415128CVEs tracked
4633Last 7 days
16419Last 30 days
1756CISA KEV
Recently published CVEs
71 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-72530 KEV | 9.0
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
Scope change
C:HI:HA:H
|
1.7% | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to… | 2026-08-19 |
| CVE-2026-72529 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
1.5% | A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by ca… | 2026-08-19 |
| CVE-2026-19490 KEV | 9.8
NVD v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
23.2% | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21. |
2026-08-19 |
| CVE-2026-64849 KEV | 9.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:LA:N
|
10.0% | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed… MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhook… |
2026-08-17 |
| CVE-2026-73570 KEV | 8.9
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
Scope change
C:HI:HA:L
|
71.7% | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitiz… | 2026-08-13 |
| CVE-2026-42018 KEV | 7.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:NA:N
|
9.8% | Anonymous user token generation exposure in JFrog Artifactory JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources. |
2026-08-12 |
| CVE-2026-66384 KEV | 5.3
CNA (via NVD) v3.1 |
NetworkLoginNo interactionConditions
C:NI:HA:N
|
0.7% | Authenticated users may write data outside the intended Docker cache path An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions. |
2026-08-12 |
| CVE-2026-71362 KEV | 9.1
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:N
|
87.5% | Adobe Commerce | Incorrect Authorization (CWE-863) Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive res… |
2026-08-11 |
| CVE-2026-68820 KEV | 7.0
CNA (via NVD) v3.1 |
LocalLoginNo interactionConditions
C:HI:HA:H
|
0.3% | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
2026-08-11 |
| CVE-2026-65660 KEV | 8.8
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
C:HI:HA:H
|
2.1% | Microsoft SharePoint Server Remote Code Execution Vulnerability Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
2026-08-11 |
| CVE-2026-20349 KEV | 8.6
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:NI:NA:H
|
1.0% | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Softw… A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthe… |
2026-08-11 |
| CVE-2026-72898 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:H
|
97.4% | Metabase SQL injection via password reset endpoint Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance. |
2026-08-10 |
| CVE-2026-65400 KEV | 9.8
CISA-ADP (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
1.7% | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An a… | 2026-08-06 |
| CVE-2026-5430 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:H
|
0.6% | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account … The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which … |
2026-08-06 |
| CVE-2026-18577 KEV | 8.1
NVD v3.1 |
NetworkNo authNo interactionConditions
Exploited
C:HI:HA:H
|
14.6% | Incomplete patch leads to administrative account takeover An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1 |
2026-08-02 |
| CVE-2026-18556 KEV | 7.4
NVD v3.1 |
NetworkNo authNo interactionConditions
C:HI:HA:N
|
7.9% | Unauthenticated administrative account takeover Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1. |
2026-08-01 |
| CVE-2026-59310 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
2.6% | vCenter directory-traversal vulnerability VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code. |
2026-07-30 |
| CVE-2026-20316 KEV | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:NA:N
|
35.1% | Cisco Secure Firewall Management Center Software Static Credential Vulnerability A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged ac… |
2026-07-29 |
| CVE-2026-42016 KEV | 8.8
NVD v3.1 |
NetworkLoginNo interaction
C:HI:HA:H
|
8.6% | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Esc… JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope. |
2026-07-27 |
| CVE-2026-63077 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
89.6% | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | 2026-07-27 |
| CVE-2026-16812 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:H
|
1.0% | VeloCloud Orchestrator OS Command Injection VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may … |
2026-07-27 |