Base des vulnérabilités à forte valeur suivies et priorisées par FactualRisk (KEV, P0/P1, exploitées dans la nature, EPSS élevé). Chaque fiche reste accessible en permanence et est mise à jour à chaque collecte.
| CVE | Produit | CVSS | Prio | KEV |
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 10.0 | P0 | KEV |
| CVE-2024-1212 | Progress Kemp LoadMaster | 10.0 | P0 | KEV |
| CVE-2024-3400 | Palo Alto Networks PAN-OS | 10.0 | P0 | KEV |
| CVE-2023-46604 | Apache ActiveMQ | 10.0 | P0 | KEV |
| CVE-2023-20198 | Cisco IOS XE Web UI | 10.0 | P0 | KEV |
| CVE-2026-10520 | Ivanti Sentry | 10.0 | P0 | KEV |
| CVE-2026-34910 | Ubiquiti UniFi OS | 10.0 | P0 | KEV |
| CVE-2026-34909 | Ubiquiti UniFi OS | 10.0 | P0 | KEV |
| CVE-2026-34908 | Ubiquiti UniFi OS | 10.0 | P0 | KEV |
| CVE-2026-48558 | SimpleHelp SimpleHelp | 10.0 | P0 | KEV |
| CVE-2026-48282 | Adobe ColdFusion | 10.0 | P0 | KEV |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | 10.0 | P0 | KEV |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 10.0 | P0 | KEV |
| CVE-2026-72898 | Metabase Metabase | 10.0 | P0 | KEV |
| CVE-2026-58231 | 10.0 | P0 | ||
| CVE-2026-69836 | 10.0 | P0 | ||
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Ser | 10.0 | P0 | KEV |
| CVE-2026-55255 | Langflow Langflow | 9.9 | P0 | KEV |
| CVE-2026-48752 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P0 | |
| CVE-2026-48027 | Nx Nx Console | 9.8 | P0 | KEV |
| CVE-2026-8398 | Daemon Daemon Tools Lite | 9.8 | P0 | KEV |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 9.8 | P0 | KEV |
| CVE-2026-9082 | Drupal Core | 9.8 | P0 | KEV |
| CVE-2008-4250 | Microsoft Windows | 9.8 | P0 | KEV |
| CVE-2026-42208 | BerriAI LiteLLM | 9.8 | P0 | KEV |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 9.8 | P0 | KEV |
| CVE-2024-21413 | Microsoft Office Outlook | 9.8 | P0 | KEV |
| CVE-2023-29357 | Microsoft SharePoint Server | 9.8 | P0 | KEV |
| CVE-2023-22518 | Atlassian Confluence Data Center and Serve | 9.8 | P0 | KEV |
| CVE-2023-22515 | Atlassian Confluence Data Center and Serve | 9.8 | P0 | KEV |
| CVE-2023-42793 | JetBrains TeamCity | 9.8 | P0 | KEV |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN | 9.8 | P0 | KEV |
| CVE-2023-23397 | Microsoft Office | 9.8 | P0 | KEV |
| CVE-2022-47966 | Zoho ManageEngine | 9.8 | P0 | KEV |
| CVE-2022-42475 | Fortinet FortiOS | 9.8 | P0 | KEV |
| CVE-2022-40684 | Fortinet Multiple Products | 9.8 | P0 | KEV |
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 9.8 | P0 | KEV |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 9.8 | P0 | KEV |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 9.8 | P0 | KEV |
| CVE-2026-20253 | Splunk Enterprise | 9.8 | P0 | KEV |
| CVE-2025-67038 | Lantronix EDS5000 | 9.8 | P0 | KEV |
| CVE-2026-9698 | Ubuntu | 9.8 | P0 | |
| CVE-2026-12569 | PTC Windchill and FlexPLM | 9.8 | P0 | KEV |
