Vulnerabilities exploitable today
32in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,748
New KEV · 24H0
Exploit Today ≥ 701,665
Distribution · last window
- Critical3,339
- High15,160
- Medium14,092
- Low1,351
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1027649.8 CRI67.2%
KEV—70BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability3dCVE-2025-616246.0 MED64.6%
KEV—69Fortinet Multiple Products Path Traversal Vulnerability3dCVE-2026-215897.5 HIG96.2%
KEV—79Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability13hCVE-2026-03227.2 HIG68.1%
KEV—70Palo Alto Networks PAN-OS Code Injection Vulnerability5dCVE-2026-765199.8 CRI75.0%
KEV—73Cisco Secure Email Gateway Relative Path Traversal Vulnerability5dCVE-2026-10513410.0 CRI91.8%
KEV—78Ahsay AhsayCBS Command Injection Vulnerability5dCVE-2026-1051337.3 HIG57.6%
KEV—67Ahsay AhsayCBS Improper Authentication Vulnerability5dCVE-2026-969518.8 HIG74.1%
KEV—72Microsoft Windows Command Injection Vulnerability4dCVE-2026-1049358.6 HIG98.0%
KEV—79Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability7dCVE-2023-228944.9 MED89.3%
KEV—77Strapi Cleartext Storage of Sensitive Information Vulnerability11dCVE-2021-31999.8 CRI97.4%
KEV—79ONLYOFFICE Docs Server Path Traversal Vulnerability11dCVE-2016-30818.1 HIG99.9%
KEV—80Apache Struts Command Injection Vulnerability11dCVE-2015-54777.5 HIG99.9%
KEV—80 ISC BIND Data Processing Errors Vulnerability11dCVE-2015-330610.0 CRI99.9%
KEV—80ProFTPD Improper Access Control Vulnerability11dCVE-2026-887797.5 HIG47.2%
KEV—64Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability15dCVE-2026-1024907.8 HIG44.8%
KEV—63Zammad GmbH Zammad Improper Privilege Management Vulnerability11dCVE-2026-1024899.8 CRI69.0%
KEV—71Zammad GmbH Zammad Session Fixation Vulnerability10dCVE-2026-1042869.8 CRI82.2%
KEV—75Fortinet FortiMail Path Traversal Vulnerability13dCVE-2026-765049.8 CRI78.4%
KEV—74Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability17dCVE-2026-869508.8 HIG68.7%
KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability19dCVE-2026-887728.1 HIG70.0%
KEV—71Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability22dCVE-2026-887719.8 CRI64.6%
KEV—69Citrix NetScaler Improper Input Validation Vulnerability21dCVE-2026-879028.1 HIG98.6%
KEV—80WordPress Core Remote File Inclusion Vulnerability22dCVE-2026-672796.5 MED63.0%
KEV—69Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability24dCVE-2026-656608.8 HIG81.4%
KEV—74Microsoft SharePoint Code Injection Vulnerability24dCVE-2026-713629.1 CRI99.8%
KEV—80Adobe Commerce and Magento Incorrect Authorization Vulnerability 25dCVE-2026-543010.0 CRI47.0%
KEV—64WSO2 Multiple Products Path Traversal Vulnerability 25dCVE-2026-941279.8 CRI82.4%
KEV—75F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability27dCVE-2026-936169.8 CRI99.5%
KEV—80Check Point Multiple Products Path Traversal Vulnerability27dCVE-2026-9395210.0 CRI64.0%
KEV—69Arista VeloCloud Orchestrator Improper Input Validation Vulnerability27dCVE-2026-851029.8 CRI98.9%
KEV—80Check Point Multiple Products Improper Certificate Validation Vulnerability27dCVE-2026-72738.8 HIG84.5%
KEV—75Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability28d