Mode Known exploited
Score date 29 Oct 2026 (model v2026.06.15)
Showing 100 of 100 eligible (397835 published)
Evidence Current CVE-2026-41709 ESX insufficient logging vulnerability VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged. KEV EPSS 0.764% CVSS 2.7 Published 30 Jul 2026, 19:45 WIB − KEV listed · EPSS 0.764% · CVSS 2.7 v3.1 KEV ? CISA Known Exploited Vulnerabilities catalog membership. Catalog dates mark catalog addition, not proven first exploitation or current attack volume.
KEV listed on 28 Oct 2026
EPSS ? A dated exploitation probability forecast from the named model version, not observed exploitation. Percent is the probability estimate; percentile ranks the CVE against all scored CVEs when supplied.
0.764% dated 29 Oct 2026 , model v2026.06.15
EPSS probability 0.764 percent. CVSS ? CNA-supplied severity only. Legacy v2 scores, ADP-only metrics, and unscored records are labeled in place; none of them means low severity.
Primary CNA CVSS 2.7 v3.1 low
Official CVE record CVE-2026-46300 net: skbuff: preserve shared-frag marker during coalescing In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: preserve shared-frag marker during coalescing
skb_try_coalesce() can attach paged frags from @from to @to. If @from
has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same
externally-owned or page-cache-backed frags, but t… [truncated] KEV EPSS 15.719% CVSS 7.8 Published 23 May 2026, 18:44 WIB − KEV listed · EPSS 15.719% · CVSS 7.8 v3.1 KEV ? CISA Known Exploited Vulnerabilities catalog membership. Catalog dates mark catalog addition, not proven first exploitation or current attack volume.
KEV listed on 28 Oct 2026
EPSS ? A dated exploitation probability forecast from the named model version, not observed exploitation. Percent is the probability estimate; percentile ranks the CVE against all scored CVEs when supplied.
15.719% dated 29 Oct 2026 , model v2026.06.15
EPSS probability 15.719 percent. CVSS ? CNA-supplied severity only. Legacy v2 scores, ADP-only metrics, and unscored records are labeled in place; none of them means low severity.
Primary CNA CVSS 7.8 v3.1 high
Official CVE record CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code us… [truncated] KEV EPSS 82.641% CVSS 9.2 Published 22 Oct 2026, 20:35 WIB − KEV listed · EPSS 82.641% · CVSS 9.2 v4.0 KEV ? CISA Known Exploited Vulnerabilities catalog membership. Catalog dates mark catalog addition, not proven first exploitation or current attack volume.
KEV listed on 27 Oct 2026
EPSS ? A dated exploitation probability forecast from the named model version, not observed exploitation. Percent is the probability estimate; percentile ranks the CVE against all scored CVEs when supplied.
82.641% dated 29 Oct 2026 , model v2026.06.15
EPSS probability 82.641 percent. CVSS ? CNA-supplied severity only. Legacy v2 scores, ADP-only metrics, and unscored records are labeled in place; none of them means low severity.
Primary CNA CVSS 9.2 v4.0 critical
Official CVE record CVE-2026-48356 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in th… [truncated] KEV EPSS 44.579% CVSS 9.3 Published 15 Jul 2026, 02:44 WIB − KEV listed · EPSS 44.579% · CVSS 9.3 v3.1 KEV ? CISA Known Exploited Vulnerabilities catalog membership. Catalog dates mark catalog addition, not proven first exploitation or current attack volume.
KEV listed on 27 Oct 2026
EPSS ? A dated exploitation probability forecast from the named model version, not observed exploitation. Percent is the probability estimate; percentile ranks the CVE against all scored CVEs when supplied.
44.579% dated 29 Oct 2026 , model v2026.06.15
EPSS probability 44.579 percent. CVSS ? CNA-supplied severity only. Legacy v2 scores, ADP-only metrics, and unscored records are labeled in place; none of them means low severity.
Primary CNA CVSS 9.3 v3.1 critical
Official CVE record CVE-2026-109618 RCE via OOM corruption PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on thi… [truncated] KEV EPSS 99.999% CVSS 9.2 Published 21 Oct 2026, 20:48 WIB − KEV listed · EPSS 99.999% · CVSS 9.2 v4.0 KEV ? CISA Known Exploited Vulnerabilities catalog membership. Catalog dates mark catalog addition, not proven first exploitation or current attack volume.
KEV listed on 26 Oct 2026
EPSS ? A dated exploitation probability forecast from the named model version, not observed exploitation. Percent is the probability estimate; percentile ranks the CVE against all scored CVEs when supplied.
99.999% dated 29 Oct 2026 , model v2026.06.15
EPSS probability 99.999 percent. CVSS ? CNA-supplied severity only. Legacy v2 scores, ADP-only metrics, and unscored records are labeled in place; none of them means low severity.