| CVE-2026-42601 | pip archivebox | 9.8 | P0 | |
| CVE-2026-48908 | JoomShaper SP Page Builder | 9.8 | P0 | KEV |
| CVE-2026-56290 | Joomlack Page Builder | 9.8 | P0 | KEV |
| CVE-2026-56291 | Balbooa Forms | 9.8 | P0 | KEV |
| CVE-2026-48939 | iCagenda iCagenda | 9.8 | P0 | KEV |
| CVE-2026-56164 | Microsoft SharePoint Server | 9.8 | P0 | KEV |
| CVE-2026-46817 | Oracle E-Business Suite | 9.8 | P0 | KEV |
| CVE-2026-58644 | Microsoft SharePoint | 9.8 | P0 | KEV |
| CVE-2026-25089 | Fortinet FortiSandbox | 9.8 | P0 | KEV |
| CVE-2026-39808 | Fortinet FortiSandbox | 9.8 | P0 | KEV |
| CVE-2026-63030 | WordPress Core | 9.8 | P0 | KEV |
| CVE-2026-0770 | Langflow Langflow | 9.8 | P0 | KEV |
| CVE-2026-50522 | Microsoft SharePoint | 9.8 | P0 | KEV |
| CVE-2026-16232 | Check Point SmartConsole | 9.8 | P0 | KEV |
| CVE-2026-63077 | JetBrains TeamCity | 9.8 | P0 | KEV |
| CVE-2026-9198 | IBM Langflow | 9.8 | P0 | KEV |
| CVE-2026-8037 | Progress LoadMaster | 9.8 | P0 | KEV |
| CVE-2026-59310 | Broadcom VMware vCenter | 9.8 | P0 | KEV |
| CVE-2026-62878 | 9.8 | P0 | ||
| CVE-2026-42027 | maven org.apache.opennlp:opennlp-tools | 9.8 | P0 | |
| CVE-2026-65400 | Apple macOS | 9.8 | P0 | KEV |
| CVE-2026-15748 | 9.8 | P0 | ||
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Serv | 9.8 | P0 | KEV |
| CVE-2026-72529 | TrueConf Server | 9.8 | P0 | KEV |
| CVE-2026-60004 | Gitea Gitea | 9.8 | P0 | KEV |
| CVE-2026-19912 | 9.8 | P0 | ||
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professiona | 9.8 | P0 | KEV |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 9.8 | P0 | KEV |
| CVE-2023-49105 | ownCloud ownCloud | 9.8 | P0 | KEV |
| CVE-2026-74233 | 9.8 | P0 | ||
| CVE-2026-74232 | 9.8 | P0 | ||
| CVE-2026-81578 | PaperCut NG/MF | 9.8 | P0 | KEV |
| CVE-2026-82329 | 9.8 | P0 | ||
| CVE-2026-45321 | TanStack TanStack | 9.6 | P0 | KEV |
| CVE-2026-48519 | pip langflow | 9.6 | P0 | |
| CVE-2026-6875 | 9.5 | P0 | ||
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 9.4 | P0 | KEV |
| CVE-2026-73653 | npm @vitest/browser | 9.4 | P0 | |
| CVE-2025-62593 | Ray-Project Ray | 9.4 | P0 | KEV |
| CVE-2026-19478 | 9.4 | P0 | ||
| CVE-2026-82078 | PaperCut NG/MF | 9.4 | P0 | KEV |
| CVE-2026-50751 | Check Point Security Gateway | 9.3 | P0 | KEV |
| CVE-2026-64825 | pip homeassistant | 9.3 | P0 | |
| CVE-2026-64849 | MLflow MLflow | 9.3 | P0 | KEV |
| CVE-2026-0257 | Palo Alto Networks PAN-OS | 9.1 | P0 | KEV |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 9.1 | P0 | KEV |
| CVE-2026-34182 | Ubuntu | 9.1 | P0 | |
| CVE-2026-53486 | npm @xhmikosr/decompress | 9.1 | P0 | |
| CVE-2026-53512 | npm better-auth | 9.1 | P0 | |
| CVE-2026-60137 | WordPress Core | 9.1 | P0 | KEV |
| CVE-2026-55040 | Microsoft SharePoint | 9.1 | P0 | KEV |
