Live data
Exploited vulnerabilities, page 3
Entries 101 to 150
1,739 in total| Product | What an attacker gains | Concerns | Severity | Added |
|---|---|---|---|---|
SonicWall SMA1000 AppliancesCVE-2026-15409 | Server-side request forgeryused by ransomware | Business | 10.0 | |
Cisco IOSCVE-2008-4128 | Request forgery | Everyone | 8.1 | |
Balbooa FormsCVE-2026-56291 | File access | Business | 10.0 | |
iCagendaCVE-2026-48939 | File access | Business | 10.0 | |
Joomlack Page BuilderCVE-2026-56290 | Improper access control | Business | 10.0 | |
LangflowCVE-2026-55255 | Security bypass | Business | 8.4 | |
JoomShaper SP Page BuilderCVE-2026-48908 | File access | Business | 10.0 | |
Adobe ColdFusionCVE-2026-48282 | File access | Business | 10.0 | |
Microsoft SharePoint ServerCVE-2026-45659 | Code executionused by ransomware | Business | 8.8 | |
SimpleHelpCVE-2026-48558 | Authentication bypass | Business | 9.5 | |
Cisco Unified Communications ManagerCVE-2026-20230 | Server-side request forgery | Business | 8.6 | |
PTC Windchill and FlexPLMCVE-2026-12569 | Improper access controlused by ransomware | Business | 9.3 | |
Ubiquiti UniFi OSCVE-2026-34910 | Improper access control | Home network | 10.0 | |
Ubiquiti UniFi OSCVE-2026-34909 | File access | Home network | 10.0 | |
Ubiquiti UniFi OSCVE-2026-34908 | Improper access control | Home network | 10.0 | |
Lantronix EDS5000CVE-2025-67038 | Code execution | Business | 9.3 | |
Splunk EnterpriseCVE-2026-20253 | Authentication bypass | Business | 9.8 | |
Widget Factory Joomla Content EditorCVE-2026-48907 | Improper access control | Business | 10.0 | |
LiteSpeed cPanel PluginCVE-2026-54420 | Vulnerability | Business | 8.5 | |
Cisco Catalyst SD-WAN ManagerCVE-2026-20262 | File access | Business | 6.5 | |
Oracle PeopleSoft Enterprise PeopleToolsCVE-2026-35273 | Authentication bypassused by ransomware | Business | 9.8 | |
Ivanti SentryCVE-2026-10520 | Code execution | Business | 10.0 | |
Arista Extensible Operating SystemCVE-2026-7473 | Vulnerability | Business | 6.9 | |
Cisco Catalyst SD-WAN ManagerCVE-2026-20245 | Vulnerability | Business | 7.8 | |
Google Chromium V8CVE-2026-11645 | Information disclosure | Everyone | 8.8 | |
Check Point Security GatewayCVE-2026-50751 | Authentication bypassused by ransomware | Business | 9.3 | |
BerriAI LiteLLMCVE-2026-42271 | Code execution | Business | 8.7 | |
SolarWinds Serv-UCVE-2026-28318 | Denial of service | Business | 7.5 | |
Mirasvit Full Page Cache WarmerCVE-2026-45247 | Code execution | Business | 9.3 | |
Android FrameworkCVE-2025-48595 | Memory corruption | Everyone | 8.4 | |
Linux KernelCVE-2022-0492 | Authentication bypass | Everyone | 7.8 | |
Oracle WebLogic ServerCVE-2024-21182 | Vulnerability | Business | 7.5 | |
Palo Alto Networks PAN-OSCVE-2026-0257 | Authentication bypassused by ransomware | Business | 7.8 | |
Daemon Tools LiteCVE-2026-8398 | Vulnerability | Business | 9.3 | |
Nx ConsoleCVE-2026-48027 | Authentication bypassused by ransomware | Business | 9.3 | |
TanStackCVE-2026-45321 | Authentication bypassused by ransomware | Business | 9.6 | |
LiteSpeed cPanel PluginCVE-2026-48172 | Privilege escalation | Business | 10.0 | |
Drupal CoreCVE-2026-9082 | SQL injection | Business | 9.8 | |
Trend Micro Apex OneCVE-2026-34926 | File access | Business | 6.7 | |
LangflowCVE-2025-34291 | Authentication bypass | Business | 9.4 | |
Microsoft DefenderCVE-2026-45498 | Denial of service | Business | 7.5 | |
Microsoft DefenderCVE-2026-41091 | File access | Business | 7.8 | |
Microsoft Internet ExplorerCVE-2010-0806 | Memory corruption | Everyone | 8.8 | |
Microsoft Internet ExplorerCVE-2010-0249 | Memory corruption | Everyone | 8.8 | |
Adobe Acrobat and ReaderCVE-2009-3459 | Memory corruption | Everyone | 8.8 | |
Microsoft DirectXCVE-2009-1537 | Vulnerability | Business | 8.8 | |
Microsoft WindowsCVE-2008-4250 | Memory corruption | Everyone | 9.8 | |
MicrosoftCVE-2026-42897 | Cross-site scripting | Business | 6.1 | |
Cisco Catalyst SD-WANCVE-2026-20182 | Authentication bypass | Business | 10.0 | |
BerriAI LiteLLMCVE-2026-42208 | SQL injection | Business | 9.3 |
Source: CISA Known Exploited Vulnerabilities catalogsource updated Oct 8, 2026, 20:09 UTC
Severity (CVSS): NIST NVD