Skip to content

All CVEs, page 2

1724 CVEs, sorted by threat level then EPSS. Showing 121-240. Use search to combine filters.

HIGH 8.6RansomwareTop #77

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point · Quantum Security Gateways · EPSS 99.98% · Threat 93

Exploited in the wild · CISA KEVATT&CK inferred

Paessler PRTG Network Monitor Local File Inclusion Vulnerability

Paessler · PRTG Network Monitor · EPSS 97.94% · Threat 93

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped

Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

Progress · Telerik Report Server · EPSS 97.48% · Threat 93

Exploited in the wild · CISA KEVATT&CK inferred

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Kentico · Xperience CMS · EPSS 97.17% · Threat 93

Exploited in the wild · CISA KEVCTID-mapped

Cisco Smart Licensing Utility Static Credential Vulnerability

Cisco · Smart Licensing Utility · EPSS 97.09% · Threat 93

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Splunk · Enterprise · EPSS 96.94% · Threat 93

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Progress Kemp LoadMaster OS Command Injection Vulnerability

Progress · Kemp LoadMaster · EPSS 95.39% · Threat 93

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Wing FTP Server · Wing FTP Server · EPSS 93.88% · Threat 93

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Wazuh Server Deserialization of Untrusted Data Vulnerability

Wazuh · Wazuh Server · EPSS 93.84% · Threat 93

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab · Community Edition and Enterprise Edition · EPSS 91.95% · Threat 93

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco · Catalyst SD-WAN · EPSS 91.82% · Threat 93

CRITICAL 9.3Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

SmarterTools · SmarterMail · EPSS 88.18% · Threat 93

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Fortinet FortiManager Missing Authentication Vulnerability

Fortinet · FortiManager · EPSS 94.77% · Threat 92

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

NUUO NVRmini Devices OS Command Injection Vulnerability

NUUO · NVRmini Devices · EPSS 94.76% · Threat 92

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

Microsoft Outlook Improper Input Validation Vulnerability

Microsoft · Office Outlook · EPSS 94.66% · Threat 92

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Server · EPSS 94.58% · Threat 92

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

Gladinet · CentreStack · EPSS 94.34% · Threat 92

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Fortinet FortiClient EMS Improper Access Control Vulnerability

Fortinet · FortiClient EMS · EPSS 93.98% · Threat 92

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

React Native Community CLI OS Command Injection Vulnerability

React Native Community · CLI · EPSS 93.98% · Threat 92

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet · FortiClient EMS · EPSS 93.87% · Threat 92

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

CrushFTP Unprotected Alternate Channel Vulnerability

CrushFTP · CrushFTP · EPSS 93.47% · Threat 92

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBCTID-mapped

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Hitachi Vantara · Pentaho Business Analytics (BA) Server · EPSS 92.27% · Threat 92

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Fortinet FortiWeb Path Traversal Vulnerability

Fortinet · FortiWeb · EPSS 91.97% · Threat 92

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Samsung · MagicINFO 9 Server · EPSS 91.94% · Threat 92

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

ProjectSend Improper Authentication Vulnerability

ProjectSend · ProjectSend · EPSS 91.85% · Threat 92

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Cisco · Catalyst SD-WAN Controller and Manager · EPSS 89.29% · Threat 92

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

JoomShaper · SP Page Builder · EPSS 88.51% · Threat 92

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management · EPSS 88.47% · Threat 92

CRITICAL 9.3Ransomware

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Check Point Security Gateway Improper Authentication Vulnerability

Check Point · Security Gateway · EPSS 85.34% · Threat 92

HIGH 8.2RansomwareTop #6

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

Ivanti · Connect Secure, Policy Secure, and Neurons · EPSS 100.00% · Threat 91

HIGH 8.2RansomwareTop #64

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

Ivanti · Connect Secure and Policy Secure · EPSS 99.99% · Threat 91

CRITICAL 9.3Top #80

Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped

ServiceNow Improper Input Validation Vulnerability

ServiceNow · Utah, Vancouver, and Washington DC Now Platform · EPSS 99.98% · Threat 91