| CVE-2026-50627 | maven org.apache.cxf:cxf-rt-rs-security-oa | 9.1 | P0 | |
| CVE-2026-11386 | Ubuntu | 9.0 | P0 | |
| CVE-2026-72530 | TrueConf Server | 9.0 | P0 | KEV |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 8.9 | P0 | KEV |
| CVE-2025-34291 | Langflow Langflow | 8.8 | P0 | KEV |
| CVE-2009-1537 | Microsoft DirectX | 8.8 | P0 | KEV |
| CVE-2009-3459 | Adobe Acrobat and Reader | 8.8 | P0 | KEV |
| CVE-2010-0249 | Microsoft Internet Explorer | 8.8 | P0 | KEV |
| CVE-2010-0806 | Microsoft Internet Explorer | 8.8 | P0 | KEV |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | 8.8 | P0 | KEV |
| CVE-2026-42271 | BerriAI LiteLLM | 8.8 | P0 | KEV |
| CVE-2026-35044 | pip bentoml | 8.8 | P0 | |
| CVE-2026-11645 | Google Chromium V8 | 8.8 | P0 | KEV |
| CVE-2026-46612 | go github.com/fission/fission | 8.8 | P0 | |
| CVE-2026-47162 | Ubuntu | 8.8 | P0 | |
| CVE-2026-12244 | Ubuntu | 8.8 | P0 | |
| CVE-2026-55698 | npm pnpm | 8.8 | P0 | |
| CVE-2026-45659 | Microsoft SharePoint Server | 8.8 | P0 | KEV |
| CVE-2026-47300 | Ubuntu | 8.8 | P0 | |
| CVE-2026-56001 | Ubuntu | 8.8 | P0 | |
| CVE-2026-56002 | Ubuntu | 8.8 | P0 | |
| CVE-2019-1068 | Microsoft SQL Server | 8.8 | P0 | KEV |
| CVE-2026-41241 | pip pretalx | 8.7 | P0 | |
| CVE-2026-49259 | composer nukeviet/nukeviet | 8.7 | P0 | |
| CVE-2026-71476 | npm nx | 8.7 | P0 | |
| CVE-2024-20353 | Cisco Adaptive Security Appliance (ASA) an | 8.6 | P0 | KEV |
| CVE-2026-20230 | Cisco Unified Communications Manager | 8.6 | P0 | KEV |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Ap | 8.6 | P0 | KEV |
| CVE-2026-54420 | LiteSpeed cPanel Plugin | 8.5 | P0 | KEV |
| CVE-2026-45414 | rubygems decidim | 8.5 | P0 | |
| CVE-2025-48595 | Android Framework | 8.4 | P0 | KEV |
| CVE-2026-49229 | npm @actual-app/sync-server | 8.3 | P0 | |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | 8.2 | P0 | KEV |
| CVE-2026-44016 | pip docling | 8.2 | P0 | |
| CVE-2026-54727 | pip proot-distro | 8.2 | P0 | |
| CVE-2026-54574 | pip proot-distro | 8.2 | P0 | |
| CVE-2026-18577 | N-able N-central | 8.2 | P0 | KEV |
| CVE-2026-18556 | N-able N-central | 8.2 | P0 | KEV |
| CVE-2026-42897 | Microsoft Microsoft | 8.1 | P0 | KEV |
| CVE-2024-21412 | Microsoft Windows | 8.1 | P0 | KEV |
| CVE-2026-47740 | composer shopper/framework | 8.1 | P0 | |
| CVE-2026-44249 | maven io.netty:netty-handler | 8.1 | P0 | |
| CVE-2026-53849 | npm openclaw | 8.1 | P0 | |
| CVE-2026-53857 | npm openclaw | 8.1 | P0 | |
| CVE-2026-12246 | Ubuntu | 8.1 | P0 | |
| CVE-2026-49340 | go go.senan.xyz/gonic | 8.1 | P0 | |
| CVE-2026-49286 | composer pontedilana/php-weasyprint | 8.1 | P0 | |
| CVE-2026-56123 | Ubuntu | 8.1 | P0 | |
| CVE-2021-27137 | DD-WRT DD-WRT | 8.1 | P0 | KEV |
| CVE-2026-11816 | pip keras | 8.1 | P0 | |
| CVE-2026-56876 | npm extract-zip | 8.1 | P0 | |
| CVE-2026-54148 | maven org.http4k:http4k-security-digest | 8.1 | P0 | |