Primary CNA CVSS 9.2 v4.0 critical
Official CVE record CVE-2026-109619 RCE via stale global state PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before… [truncated] KEV EPSS 99.999% CVSS 9.2 Published 21 Oct 2026, 20:54 WIB + KEV listed · EPSS 99.999% · CVSS 9.2 v4.0 CVE-2026-110447 Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the prod… [truncated] KEV EPSS 73.307% CVSS 9.2 Published 14 Oct 2026, 09:27 WIB + KEV listed · EPSS 73.307% · CVSS 9.2 v4.0 CVE-2026-114625 Security Advisory 0199 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.
O… [truncated] KEV EPSS 1.025% CVSS 9.4 Published 23 Oct 2026, 03:47 WIB + KEV listed · EPSS 1.025% · CVSS 9.4 v4.0 CVE-2026-106931 SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. KEV EPSS 2.528% CVSS 8.5 Published 14 Oct 2026, 11:45 WIB + KEV listed · EPSS 2.528% · CVSS 8.5 v4.0 CVE-2026-110936 A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading… [truncated] KEV EPSS 0.967% CVSS 8.4 Published 15 Oct 2026, 21:01 WIB + KEV listed · EPSS 0.967% · CVSS 8.4 v4.0 CVE-2026-96652 Plex Media Server SSRF Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. KEV EPSS 1.821% CVSS 5.3 Published 23 Sep 2026, 23:06 WIB + KEV listed · EPSS 1.821% · CVSS 5.3 v4.0 CVE-2026-96654 Plex Media Server URL injection Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters. KEV EPSS 1.949% CVSS 6.9 Published 23 Sep 2026, 23:06 WIB + KEV listed · EPSS 1.949% · CVSS 6.9 v4.0 CVE-2026-96655 Plex Media Server arbitrary-host SSRF Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. KEV EPSS 1.637% CVSS 5.3 Published 23 Sep 2026, 23:06 WIB + KEV listed · EPSS 1.637% · CVSS 5.3 v4.0 CVE-2026-96656 Plex Media Server arbitrary file write Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol checks. KEV EPSS 1.785% CVSS 8.6 Published 23 Sep 2026, 23:07 WIB + KEV listed · EPSS 1.785% · CVSS 8.6 v4.0 CVE-2025-61624 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all version… [truncated] KEV EPSS 1.343% CVSS 5.4 Published 14 Apr 2026, 22:39 WIB + KEV listed · EPSS 1.343% · CVSS 5.4 v3.1 CVE-2026-102764 Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance. KEV EPSS 18.95% CVSS 9.3 Published 16 Oct 2026, 03:30 WIB + KEV listed · EPSS 18.95% · CVSS 9.3 v4.0 CVE-2026-21589 This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web appli… [truncated] KEV EPSS 99.477% CVSS 9.3 Published 06 Oct 2026, 04:30 WIB + KEV listed · EPSS 99.477% · CVSS 9.3 v4.0 CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
The security risk posed by this issue is minimized by restricting access to the manageme… [truncated] KEV EPSS 1.74% CVSS 8.6 Published 15 Oct 2026, 00:26 WIB + KEV listed · EPSS 1.74% · CVSS 8.6 v4.0 CVE-2026-105133 Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper authentication. It is possible to initiate the attack remotely. T… [truncated] KEV EPSS 79.47% CVSS 6.9 Published 04 Oct 2026, 12:15 WIB + KEV listed · EPSS 79.47% · CVSS 6.9 v4.0 CVE-2026-105134 Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection A flaw has been found in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack remotely. T… [truncated] KEV EPSS 81.763% CVSS 10 Published 04 Oct 2026, 12:30 WIB + KEV listed · EPSS 81.763% · CVSS 10 v4.0 CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. … [truncated] KEV EPSS 2.152% CVSS 9.8 Published 14 Oct 2026, 23:07 WIB + KEV listed · EPSS 2.152% · CVSS 9.8 v3.1 CVE-2026-104935 Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior. KEV EPSS 86.766% CVSS 8.6 Published 13 Oct 2026, 22:31 WIB + KEV listed · EPSS 86.766% · CVSS 8.6 v3.1 CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. KEV EPSS 9.813% CVSS 8.8 Published 14 Oct 2026, 02:01 WIB + KEV listed · EPSS 9.813% · CVSS 8.8 v3.1 CVE-2015-3306 The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. KEV EPSS 99.497% ADP-only Published 18 May 2015, 22:00 WIB + KEV listed · EPSS 99.497% · ADP-only, unscored here CVE-2015-5477 named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. KEV EPSS 99.584% ADP-only Published 29 Jul 2015, 21:00 WIB + KEV listed · EPSS 99.584% · ADP-only, unscored here Show 25 more (75 remaining) Coverage denominator: 100 eligible of 397835 published records.
Showing top 100 of the cohort for this view. Ordering and eligibility are unchanged; only the display is truncated.
Methodology, sources, and reuse notices