · Windows · EPSS 2.48% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-32706

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

Microsoft · Windows · EPSS 2.33% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-24993

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

Microsoft · Windows · EPSS 2.22% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-41974

Apple iOS and iPadOS Use-After-Free Vulnerability

Apple · iOS and iPadOS · EPSS 1.96% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-30400

Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Microsoft · Windows · EPSS 1.92% · Threat 55
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-32709

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft · Windows · EPSS 1.82% · Threat 55
MEDIUM 6.1
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-68461

RoundCube Webmail Cross-site Scripting Vulnerability

Roundcube · Webmail · EPSS 26.84% · Threat 54
MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-50224

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

TP-Link · TL-WR841N · EPSS 20.02% · Threat 54
MEDIUM 6.5Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2019-6693

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Fortinet · FortiOS · EPSS 6.64% · Threat 54
HIGH 7.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-34486

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Apache · Tomcat · EPSS 6.56% · Threat 54
HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-54313

Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

Prettier · eslint-config-prettier · EPSS 5.13% · Threat 54
HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-45727

North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

North Grid · Proself · EPSS 4.82% · Threat 54
HIGH 7.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-15556

Notepad++ Download of Code Without Integrity Check Vulnerability

Notepad++ · Notepad++ · EPSS 1.77% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21514

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Microsoft · Office · EPSS 1.59% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21334

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft · Windows · EPSS 1.57% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21418

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

Microsoft · Windows · EPSS 1.57% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-32701

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft · Windows · EPSS 1.42% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21335

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

Microsoft · Windows · EPSS 1.40% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20700

Apple Multiple Buffer Overflow Vulnerability

Apple · Multiple Products · EPSS 1.39% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-38352

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Linux · Kernel · EPSS 1.36% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21385

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Qualcomm · Multiple Chipsets · EPSS 1.29% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-53362

Linux Kernel Unspecified Vulnerability

Linux · Kernel · EPSS 0.71% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-41091

Microsoft Defender Link Following Vulnerability

Microsoft · Defender · EPSS 0.44% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-81963

Microsoft Windows Link Following Vulnerability

Microsoft · Windows · EPSS 0.39% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-43510

Apple Multiple Products Improper Locking Vulnerability

Apple · Multiple Products · EPSS 0.36% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-56155

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft · Active Directory Federation Services · EPSS 0.35% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-3502

TrueConf Client Download of Code Without Integrity Check Vulnerability

TrueConf · Client · EPSS 0.33% · Threat 54
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-48572

Android Framework Privilege Escalation Vulnerability

Android · Framework · EPSS 0.26% · Threat 54