| CVE-2026-53932 | composer wnx/laravel-backup-restore | 8.0 | P0 | |
| CVE-2026-23879 | pip py7zr | 8.0 | P0 | |
| CVE-2026-41091 | Microsoft Defender | 7.8 | P0 | KEV |
| CVE-2023-38831 | RARLAB WinRAR | 7.8 | P0 | KEV |
| CVE-2022-30190 | Microsoft Windows | 7.8 | P0 | KEV |
| CVE-2022-0492 | Linux Kernel | 7.8 | P0 | KEV |
| CVE-2026-47331 | Ubuntu | 7.8 | P0 | |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | 7.8 | P0 | KEV |
| CVE-2026-55693 | Ubuntu | 7.8 | P0 | |
| CVE-2026-56155 | Microsoft Active Directory Federation Serv | 7.8 | P0 | KEV |
| CVE-2026-59856 | Ubuntu | 7.8 | P0 | |
| CVE-2026-50656 | 7.8 | P0 | ||
| CVE-2026-69414 | 7.8 | P0 | ||
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | 7.8 | P0 | KEV |
| CVE-2022-0995 | Linux Kernel | 7.8 | P0 | KEV |
| CVE-2026-53362 | Linux Kernel | 7.8 | P0 | KEV |
| CVE-2026-47260 | composer phanan/koel | 7.7 | P0 | |
| CVE-2026-54018 | pip open-webui | 7.7 | P0 | |
| CVE-2026-50567 | go github.com/fission/fission | 7.7 | P0 | |
| CVE-2026-70479 | pip open-webui | 7.7 | P0 | |
| CVE-2026-54155 | npm node-opcua | 7.7 | P0 | |
| CVE-2026-45337 | npm better-auth | 7.6 | P0 | |
| CVE-2026-9809 | composer mautic/core | 7.6 | P0 | |
| CVE-2024-21182 | Oracle WebLogic Server | 7.5 | P0 | KEV |
| CVE-2023-44487 | IETF HTTP/2 | 7.5 | P0 | KEV |
| CVE-2023-27532 | Veeam Backup & Replication | 7.5 | P0 | KEV |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 7.5 | P0 | KEV |
| CVE-2026-41292 | Ubuntu | 7.5 | P0 | |
| CVE-2026-42959 | Ubuntu | 7.5 | P0 | |
| CVE-2026-44017 | pip docling | 7.5 | P0 | |
| CVE-2026-43891 | pip changedetection.io | 7.5 | P0 | |
| CVE-2026-28318 | SolarWinds Serv-U | 7.5 | P0 | KEV |
| CVE-2025-10156 | pip picklescan | 7.5 | P0 | |
| CVE-2026-44439 | pip PlaywrightCapture | 7.5 | P0 | |
| CVE-2026-47736 | rubygems puma | 7.5 | P0 | |
| CVE-2026-44316 | go github.com/free5gc/pcf | 7.5 | P0 | |
| CVE-2026-34180 | Ubuntu | 7.5 | P0 | |
| CVE-2026-45591 | Ubuntu | 7.5 | P0 | |
| CVE-2026-12151 | npm undici | 7.5 | P0 | |
| CVE-2026-46862 | Ubuntu | 7.5 | P0 | |
| CVE-2026-46863 | Ubuntu | 7.5 | P0 | |
| CVE-2026-55697 | npm pnpm | 7.5 | P0 | |
| CVE-2026-44937 | go github.com/rancher/fleet | 7.5 | P0 | |
| CVE-2026-41992 | Ubuntu | 7.5 | P0 | |
| CVE-2026-20213 | Ubuntu | 7.5 | P0 | |
| CVE-2026-20214 | Ubuntu | 7.5 | P0 | |
| CVE-2026-58469 | Ubuntu | 7.5 | P0 | |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Au | 7.5 | P0 | KEV |
| CVE-2026-47302 | Ubuntu | 7.5 | P0 | |
| CVE-2026-56741 | maven org.jline:jline-remote-telnet | 7.5 | P0 | |
| CVE-2026-59874 | npm tar | 7.5 | P0 | |
| CVE-2026-23490 | pip pyasn1 | 7.5 | P0 | |
| CVE-2026-58419 | go code.gitea.io/gitea | 7.5 | P0 | |
| CVE-2026-24451 | go code.gitea.io/gitea | 7.5 | P0 | |
| CVE-2026-59884 | pip pyasn1 | 7.5 | P0 | |
