Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,274
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-21643—99.8%
KEV—80Fortinet FortiClient EMS SQL Injection Vulnerability—CVE-2016-4117—99.8%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability—CVE-2025-4008—99.8%
KEV—80Smartbedded Meteobridge Command Injection Vulnerability—CVE-2020-1147—99.8%
KEV—80Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability—CVE-2018-10561—99.8%
KEV—80Dasan GPON Routers Authentication Bypass Vulnerability—CVE-2022-33891—99.8%
KEV—80Apache Spark Command Injection Vulnerability—CVE-2024-48248—99.8%
KEV—80NAKIVO Backup and Replication Absolute Path Traversal Vulnerability—CVE-2020-2551—99.8%
KEV—80Oracle Fusion Middleware Unspecified Vulnerability—CVE-2020-5849—99.8%
KEV—80Unraid Authentication Bypass Vulnerability—CVE-2024-6670—99.8%
KEVR80Progress WhatsUp Gold SQL Injection Vulnerability—CVE-2022-24706—99.8%
KEV—80Apache CouchDB Insecure Default Initialization of Resource Vulnerability—CVE-2024-559569.8 CRI99.8%
KEVR80Cleo Multiple Products Unauthenticated File Upload Vulnerability26dCVE-2026-0257—99.8%
KEVR80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2024-28987—99.8%
KEV—80SolarWinds Web Help Desk Hardcoded Credential Vulnerability—CVE-2021-21315—99.8%
KEV—80System Information Library for Node.JS Command Injection—CVE-2019-2616—99.8%
KEV—80Oracle BI Publisher Unauthorized Access Vulnerability—CVE-2012-5076—99.8%
KEV—80Oracle Java SE Sandbox Bypass Vulnerability—CVE-2022-370429.8 CRI99.8%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability27dCVE-2020-8243—99.8%
KEV—80Ivanti Pulse Connect Secure Code Execution Vulnerability—CVE-2022-43939—99.8%
KEV—80Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability—CVE-2025-5086—99.8%
KEV—80Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability—CVE-2021-423218.8 HIG99.8%
KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability12dCVE-2023-40044—99.8%
KEVR80Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability—CVE-2023-36844—99.8%
KEV—80Juniper Junos OS EX Series PHP External Variable Modification Vulnerability—CVE-2017-3066—99.8%
KEV—80Adobe ColdFusion Deserialization Vulnerability—CVE-2024-5910—99.8%
KEV—80Palo Alto Networks Expedition Missing Authentication Vulnerability—CVE-2025-11371—99.8%
KEV—80Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability—CVE-2010-2568—99.8%
KEV—80Microsoft Windows Remote Code Execution Vulnerability—CVE-2025-6218—99.8%
KEV—80RARLAB WinRAR Path Traversal Vulnerability—CVE-2010-0249—99.8%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2020-29583—99.8%
KEV—80Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability—CVE-2020-10148—99.8%
KEV—80SolarWinds Orion Authentication Bypass Vulnerability—CVE-2026-20182—99.8%
KEV—80Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability—CVE-2026-356169.8 CRI99.8%
KEV—80Fortinet FortiClient EMS Improper Access Control Vulnerability38dCVE-2009-39606.5 MED99.8%
KEVR80Adobe BlazeDS Information Disclosure Vulnerability25dCVE-2025-92429.8 CRI99.8%
KEV—80WatchGuard Firebox Out-of-Bounds Write Vulnerability21dCVE-2024-40711—99.8%
KEVR80Veeam Backup and Replication Deserialization Vulnerability—CVE-2019-6340—99.8%
KEV—80Drupal Core Remote Code Execution Vulnerability—CVE-2020-3952—99.8%
KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2016-3427—99.8%
KEV—80Oracle Java SE and JRockit Unspecified Vulnerability—