Threat level Severe
Contact

· Vulnerability feed · live

CVE feed

Aggregated from NVD and the CISA Known Exploited Vulnerabilities catalog, updated every 30 minutes. Scores use CVSS v3.1 where published.

RSS feed

Top vendors, last 30 days

1,544 published, 18 exploited
7d30d90d2026 YTD
VendorOct 5Oct 7Oct 14Oct 21Oct 28Total
Google237331530108
Microsoft271477
Oracle64266
ThemeREX3652566
HPE17132353
Apache1131715248
IBM383647
TOTOLINK3307444
Adobe26935
Wavlink332026
Cisco1615123
Dell811818
Filters
Severity
Status
Newly exploitedAdded to KEV, last 7 days7Added to KEV, last 30 days33
Vendor
137 results last 30 daysOracle Cisco Apache Sort:NewestExploited firstLikely exploitedCVSS
9.8Apache MINA — unsafe deserialization.EPSS 0.6%9.8Apache Fineract — SQL injection.EPSS 0.6%8.6Cisco Secure Firewall ASA Software and Cisco Secure FTD Software — Unchecked Return Value to NULL Pointer Dereference.ExploitedEPSS 0.8%9.1Oracle Oracle Java SE — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition…EPSS 0.3%9.1Oracle Oracle Java SE — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition…EPSS 0.4%10.0Apache Traffic Server — incorrect authorization.EPSS 0.4%10.0Apache Traffic Server — improper certificate validation.EPSS 0.2%10.0Apache Traffic Server — improper certificate validation.EPSS 0.2%9.3Apache Apache Traffic Server — Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or…EPSS 0.2%9.0Apache Traffic Server — missing authentication.EPSS 0.4%9.3Apache Apache Traffic Server — Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse…EPSS 0.3%10.0Apache Apache Traffic Server — Apache Traffic Server's experimental magick plugin lets an unauthenticated client control…EPSS 0.5%10.0Apache Pulsar Manager — missing authentication.EPSS 0.7%9.2Apache Pulsar — improper signature verification.EPSS 0.3%9.8Cisco Emergency Responder — authentication bypass.EPSS 0.5%9.3Cisco Emergency Responder — cross-site scripting.EPSS 0.3%9.8Cisco TelePresence Video Communication Server (VCS) Expressway — remote code execution.EPSS 0.4%9.8Cisco Emergency Responder — injection.EPSS 0.5%9.0Cisco Cyber Vision — out-of-bounds write.EPSS 0.4%9.1Apache bRPC — authentication bypass.EPSS 0.6%9.1Apache bRPC — missing authentication.EPSS 0.7%9.8Apache IoTDB — missing authentication.EPSS 0.6%9.1Apache bRPC — out-of-bounds write.EPSS 1.0%9.1Apache bRPC — authentication bypass.EPSS 0.6%9.8Apache IoTDB — authentication bypass.EPSS 0.6%