| CVE-2026-14164 | Ubuntu | 7.5 | P0 | |
| CVE-2026-55833 | maven io.netty:netty-codec-http | 7.5 | P0 | |
| CVE-2024-7708 | maven org.eclipse.jetty:jetty-server | 7.5 | P0 | |
| CVE-2024-56526 | composer oxid-esales/oxideshop-ce | 7.5 | P0 | |
| CVE-2026-34486 | Apache Tomcat | 7.5 | P0 | KEV |
| CVE-2026-19913 | 7.5 | P0 | ||
| CVE-2026-44511 | rubygems katalyst-koi | 7.4 | P0 | |
| CVE-2026-54783 | nuget CoreWCF.Primitives | 7.4 | P0 | |
| CVE-2026-56821 | maven io.netty:netty-handler-ssl-ocsp | 7.4 | P0 | |
| CVE-2026-56820 | maven io.netty:netty-handler-ssl-ocsp | 7.4 | P0 | |
| CVE-2026-50631 | maven org.apache.cxf:cxf-rt-rs-security-oa | 7.4 | P0 | |
| CVE-2025-9906 | pip keras | 7.3 | P0 | |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | 7.2 | P0 | KEV |
| CVE-2023-20273 | Cisco Cisco IOS XE Web UI | 7.2 | P0 | KEV |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 7.2 | P0 | KEV |
| CVE-2026-41567 | go github.com/moby/moby/v2 | 7.2 | P0 | |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | 7.2 | P0 | KEV |
| CVE-2026-25700 | go github.com/apache/incubator-answer | 7.2 | P0 | |
| CVE-2026-49338 | go go.senan.xyz/gonic | 7.1 | P0 | |
| CVE-2026-49339 | go go.senan.xyz/gonic | 7.1 | P0 | |
| CVE-2026-49284 | composer simplesamlphp/simplesamlphp | 7.1 | P0 | |
| CVE-2026-35341 | rust uu_mkfifo | 7.1 | P0 | |
| CVE-2026-54491 | composer phanan/koel | 7.1 | P0 | |
| CVE-2026-20779 | go code.gitea.io/gitea | 7.1 | P0 | |
| CVE-2026-17106 | go github.com/moby/go-archive | 7.1 | P0 | |
| CVE-2026-54321 | go github.com/daytonaio/daytona | 7.0 | P0 | |
| CVE-2026-58050 | Ubuntu | 7.0 | P0 | |
| CVE-2025-54518 | Ubuntu | 7.0 | P0 | |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Drive | 7.0 | P0 | KEV |
| CVE-2026-49271 | Ubuntu | 6.5 | P0 | |
| CVE-2025-15661 | Ubuntu | 6.5 | P0 | |
| CVE-2026-58051 | Ubuntu | 6.5 | P0 | |
| CVE-2026-14324 | Ubuntu | 6.5 | P0 | |
| CVE-2026-56434 | Ubuntu | 6.5 | P0 | |
| CVE-2026-45491 | Ubuntu | 6.2 | P0 | |
| CVE-2026-50229 | Ubuntu | 6.1 | P0 | |
| CVE-2026-50813 | Ubuntu | 6.1 | P0 | |
| CVE-2026-10305 | Ubuntu | 6.1 | P0 | |
| CVE-2026-47306 | Ubuntu | 6.1 | P0 | |
| CVE-2025-68686 | Fortinet FortiOS | 5.9 | P0 | KEV |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Fire | 5.0 | P0 | KEV |
| CVE-2008-4128 | Cisco IOS | 4.3 | P0 | KEV |
| CVE-2022-1388 | F5 BIG-IP | 0.0 | P0 | KEV |
| CVE-2022-29464 | WSO2 Multiple Products | 0.0 | P0 | KEV |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 0.0 | P0 | KEV |
| CVE-2022-0609 | Google Chromium Animation | 0.0 | P0 | KEV |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | 0.0 | P0 | KEV |
| CVE-2021-44228 | Apache Log4j2 | 0.0 | P0 | KEV |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / | 0.0 | P0 | KEV |
| CVE-2021-42321 | Microsoft Exchange | 0.0 | P0 | KEV |
