PULSEUnderground Intel

LIVE37signals / 24h

FEED

ransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Servicesransomplay reclama a AG Scholtes · NL · Manufacturingransomplay reclama a Andorra Life · AD · Healthcareransomplay reclama a Svensk Direktreklam · SE · Business Servicesransomchaos reclama a radiax.com · US · Technologyransominterlock reclama a Converting Equipment International · GB · Manufacturingransomblack x reclama a sanaa · YE · Not Foundransomthegentlemen reclama a Tangram Interiors · GB · Business Servicesransomthegentlemen reclama a BRAC · BD · Business Servicesransomthegentlemen reclama a Customs Watch · US · Public Sectorransomthegentlemen reclama a Gallant · FI · Not Foundransomgunra reclama a Dissinger and Dissinger Law Firm · US · Business Servicesransomplay reclama a Boston Electric and Telephone · US · Telecommunicationransomplay reclama a Wring Group · GB · Not Foundransomincransom reclama a asa-international.com · GB · Business Servicesransomplay reclama a AG Scholtes · NL · Manufacturingransomplay reclama a Andorra Life · AD · Healthcareransomplay reclama a Svensk Direktreklam · SE · Business Servicesransomchaos reclama a radiax.com · US · Technologyransominterlock reclama a Converting Equipment International · GB · Manufacturingransomblack x reclama a sanaa · YE · Not Foundransomthegentlemen reclama a Tangram Interiors · GB · Business Servicesransomthegentlemen reclama a BRAC · BD · Business Servicesransomthegentlemen reclama a Customs Watch · US · Public Sectorransomthegentlemen reclama a Gallant · FI · Not Found

CVE Watch349,029 in full archive

Vulnerabilities exploitable today

9,869in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,644

New KEV · 24H0

Exploit Today ≥ 701,579

Distribution · last window

Critical
1,283
High
4,187
Medium
3,505
Low
268

Filters

Window

Severity

Flags

Vulnerabilities1–40 · 9,869

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-32489.8 CRI

KEVR80Langflow Missing Authentication Vulnerability2d CVE-2024-555919.8 CRI

KEVR80Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability8d CVE-2021-422379.8 CRI

KEVR80Sitecore XP Remote Command Execution Vulnerability7d CVE-2026-314317.8 HIG

KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability2d CVE-2026-341978.8 HIG

KEV—80Apache ActiveMQ Improper Input Validation Vulnerability2d CVE-2024-121210.0 CRI

KEV—80Progress Kemp LoadMaster OS Command Injection Vulnerability3d CVE-2024-116809.8 CRI

KEV—80ProjectSend Improper Authentication Vulnerability2d CVE-2026-422089.8 CRI

KEV—80BerriAI LiteLLM SQL Injection Vulnerability2d CVE-2023-389507.5 HIG

KEV—80ZKTeco BioTime Path Traversal Vulnerability7d CVE-2022-262589.8 CRI

KEV—80D-Link DIR-820L Remote Code Execution Vulnerability7d CVE-2026-422718.8 HIG

KEV—80BerriAI LiteLLM Command Injection Vulnerability2d CVE-2025-342918.8 HIG

KEV—80Langflow Origin Validation Error Vulnerability2d CVE-2021-252988.8 HIG

KEV—80Nagios XI OS Command Injection7d CVE-2021-252968.8 HIG

KEV—80Nagios XI OS Command Injection7d CVE-2021-252978.8 HIG

KEV—80Nagios XI OS Command Injection7d CVE-2026-202308.6 HIG

KEV—80Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability15d CVE-2026-4828210.0 CRI

KEV—79Adobe ColdFusion Path Traversal Vulnerability8d CVE-2008-41284.3 MED

KEV—79Cisco IOS Cross-Site Request Forgery Vulnerability3d CVE-2026-561645.3 MED

KEV—78Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability2d CVE-2025-105859.8 CRI

KEV—78Google Chromium V8 Type Confusion Vulnerability2d CVE-2025-132238.8 HIG

KEV—77Google Chromium V8 Type Confusion Vulnerability2d CVE-2026-456598.8 HIG

KEV—76Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability14d CVE-2025-244728.1 HIG

KEVR76Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability8d CVE-2026-562909.8 CRI

KEV—76Joomlack Page Builder Improper Access Control Vulnerability8d CVE-2026-489089.8 CRI

KEV—72JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability8d CVE-2026-489399.8 CRI

KEV—71iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability6d CVE-2026-154107.2 HIG

KEV—71SonicWall SMA1000 Appliances Code Injection Vulnerability15h CVE-2025-312778.8 HIG

KEV—71Apple Multiple Products Buffer Overflow Vulnerability2d CVE-2026-1540910.0 CRI

KEV—70SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability15h CVE-2026-125699.8 CRI

KEV—70PTC Windchill and FlexPLM Improper Input Validation Vulnerability16d CVE-2026-4855810.0 CRI

KEV—69SimpleHelp Authentication Bypass Vulnerability16d CVE-2026-468179.8 CRI

KEV—68Oracle E-Business Suite Improper Privilege Management Vulnerability15h CVE-2025-670389.8 CRI

KEV—67Lantronix EDS5000 Code Injection Vulnerability10d CVE-2023-43467.5 HIG

KEV—66KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability15h CVE-2026-562919.8 CRI

KEV—66Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability6d CVE-2026-552558.4 HIG

KEV—63Langflow Authorization Bypass Through User-Controlled Key Vulnerability8d CVE-2026-561557.8 HIG

KEV—59Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 1d CVE-2023-349609.8 CRI

——30A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name.8d CVE-2021-252996.1 MED

——30Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server.8d CVE-2023-376799.8 CRI

——30A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.8d