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Palo Alto Networks Expedition SQL Injection Vulnerability

Palo Alto Networks · Expedition · EPSS 99.63% · Threat 91

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

Commvault Command Center Path Traversal Vulnerability

Commvault · Command Center · EPSS 97.60% · Threat 91

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Craft CMS Code Injection Vulnerability

Craft CMS · Craft CMS · EPSS 97.41% · Threat 91

HIGH 8.4Ransomware

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

ConnectWise ScreenConnect Path Traversal Vulnerability

ConnectWise · ScreenConnect · EPSS 95.44% · Threat 91

Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred

Adobe ColdFusion Deserialization Vulnerability

Adobe · ColdFusion · EPSS 90.60% · Threat 91

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Hewlett Packard Enterprise (HPE) · OneView · EPSS 90.19% · Threat 91

Exploited in the wild · CISA KEVATT&CK inferred

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Oracle · Fusion Middleware · EPSS 88.65% · Threat 91

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Adobe Experience Manager Forms Code Execution Vulnerability

Adobe · Experience Manager (AEM) Forms · EPSS 88.26% · Threat 91

HIGH 8RansomwareTop #84

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · EPSS 99.97% · Threat 90

CRITICAL 9.1Top #94

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

Apache HTTP Server Improper Escaping of Output Vulnerability

Apache · HTTP Server · EPSS 99.96% · Threat 90

Exploited in the wild · CISA KEVATT&CK inferred

CWP Control Web Panel OS Command Injection Vulnerability

CWP · Control Web Panel · EPSS 99.66% · Threat 90

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Laravel Livewire Code Injection Vulnerability

Laravel · Livewire · EPSS 96.28% · Threat 90

HIGH 8.4Ransomware

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

RARLAB WinRAR Path Traversal Vulnerability

RARLAB · WinRAR · EPSS 94.51% · Threat 90

Exploited in the wild · CISA KEVATT&CK inferred

Langflow Origin Validation Error Vulnerability

Langflow · Langflow · EPSS 92.81% · Threat 90

Exploited in the wild · CISA KEVCTID-mapped

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Yiiframework · Yii · EPSS 87.76% · Threat 90

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) · EPSS 87.26% · Threat 90

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Fortinet · Multiple Products · EPSS 85.80% · Threat 90

HIGH 8.8Top #15

Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped

TP-Link Archer AX-21 Command Injection Vulnerability

TP-Link · Archer AX21 · EPSS 100.00% · Threat 89

HIGH 8.8Top #76

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Google · Chromium WebP · EPSS 99.98% · Threat 89

HIGH 7.8RansomwareTop #100

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped

Microsoft Office Memory Corruption Vulnerability

Microsoft · Office · EPSS 99.94% · Threat 89

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2022-42889: Apache Commons Text performs variable interpolation, allowing properties to be dynamically…

apache · commons text · EPSS 99.93% · Threat 89

Metasploit moduleExploit-DBATT&CK inferred

CVE-2022-37061: All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to …

flir · flir ax8 firmware · EPSS 99.61% · Threat 89

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

GNU Bash OS Command Injection Vulnerability

GNU · GNU Bash · EPSS 99.59% · Threat 89

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

n8n · n8n · EPSS 98.99% · Threat 89

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

RoundCube Webmail Deserialization of Untrusted Data Vulnerability

Roundcube · Webmail · EPSS 98.97% · Threat 89

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · EPSS 98.45% · Threat 89

Exploited in the wild · CISA KEVATT&CK inferred

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Dassault Systèmes · DELMIA Apriso · EPSS 96.91% · Threat 89

Exploited in the wild · CISA KEVATT&CK inferred

Gladinet Triofox Improper Access Control Vulnerability

Gladinet · Triofox · EPSS 95.75% · Threat 89

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Adobe Commerce and Magento Improper Input Validation Vulnerability

Adobe · Commerce and Magento · EPSS 94.66% · Threat 89

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

WatchGuard Firebox Out-of-Bounds Write Vulnerability

WatchGuard · Firebox · EPSS 91.80% · Threat 89

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Palo Alto Networks Expedition Missing Authentication Vulnerability

