Vulnerabilities exploitable today
29in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,256
- High9,258
- Medium5,266
- Low507
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-663845.3 MED45.3%
KEV—64JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability3dCVE-2026-533627.8 HIG41.5%
KEV—62Linux Kernel Unspecified Vulnerability3dCVE-2023-491059.8 CRI98.6%
KEV—80ownCloud Improper Authentication Vulnerability3dCVE-2026-84529.8 CRI74.1%
KEV—72Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability4dCVE-2022-09957.8 HIG95.1%
KEV—79Linux Kernel Out-of-Bounds Write Vulnerability4dCVE-2021-237588.1 HIG99.7%
KEV—80Ajax.NET Professional Deserialization of Untrusted Data Vulnerability4dCVE-2019-10688.8 HIG98.9%
KEV—80Microsoft SQL Server Remote Code Execution Vulnerability4dCVE-2015-52877.8 HIG91.6%
KEV—77Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability4dCVE-2015-32465.1 MED94.8%
KEV—78Red Hat Libuser Race Condition Vulnerability4dCVE-2026-600049.8 CRI99.7%
KEV—80Gitea Code Injection Vulnerability4dCVE-2026-2196210.0 CRI98.6%
KEV—80Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability6dCVE-2026-735708.9 HIG97.3%
KEV—79Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability7dCVE-2026-725309.0 CRI77.3%
KEV—73TrueConf Server Code Injection Vulnerability10dCVE-2026-725299.8 CRI73.4%
KEV—72TrueConf Server Missing Authentication for Critical Function Vulnerability10dCVE-2026-648499.3 CRI96.7%
KEV—79MLflow Server-Side Request Forgery Vulnerability11dCVE-2026-654009.8 CRI95.2%
KEV—79Apple macOS Improper Authentication Vulnerability12dCVE-2026-593109.8 CRI98.7%
KEV—80Broadcom VMware vCenter Path Traversal Vulnerability12dCVE-2026-550409.1 CRI98.5%
KEV—80Microsoft SharePoint Weak Authentication Vulnerability12dCVE-2026-338249.8 CRI99.4%
KEV—80Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability12dCVE-2025-625938.8 HIG96.8%
KEV—79Ray-Project Ray Code Injection Vulnerability13dCVE-2026-688207.0 HIG93.0%
KEV—78Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability15dCVE-2026-203498.6 HIG81.4%
KEV—74Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability19dCVE-2026-7289810.0 CRI99.6%
KEV—80Metabase SQL Injection Vulnerability19dCVE-2026-80379.6 CRI99.9%
KEV—80Progress LoadMaster Command Injection Vulnerability21dCVE-2026-630779.8 CRI99.7%
KEV—80JetBrains TeamCity Deserialization of Untrusted Data Vulnerability25dCVE-2026-185567.4 HIG98.5%
KEV—80N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability26dCVE-2026-91989.8 CRI98.3%
KEV—79IBM Langflow Code Injection Vulnerability14dCVE-2026-344867.5 HIG99.9%
KEV—80Apache Tomcat Missing Encryption of Sensitive Data Vulnerability21dCVE-2026-185778.1 HIG98.9%
KEV—80N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability27d