PULSEUnderground Intel

LIVE0signals / 24h

FEED

vulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-25249 — Fortinet / Multiple ProductsvulnKEV agrega CVE-2026-87491 — Google / Chromium V8vulnKEV agrega CVE-2026-20079 — Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-25249 — Fortinet / Multiple ProductsvulnKEV agrega CVE-2026-87491 — Google / Chromium V8vulnKEV agrega CVE-2026-20079 — Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management

CVE Watch376,337 in full archive

Vulnerabilities exploitable today

376,337in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,713

New KEV · 24H0

Exploit Today ≥ 701,646

Distribution · last window

Critical
2,372
High
8,700
Medium
6,720
Low
721

Filters

Filters

Window

Severity

Flags

Vulnerabilities262,801–262,840 · 376,337

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2017-18407—

——9——CVE-2024-45761—

——9——CVE-2026-828204.3 MED

——9A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as f412a33b9a84c2d1a9dee145a868feddbf64879e. A patch should be applied to remediate this issue. The project maintainer doubts the security impact: "While I acknowledged the bugs and provided fixes, I have yet to see any way to exploit these alleged vulnerabilities."17d CVE-2011-3214—

——9——CVE-2011-1828—

——9——CVE-2023-28020—

——9——CVE-2026-2693—

——9——CVE-2026-783148.8 HIG

——9SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.17d CVE-2026-658867.5 HIG

——9Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers to view arbitrary files.44d CVE-2026-783168.8 HIG

——9SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.17d CVE-2014-9903—

——9——CVE-2024-34768—

——9——CVE-2025-8033—

——9——CVE-2025-10186—

——9——CVE-2026-416957.5 HIG

——9Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14.57d CVE-2026-22734—

——9——CVE-2023-30538—

——9——CVE-2015-6333—

——9——CVE-2026-500839.1 CRI

——9The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critical). When combined with CVE-2026-50082, CVE-50084, and CVE-50085, this can lead to a fully unauthenticated, remote takeover of affected devices.71d CVE-2003-0794—

——9——CVE-2012-4453—

——9——CVE-2024-29934—

——9——CVE-2025-12335—

——9——CVE-2017-14577—

——9——CVE-2024-11129—

——9——CVE-2003-0334—

——9——CVE-2026-2468—

——9——CVE-2023-31416—

——9——CVE-2026-454748.4 HIG

——9Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.57d CVE-2026-454638.4 HIG

——9Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.57d CVE-2017-10743—

——9——CVE-2026-131077.1 HIG

——9IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.2d CVE-2024-5553—

——9——CVE-2026-727099.8 CRI

——9SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to invoke privileged actions by supplying only a valid CSRF nonce without any server-side permission check. Attackers can bypass template-level authorization guards through direct HTTP requests to invoke actions such as editer_auteur, enabling arbitrary account password rewrites including administrator accounts and resulting in full account takeover.4d CVE-2023-50017—

——9——CVE-2025-12334—

——9——CVE-2026-580819.8 CRI

——9Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.18d CVE-2025-23086—

——9——CVE-2017-14293—

——9——CVE-2019-15959—