Palo Alto Networks · Expedition · EPSS 91.68% · Threat 89

Exploited in the wild · CISA KEVATT&CK inferred

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

Synacor · Zimbra Collaboration Suite · EPSS 84.42% · Threat 89

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds · Web Help Desk · EPSS 84.18% · Threat 89

Exploited in the wild · CISA KEVATT&CK inferred

Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

Sitecore · CMS and Experience Platform (XP) · EPSS 83.74% · Threat 89

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Mozilla Multiple Products Remote Code Execution Vulnerability

Mozilla · Multiple Products · EPSS 83.16% · Threat 89

Exploited in the wild · CISA KEVCTID-mapped

D-Link DIR-859 Router Path Traversal Vulnerability

D-Link · DIR-859 Router · EPSS 82.71% · Threat 89

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional · Ajax.NET Professional · EPSS 82.58% · Threat 89

CRITICAL 9.8Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

Array Networks · AG/vxAG ArrayOS · EPSS 68.08% · Threat 89

CRITICAL 9.9Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

SimpleHelp Missing Authorization Vulnerability

SimpleHelp · SimpleHelp · EPSS 66.41% · Threat 89

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2023-6553: The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all ve…

backupbliss · backup migration · EPSS 97.85% · Threat 88

Exploited in the wild · CISA KEVATT&CK inferred

Digiever DS-2105 Pro Missing Authorization Vulnerability

Digiever · DS-2105 Pro · EPSS 96.92% · Threat 88

HIGH 7.8Ransomware

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · EPSS 96.89% · Threat 88

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2024-0204: Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized use…

fortra · goanywhere managed file transfer · EPSS 95.09% · Threat 88

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft · Configuration Manager · EPSS 81.04% · Threat 88

HIGH 7.5RansomwareTop #11

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Citrix · NetScaler ADC and NetScaler Gateway · EPSS 100.00% · Threat 87

HIGH 7.5RansomwareTop #49

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Server · EPSS 99.99% · Threat 87

HIGH 7.5Ransomware

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

SimpleHelp Path Traversal Vulnerability

SimpleHelp · SimpleHelp · EPSS 96.83% · Threat 87

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2023-30258: Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote …

magnussolution · magnusbilling · EPSS 94.25% · Threat 87

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2024-8856: The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary …

revmakx · backup and staging by wp time capsule · EPSS 94.14% · Threat 87

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer · EPSS 91.94% · Threat 87

Exploited in the wild · CISA KEVATT&CK inferred

Adobe Commerce and Magento Incorrect Authorization Vulnerability

Adobe · Commerce and Magento · EPSS 87.51% · Threat 87

Exploited in the wild · CISA KEVATT&CK inferred

Progress LoadMaster Command Injection Vulnerability

Progress · LoadMaster · EPSS 77.36% · Threat 87

Exploited in the wild · CISA KEVATT&CK inferred

Fortinet FortiSandbox OS Command Injection Vulnerability

Fortinet · FortiSandbox · EPSS 76.11% · Threat 87

Exploited in the wild · CISA KEVATT&CK inferred

Check Point Multiple Products Path Traversal Vulnerability

Check Point · Multiple Products · EPSS 75.87% · Threat 87

Exploited in the wild · CISA KEVCTID-mapped

Cisco Identity Services Engine Injection Vulnerability

Cisco · Identity Services Engine · EPSS 74.50% · Threat 87

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in · EPSS 73.19% · Threat 87

HIGH 7.2RansomwareTop #17

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Fortra · GoAnywhere MFT · EPSS 100.00% · Threat 86

HIGH 7.3RansomwareTop #56

Exploited in the wild · CISA KEVATT&CK inferred

JetBrains TeamCity Relative Path Traversal Vulnerability

JetBrains · TeamCity · EPSS 99.99% · Threat 86

Exploit-DBPublic PoCATT&CK inferred

CVE-2025-1974: A security issue was discovered in Kubernetes where under certain conditions, an unauthent…

Unknown · · EPSS 99.38% · Threat 86

HIGH 7.5Ransomware

Exploited in the wild · CISA KEVATT&CK inferred

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Oracle · E-Business Suite · EPSS 95.89% · Threat 86

