PULSEUnderground Intel

LIVE21signals / 24h

FEED

ransomscarlettgroup reclama a nbcuniversal.com · US · Technologyransomn0n reclama a Xylanpicks · US · Not Foundransombravox reclama a GSE-M Technology Sdn. Bhd. · MY · Technologyransomemperador reclama a Bruin Group LLC · US · Otherransomsilentransomgroup reclama a M... M... · Not Foundransomsilentransomgroup reclama a P... H... · Not Foundransomglobal secret group reclama a Graves Fireplaces, Inc. · US · Manufacturingransomincransom reclama a centralrogers.com · US · Otherransomdark project reclama a Asensus Surgical · US · Healthcareransomdark project reclama a The Excalibur Group · US · Not Foundransomsilentransomgroup reclama a P...S...R... · Not Foundransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Educationransomscarlettgroup reclama a nbcuniversal.com · US · Technologyransomn0n reclama a Xylanpicks · US · Not Foundransombravox reclama a GSE-M Technology Sdn. Bhd. · MY · Technologyransomemperador reclama a Bruin Group LLC · US · Otherransomsilentransomgroup reclama a M... M... · Not Foundransomsilentransomgroup reclama a P... H... · Not Foundransomglobal secret group reclama a Graves Fireplaces, Inc. · US · Manufacturingransomincransom reclama a centralrogers.com · US · Otherransomdark project reclama a Asensus Surgical · US · Healthcareransomdark project reclama a The Excalibur Group · US · Not Foundransomsilentransomgroup reclama a P...S...R... · Not Foundransomaurora reclama a Duarte Nursery, Inc. · US · Agriculture and Food Productionransomn0n reclama a 51Ridge (Newark NJ hosting/IT) · US · Technologyransombooba project reclama a Research Foundation of The City University of New York · US · Education

CVE Watch401,106 in full archive

Vulnerabilities exploitable today

401,106in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,665

Distribution · last window

Critical
3,504
High
15,974
Medium
14,897
Low
1,475

Filters

Filters

Window

Severity

Flags

Vulnerabilities1,721–1,760 · 401,106

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-887797.5 HIG

KEV—64Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability16d CVE-2026-587048.8 HIG

KEV—64Google Pixel Improper Authorization Vulnerability14d CVE-2026-543010.0 CRI

KEV—64WSO2 Multiple Products Path Traversal Vulnerability 26d CVE-2025-48928—

KEV—64TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability—CVE-2026-1024907.8 HIG

KEV—63Zammad GmbH Zammad Improper Privilege Management Vulnerability12d CVE-2026-349266.7 MED

KEV—63Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability90d CVE-2021-25489—

KEV—63Samsung Mobile Devices Improper Input Validation Vulnerability—CVE-2026-42897—

KEV—63Microsoft Exchange Server Cross-Site Scripting Vulnerability—CVE-2021-1906—

KEV—63Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability—CVE-2022-48618—

KEV—62Apple Multiple Products Memory Corruption Vulnerability—CVE-2024-29745—

KEV—62Android Pixel Information Disclosure Vulnerability—CVE-2025-21480—

KEV—62Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability—CVE-2025-47729—

KEV—61TeleMessage TM SGNL Hidden Functionality Vulnerability—CVE-2026-41091—

KEV—61Microsoft Defender Link Following Vulnerability—CVE-2025-435205.5 MED

KEV—61Apple Multiple Products Classic Buffer Overflow Vulnerability14d CVE-2022-22071—

KEV—60Qualcomm Multiple Chipsets Use-After-Free Vulnerability—CVE-2021-25394—

KEV—60Samsung Mobile Devices Race Condition Vulnerability—CVE-2026-338257.8 HIG

KEVR60Microsoft Defender Insufficient Granularity of Access Control Vulnerability89d CVE-2026-966567.2 HIG

KEV—60Plex Media Server External Control of File Name or Path Vulnerability7h CVE-2026-819637.8 HIG

KEV—60Microsoft Windows Link Following Vulnerability42d CVE-2022-22265—

KEV—59Samsung Mobile Devices Use-After-Free Vulnerability—CVE-2021-25395—

KEV—59Samsung Mobile Devices Race Condition Vulnerability—CVE-2025-435107.8 HIG

KEV—58Apple Multiple Products Improper Locking Vulnerability14d CVE-2026-561557.8 HIG

KEV—58Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 98d CVE-2026-688207.0 HIG

KEV—57Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability66d CVE-2026-3502—

KEV—57TrueConf Client Download of Code Without Integrity Check Vulnerability—CVE-2023-21237—

KEV—55Android Pixel Information Disclosure Vulnerability —CVE-2025-486335.5 MED

KEV—55Android Framework Information Disclosure Vulnerability14d CVE-2025-485727.8 HIG

KEV—55Android Framework Privilege Escalation Vulnerability14d CVE-2026-878867.8 HIG

KEV—54Acronis Backup Incorrect Default Permissions Vulnerability33d CVE-2026-966546.5 MED

KEV—54Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability7h CVE-2026-966524.3 MED

KEV—54Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability7h CVE-2026-966554.3 MED

KEV—54Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability7h CVE-2026-1109366.7 MED

KEV—51Siemens Software Center Uncontrolled Search Path Element Vulnerability7h CVE-2023-50387—

——30——CVE-2014-3566—

——30——CVE-2021-451055.9 MED

——30Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.57d CVE-2024-29823—

——30——CVE-2012-1459—

——30——CVE-2014-0195—