CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 28, 12:57 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110936 In wildKEV | SS Siemens Software Center Siemens | 6.7 | Oct 15 | Siemens Software Center Uncontrolled Search Path Element Vulnerability |
| CVE-2026-96655 In wildKEV | MS Media Server Plex | 4.3 | Sep 23 | Plex Media Server arbitrary-host SSRF |
| CVE-2026-96654 In wildKEV | MS Media Server Plex | 6.5 | Sep 23 | Plex Media Server URL injection |
| CVE-2026-96652 In wildKEV | MS Media Server Plex | 4.3 | Sep 23 | Plex Media Server SSRF |
| CVE-2026-67279 In wildKEV | RO RouterOS Mikrotik | 6.5 | Sep 5 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS |
| CVE-2026-66384 In wildKEV | AR artifactory jfrog | 5.3 | Aug 12 | Authenticated users may write data outside the intended Docker cache path |
| CVE-2026-20316 RansomwareIn wildKEV | CS Cisco Secure Firewall Management Center (FMC) Cisco | 5.3 | Jul 29 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability |
| CVE-2026-60137 In wildKEV | WO WordPress WordPress | 5.9 | Jul 17 | WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query |
| CVE-2026-20262 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 6.5 | Jun 15 | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability |
| CVE-2026-7473 In wildKEV | EO EOS Arista Networks | 5.8 | Jun 5 | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass |
| CVE-2026-48710 In wildKEV | ST starlette Kludex | 6.5 | May 26 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks |
| CVE-2026-34926 In wildKEV | AO Apex One Trend Micro | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability |
| CVE-2026-42897 In wildKEV | ES Exchange Server Microsoft | 6.1 | May 14 | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2026-32201 In wildKEV | SH SharePoint Microsoft | 6.5 | Apr 14 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-32202 In wildKEV | WI Windows Microsoft | 4.3 | Apr 14 | Windows Shell Spoofing Vulnerability |
| CVE-2025-61624 In wildKEV | FO FortiOS Fortinet | 6.5 | Apr 14 | Fortinet Multiple Products Path Traversal Vulnerability |
| CVE-2026-20122 In wildKEV | CC Cisco Catalyst SD-WAN Manager Cisco | 5.4 | Feb 25 | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability |
| CVE-2026-21525 In wildKEV | WI Windows Microsoft | 6.2 | Feb 10 | Windows Remote Access Connection Manager Denial of Service Vulnerability |
| CVE-2025-68686 In wildKEV | FO FortiOS Fortinet | 5.9 | Feb 10 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
| CVE-2026-20805 In wildKEV | WI Windows Microsoft | 5.5 | Jan 13 | Desktop Window Manager Information Disclosure Vulnerability |
| CVE-2025-66376 In wildKEV | CO Collaboration Zimbra | 6.1 | Jan 5 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability |
| CVE-2025-40602 In wildKEV | SM SMA1000 SonicWall | 6.6 | Dec 18 | SonicWall SMA1000 Missing Authorization Vulnerability |
| CVE-2025-68461 In wildKEV | WE Webmail Roundcube | 6.1 | Dec 18 | RoundCube Webmail Cross-site Scripting Vulnerability |
| CVE-2025-43520 In wildKEV | MA macOS Apple | 5.5 | Dec 12 | Apple Multiple Products Classic Buffer Overflow Vulnerability |
| CVE-2025-48633 In wildKEV | AN Android Google | 5.5 | Dec 8 | Android Framework Information Disclosure Vulnerability |
| CVE-2025-39964 In wildKEV | KE Kernel Linux | 5.5 | Oct 13 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg |
| CVE-2025-59689 In wildKEV | ES Email Security Gateway Libraesva | 6.1 | Sep 19 | Libraesva Email Security Gateway Command Injection Vulnerability |
| CVE-2025-55177 In wildKEV | WB WhatsApp Business for iOS Facebook | 5.4 | Aug 29 | Meta Platforms WhatsApp Incorrect Authorization Vulnerability |
| CVE-2025-47813 In wildKEV | WF Wing FTP Server wftpserver | 4.3 | Jul 10 | Wing FTP Server Information Disclosure Vulnerability |
| CVE-2025-49706 RansomwareIn wildKEV | SH SharePoint Microsoft | 6.5 | Jul 8 | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2025-48700 In wildKEV | ZC Zimbra Collaboration Suite Synacor | 6.1 | Jun 23 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability |
| CVE-2025-43200 In wildKEV | IO iOS Apple | 4.2 | Jun 16 | Apple Multiple Products Unspecified Vulnerability |
| CVE-2025-47827 In wildKEV | IO Igel OS Igel | 4.6 | Jun 5 | IGEL OS Use of a Key Past its Expiration Date Vulnerability |
| CVE-2025-48927 In wildKEV | SE service TeleMessage | 5.3 | May 28 | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability |
| CVE-2025-48928 In wildKEV | SE service TeleMessage | 4.0 | May 28 | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability |
| CVE-2025-47729 In wildKEV | AB archiving backend TeleMessage | 4.9 | May 8 | TeleMessage TM SGNL Hidden Functionality Vulnerability |
| CVE-2025-35939 In wildKEV | CM CMS Craft | 5.3 | May 7 | Craft CMS stores user-provided content in session files |
| CVE-2025-1976 In wildKEV | FO Fabric OS Brocade | 6.7 | Apr 24 | Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 |
| CVE-2025-21590 In wildKEV | JO Junos OS Juniper | 4.4 | Mar 12 | Junos OS: An local attacker with shell access can execute arbitrary code |
| CVE-2025-27915 In wildKEV | ZC Zimbra Collaboration Suite Synacor | 5.4 | Mar 12 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability |
| CVE-2025-24991 In wildKEV | WI Windows Microsoft | 5.5 | Mar 11 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2025-24984 In wildKEV | WI Windows Microsoft | 4.6 | Mar 11 | Windows NTFS Information Disclosure Vulnerability |
| CVE-2025-24054 In wildKEV | WI Windows Microsoft | 5.4 | Mar 11 | NTLM Hash Disclosure Spoofing Vulnerability |
| CVE-2025-22226 In wildKEV | ES ESXi VMware | 6.0 | Mar 4 | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability |
| CVE-2025-0111 In wildKEV | PA PAN-OS Palo Alto Networks | 6.5 | Feb 12 | PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface |
| CVE-2025-24200 In wildKEV | IO iOS Apple | 6.1 | Feb 10 | Apple iOS and iPadOS Incorrect Authorization Vulnerability |
| CVE-2024-44309 In wildKEV | MA macOS Apple | 6.3 | Nov 19 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability |
| CVE-2024-50302 In wildKEV | AN Android Google | 5.5 | Nov 19 | HID: core: zero-initialize the report buffer |
| CVE-2024-11182 In wildKEV | ES Email Server MDaemon | 6.1 | Nov 15 | Stored XSS vulnerability in MDaemon Email Server |
| CVE-2024-43451 In wildKEV | WI Windows Microsoft | 6.5 | Nov 12 | NTLM Hash Disclosure Spoofing Vulnerability |