Vulnerabilities exploitable today
367,284in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,687
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,295
- High9,357
- Medium5,357
- Low528
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2024-49266—17.6%
——5——CVE-2026-15469—17.6%
——5The use of
hard-coded cryptographic key vulnerability has been identified in the mesh
functionality of Deco XE75 v3, XE5300 v3.6 and WE10800 v3.6.
A shared RSA-512 mesh group private key is present in the affected
firmware and is used by the mesh protocol for node authentication. An attacker who obtains the firmware image
and has local network access may be able to authenticate as a mesh node without
possessing a device-specific credential.
Successful
exploitation may allow an unauthenticated adjacent attacker to impersonate a
trusted mesh node and bypass mesh node authentication, which may permit unauthorized
changes to device or mesh configuration, affecting confidentiality, integrity
and availability.4dCVE-2026-728298.8 HIG17.6%
——5The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope-cap bypass in UsersController's create() and update() methods. These methods enforce the scope cap only for api.users.write, but gate super-privilege grants on a bare isSuperAdmin() check that reads access.api.super directly without consulting the key's scopes. As a result, an api.users.write-scoped key minted on a super account can set access.api.super or assign a super-granting group to mint or promote a full super account, then authenticate as that account for uncapped administrative privileges.19hCVE-2026-733257.8 HIG17.6%
——5Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() unconditionally calls torch.load with weights_only=False, invoking Python's pickle machinery during deserialization. Attackers can embed malicious __reduce__ methods in a crafted model checkpoint to execute arbitrary Python code, including system commands, when the library loads the file from a caller-selected model directory.8dCVE-2024-50415—17.6%
——5——CVE-2026-537827.4 HIG17.6%
——5Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private ranges, or other reserved destinations by supplying malicious podcast:transcript URL values. Attackers can bypass protections through DNS rebinding and redirect-based techniques, as redirect targets are not revalidated and hostnames are not resolved before request dispatch, exposing internal service responses through the summarization flow.49dCVE-2024-32897—17.6%
——5——CVE-2026-21910—17.6%
——5——CVE-2024-46753—17.6%
——5——CVE-2026-115196.3 MED17.6%
——5A security flaw has been discovered in SourceCodester Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /Product_Inventory/api/users_handler.php of the component Account Creation Handler. The manipulation of the argument ROLE results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.40dCVE-2026-40922—17.6%
——5——CVE-2024-50412—17.6%
——5——CVE-2026-118505.0 MED17.6%
——5An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv_len is 0 or 1, the subtraction wraps to a large value which is then truncated to uint16_t, yielding 0xFFFE (65534) or 0xFFFF (65535). The subsequent malloc succeeds and memcpy reads up to 65534 bytes from a 0-1 byte buffer, resulting in a heap out-of-bounds read.
The attack vector involves a malicious or compromised LDAP KDB backend returning a krbExtraData attribute with bv_len < 2, triggering the underflow when the KDC or kadmind reads principal data.22hCVE-2024-47377—17.6%
——5——CVE-2022-49728—17.6%
——5——CVE-2022-40633—17.6%
——5——CVE-2026-30128.0 HIG17.6%
——5A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.22hCVE-2020-7267—17.6%
——5——CVE-2025-6433—17.6%
——5——CVE-2026-22343—17.6%
——5——CVE-2024-57900—17.6%
——5——CVE-2025-52048—17.6%
——5——CVE-2025-52820—17.6%
——5——CVE-2024-47332—17.6%
——5——CVE-2024-12117—17.6%
——5——CVE-2024-21937—17.6%
——5——CVE-2024-44999—17.6%
——5——CVE-2026-25490—17.6%
——5——CVE-2026-8607—17.6%
——5——CVE-2023-46228—17.6%
——5——CVE-2026-73558—17.6%
——5——CVE-2021-27904—17.6%
——5——CVE-2021-34398—17.6%
——5——CVE-2023-39311—17.6%
——5——CVE-2025-56699—17.6%
——5——CVE-2026-40210—17.6%
——5——CVE-2025-65118—17.6%
——5——CVE-2025-67492—17.6%
——5——CVE-2026-24904—17.6%
——5——CVE-2024-7571—17.6%
——5——