| CVE-2021-27104 | Accellion FTA | 0.0 | P0 | KEV |
| CVE-2021-26084 | Atlassian Confluence Server and Data Cente | 0.0 | P0 | KEV |
| CVE-2019-3396 | Atlassian Confluence Server and Data Serve | 0.0 | P0 | KEV |
| CVE-2018-0171 | Cisco IOS and IOS XE | 0.0 | P0 | KEV |
| CVE-2019-19781 | Citrix Application Delivery Controller (AD | 0.0 | P0 | KEV |
| CVE-2021-22205 | GitLab Community and Enterprise Editions | 0.0 | P0 | KEV |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Managemen | 0.0 | P0 | KEV |
| CVE-2020-17144 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-34523 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2020-0688 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-34473 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-34527 | Microsoft Windows | 0.0 | P0 | KEV |
| CVE-2021-31207 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-26411 | Microsoft Internet Explorer | 0.0 | P0 | KEV |
| CVE-2021-40444 | Microsoft MSHTML | 0.0 | P0 | KEV |
| CVE-2017-0199 | Microsoft Office and WordPad | 0.0 | P0 | KEV |
| CVE-2020-1472 | Microsoft Netlogon | 0.0 | P0 | KEV |
| CVE-2021-26855 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-26858 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-27065 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2019-0604 | Microsoft SharePoint | 0.0 | P0 | KEV |
| CVE-2021-26857 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 0.0 | P0 | KEV |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 | 0.0 | P0 | KEV |
| CVE-2021-22005 | VMware vCenter Server | 0.0 | P0 | KEV |
| CVE-2021-21985 | VMware vCenter Server | 0.0 | P0 | KEV |
| CVE-2020-10189 | Zoho ManageEngine | 0.0 | P0 | KEV |
| CVE-2023-25574 | pip jupyterhub-ltiauthenticator | 10.0 | P1 | |
| CVE-2026-47668 | npm dbgate-serve | 10.0 | P1 | |
| CVE-2025-14009 | pip nltk | 10.0 | P1 | |
| CVE-2026-44329 | go github.com/free5gc/smf | 10.0 | P1 | |
| CVE-2026-43898 | npm @nyariv/sandboxjs | 10.0 | P1 | |
| CVE-2026-45087 | go github.com/hahwul/dalfox/v2 | 10.0 | P1 | |
| CVE-2026-44330 | go github.com/free5gc/nef | 10.0 | P1 | |
| CVE-2026-44327 | go github.com/free5gc/nef | 10.0 | P1 | |
| CVE-2026-46695 | pip boxlite | 10.0 | P1 | |
| CVE-2026-47140 | npm vm2 | 10.0 | P1 | |
| CVE-2026-47137 | npm vm2 | 10.0 | P1 | |
| CVE-2026-47208 | npm vm2 | 10.0 | P1 | |
| CVE-2026-47131 | npm vm2 | 10.0 | P1 | |
| CVE-2026-54309 | npm n8n | 10.0 | P1 | |
| CVE-2026-3490 | pip picklescan | 10.0 | P1 | |
| CVE-2026-54782 | nuget CoreWCF.Primitives | 10.0 | P1 | |
| CVE-2026-54350 | npm @budibase/server | 10.0 | P1 | |
| CVE-2026-52813 | go gogs.io/gogs | 10.0 | P1 | |
| CVE-2026-46595 | go golang.org/x/crypto | 10.0 | P1 | |
| CVE-2026-49257 | pip mcp-pinot-server | 10.0 | P1 | |
| CVE-2026-27597 | npm @enclave-vm/core | 10.0 | P1 | |
| CVE-2026-54769 | pip langroid | 10.0 | P1 | |