Exploited in the wild · CISA KEVCTID-mapped

NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

NAKIVO · Backup and Replication · EPSS 94.36% · Threat 86

Exploited in the wild · CISA KEVATT&CK inferred

Smartbedded Meteobridge Command Injection Vulnerability

Smartbedded · Meteobridge · EPSS 93.31% · Threat 86

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

BerriAI LiteLLM Command Injection Vulnerability

BerriAI · LiteLLM · EPSS 92.57% · Threat 86

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-66516: Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika…

apache · tika · EPSS 88.98% · Threat 86

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2024-25600: Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited …

Unknown · · EPSS 88.23% · Threat 86

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2025-59528: Flowise is a drag & drop user interface to build a customized large language model flow. I…

flowiseai · flowise · EPSS 86.22% · Threat 86

Exploited in the wild · CISA KEVPublic PoCCTID-mapped

RoundCube Webmail Cross-Site Scripting Vulnerability

Roundcube · Webmail · EPSS 82.88% · Threat 86

Exploited in the wild · CISA KEVATT&CK inferred

Versa Concerto Improper Authentication Vulnerability

Versa · Concerto · EPSS 81.78% · Threat 86

Exploited in the wild · CISA KEVATT&CK inferred

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Kentico · Xperience CMS · EPSS 74.06% · Threat 86

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

SolarWinds Web Help Desk Security Control Bypass Vulnerability

SolarWinds · Web Help Desk · EPSS 73.56% · Threat 86

Exploited in the wild · CISA KEVATT&CK inferred

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense · EPSS 71.21% · Threat 86

HIGH 8.1Top #50

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped

Apache Struts Remote Code Execution Vulnerability

Apache · Struts · EPSS 99.99% · Threat 85

HIGH 8.1Top #85

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Apache Tomcat Remote Code Execution Vulnerability

Apache · Tomcat · EPSS 99.97% · Threat 85

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2025-29927: Next.js is a React framework for building full-stack web applications. Starting in version…

vercel · next.js · EPSS 99.22% · Threat 85

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

Microsoft · Internet Explorer · EPSS 96.83% · Threat 85

Exploited in the wild · CISA KEVMetasploit moduleCTID-mapped

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM) · EPSS 88.00% · Threat 85

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Microsoft Internet Explorer Resource Management Errors Vulnerability

Microsoft · Internet Explorer · EPSS 87.64% · Threat 85

Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped

Microsoft Windows External Control of File Name or Path Vulnerability

Microsoft · Windows · EPSS 87.02% · Threat 85

Metasploit modulePublic PoCATT&CK inferred

CVE-2025-24799: GLPI is a free asset and IT management software package. An unauthenticated user can perfo…

glpi-project · glpi · EPSS 86.69% · Threat 85

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

Adobe · Acrobat and Reader · EPSS 86.65% · Threat 85

Metasploit moduleExploit-DBPublic PoCATT&CK inferred

CVE-2023-5360: The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly …

royal-elementor-addons · royal elementor addons · EPSS 86.35% · Threat 85

Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

PaperCut · NG/MF · EPSS 85.58% · Threat 85

Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred

Check Point SmartConsole Improper Authentication Vulnerability

Check Point · SmartConsole · EPSS 77.97% · Threat 85

Exploited in the wild · CISA KEVATT&CK inferred

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Cisco · Identity Services Engine · EPSS 66.64% · Threat 85

HIGH 7.8Top #73

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped

ExifTool Remote Code Execution Vulnerability

Perl · Exiftool · EPSS 99.98% · Threat 84

HIGH 7.8Top #90

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred

Sudo Heap-Based Buffer Overflow Vulnerability

Sudo · Sudo · EPSS 99.96% · Threat 84

Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred

Apache Struts Command Injection Vulnerability

Apache · Struts · EPSS 96.05% · Threat 84

Exploited in the wild · CISA KEVPublic PoCATT&CK inferred

Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Cisco · Unified Communications Manager · EPSS 88.20% · Threat 84