| CVE-2026-52831 | go github.com/nuclio/nuclio | 10.0 | P1 | |
| CVE-2026-54159 | composer prestashop/ps_facetedsearch | 10.0 | P1 | |
| CVE-2026-48020 | go github.com/traefik/traefik/v2 | 10.0 | P1 | |
| CVE-2026-59726 | 10.0 | P1 | ||
| CVE-2026-54735 | go github.com/prebid/prebid-server/v4 | 10.0 | P1 | |
| CVE-2026-67429 | pip flyto-core | 10.0 | P1 | |
| CVE-2026-52887 | npm @nocobase/plugin-notification-in-app-m | 10.0 | P1 | |
| CVE-2026-48449 | 10.0 | P1 | ||
| CVE-2024-42467 | maven org.openhab.ui.bundles:org.openhab.u | 10.0 | P1 | |
| CVE-2026-48362 | 10.0 | P1 | ||
| CVE-2026-55107 | rubygems kobako | 10.0 | P1 | |
| CVE-2026-61539 | pip xinference | 10.0 | P1 | |
| CVE-2026-48491 | go github.com/traefik/traefik/v2 | 10.0 | P1 | |
| CVE-2026-47392 | pip praisonaiagents | 9.9 | P1 | |
| CVE-2026-47744 | composer shopper/framework | 9.9 | P1 | |
| CVE-2026-33309 | pip langflow | 9.9 | P1 | |
| CVE-2026-44477 | go github.com/cloudnative-pg/cloudnative-p | 9.9 | P1 | |
| CVE-2026-48030 | composer pheditor/pheditor | 9.9 | P1 | |
| CVE-2026-54310 | npm n8n | 9.9 | P1 | |
| CVE-2026-54305 | npm n8n | 9.9 | P1 | |
| CVE-2026-54051 | npm network-ai | 9.9 | P1 | |
| CVE-2026-44179 | maven com.xwiki.pro:xwiki-pro-macros | 9.9 | P1 | |
| CVE-2025-58048 | composer paymenter/paymenter | 9.9 | P1 | |
| CVE-2026-52806 | go gogs.io/gogs | 9.9 | P1 | |
| CVE-2026-55166 | pip lemur | 9.9 | P1 | |
| CVE-2026-46716 | go github.com/nezhahq/nezha | 9.9 | P1 | |
| CVE-2026-49252 | npm @deepstream/server | 9.9 | P1 | |
| CVE-2026-48769 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P1 | |
| CVE-2026-48755 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P1 | |
| CVE-2026-48753 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P1 | |
| CVE-2026-48751 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P1 | |
| CVE-2026-48750 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P1 | |
| CVE-2026-48749 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P1 | |
| CVE-2026-50566 | go github.com/fission/fission | 9.9 | P1 | |
| CVE-2026-50564 | go github.com/fission/fission | 9.9 | P1 | |
| CVE-2026-50563 | go github.com/fission/fission | 9.9 | P1 | |
| CVE-2026-50545 | go github.com/fission/fission | 9.9 | P1 | |
| CVE-2026-7374 | go kubevirt.io/kubevirt | 9.9 | P1 | |
| CVE-2026-29090 | pip rucio | 9.9 | P1 | |
| CVE-2026-29080 | pip rucio | 9.9 | P1 | |
| CVE-2026-44935 | go github.com/rancher/fleet | 9.9 | P1 | |
| CVE-2026-9559 | composer mautic/core | 9.9 | P1 | |
| CVE-2026-9558 | composer mautic/core | 9.9 | P1 | |
| CVE-2026-55500 | npm 9router | 9.9 | P1 | |
| CVE-2026-50551 | go github.com/siyuan-note/siyuan/kernel | 9.9 | P1 | |
| CVE-2026-54158 | go github.com/siyuan-note/siyuan/kernel | 9.9 | P1 | |
| CVE-2026-54067 | go github.com/siyuan-note/siyuan/kernel | 9.9 | P1 | |
| CVE-2026-61667 | pip DIRAC | 9.9 | P1 | |
| CVE-2026-45579 | pip DIRAC | 9.9 | P1 | |
| CVE-2026-41283 | pip mistral | 9.9 | P1 | |
| CVE-2026-54052 | npm n8n-mcp | 9.9 | P1 | |
| CVE-2026-45262 | composer facturascripts/facturascripts | 9.9 | P1 | |
| CVE-2026-44791 | npm n8n | 9.9 | P1 | |
| CVE-2026-44789 | npm n8n | 9.9 | P1 | |
| CVE-2026-44747 | 9.9 | P1 | ||
| CVE-2026-57138 | npm praisonai | 9.9 | P1 | |
| CVE-2026-50195 | go github.com/containerd/containerd/v2 | 9.9 | P1 | |
| CVE-2026-27577 | 9.9 | P1 | ||
| CVE-2026-54680 | go github.com/kube-logging/logging-operato | 9.9 | P1 | |
| CVE-2026-52855 | go github.com/pterodactyl/wings | 9.9 | P1 | |
| CVE-2025-62718 | Ubuntu | 9.9 | P1 | |
| CVE-2026-47686 | npm vm2 | 9.9 | P1 | |
| CVE-2026-55634 | composer pimcore/pimcore | 9.9 | P1 | |
| CVE-2026-55565 | maven org.yamcs:yamcs-core | 9.9 | P1 | |
| CVE-2026-42812 | maven org.apache.polaris:polaris-runtime-s | 9.9 | P1 | |
| CVE-2026-47429 | npm vitest | 9.8 | P1 | |
| CVE-2026-46614 | go github.com/fission/fission | 9.8 | P1 | |
| CVE-2026-47410 | pip praisonai-platform | 9.8 | P1 | |
| CVE-2026-47391 | pip PraisonAI | 9.8 | P1 | |
| CVE-2026-47393 | pip PraisonAI | 9.8 | P1 | |
| CVE-2026-47396 | pip PraisonAI | 9.8 | P1 | |
| CVE-2026-8838 | pip redshift-connector | 9.8 | P1 | |
| CVE-2026-44180 | pip jupyter_enterprise_gateway | 9.8 | P1 | |
| CVE-2026-31072 | pip apscheduler | 9.8 | P1 | |
| CVE-2026-47323 | maven org.apache.camel:camel-cxf-rest | 9.8 | P1 | |
| CVE-2026-35490 | pip changedetection.io | 9.8 | P1 | |
| CVE-2025-67895 | pip apache-airflow-providers-edge3 | 9.8 | P1 | |
| CVE-2023-25693 | pip apache-airflow-providers-apache-sqoop | 9.8 | P1 | |
| CVE-2024-39236 | pip Gradio | 9.8 | P1 | |
| CVE-2024-42835 | pip langflow | 9.8 | P1 | |
| CVE-2026-35171 | pip kedro | 9.8 | P1 | |
| CVE-2018-1000620 | npm cryptiles | 9.8 | P1 | |
| CVE-2026-26956 | npm vm2 | 9.8 | P1 | |
| CVE-2024-9053 | pip vllm | 9.8 | P1 | |
| CVE-2026-32640 | pip simpleeval | 9.8 | P1 | |
| CVE-2026-38360 | pip dash-uploader | 9.8 | P1 | |
| CVE-2026-46364 | composer thorsten/phpmyfaq | 9.8 | P1 | |
| CVE-2026-45083 | maven io.goobi.viewer:viewer-core | 9.8 | P1 | |
| CVE-2018-7750 | pip paramiko | 9.8 | P1 | |
| CVE-2026-33728 | maven com.datadoghq:dd-java-agent | 9.8 | P1 | |
| CVE-2026-42074 | npm openclaude | 9.8 | P1 | |
| CVE-2020-36962 | pip tendenci | 9.8 | P1 | |
| CVE-2026-24178 | pip nvflare | 9.8 | P1 | |
| CVE-2024-34252 | pip pywasm3 | 9.8 | P1 | |
| CVE-2024-34249 | pip pywasm3 | 9.8 | P1 | |
| CVE-2024-30564 | npm @andrei-tatar/nora-firebase-common | 9.8 | P1 | |
| CVE-2026-48062 | composer codeigniter4/framework | 9.8 | P1 | |
| CVE-2026-47210 | npm vm2 | 9.8 | P1 | |
| CVE-2026-53633 | npm @vitest/browser | 9.8 | P1 | |
| CVE-2026-53753 | pip crawl4ai | 9.8 | P1 |