Base des vulnérabilités à forte valeur suivies et priorisées par FactualRisk (KEV, P0/P1, exploitées dans la nature, EPSS élevé). Chaque fiche reste accessible en permanence et est mise à jour à chaque collecte.
| CVE | Produit | CVSS | Prio | KEV |
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 10.0 | P0 | KEV |
| CVE-2024-1212 | Progress Kemp LoadMaster | 10.0 | P0 | KEV |
| CVE-2024-3400 | Palo Alto Networks PAN-OS | 10.0 | P0 | KEV |
| CVE-2023-46604 | Apache ActiveMQ | 10.0 | P0 | KEV |
| CVE-2023-20198 | Cisco IOS XE Web UI | 10.0 | P0 | KEV |
| CVE-2026-10520 | Ivanti Sentry | 10.0 | P0 | KEV |
| CVE-2026-34910 | Ubiquiti UniFi OS | 10.0 | P0 | KEV |
| CVE-2026-34909 | Ubiquiti UniFi OS | 10.0 | P0 | KEV |
| CVE-2026-34908 | Ubiquiti UniFi OS | 10.0 | P0 | KEV |
| CVE-2026-48558 | SimpleHelp SimpleHelp | 10.0 | P0 | KEV |
| CVE-2026-48282 | Adobe ColdFusion | 10.0 | P0 | KEV |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | 10.0 | P0 | KEV |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 10.0 | P0 | KEV |
| CVE-2026-72898 | Metabase Metabase | 10.0 | P0 | KEV |
| CVE-2026-58231 | 10.0 | P0 | ||
| CVE-2026-69836 | 10.0 | P0 | ||
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Ser | 10.0 | P0 | KEV |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 10.0 | P0 | KEV |
| CVE-2026-49869 | Kestra Kestra OSS | 10.0 | P0 | KEV |
| CVE-2026-75650 | Adobe Commerce and Magento | 10.0 | P0 | KEV |
| CVE-2026-86218 | N-able N-central | 10.0 | P0 | KEV |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (F | 10.0 | P0 | KEV |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Ed | 10.0 | P0 | KEV |
| CVE-2026-76460 | Cisco Identity Services Engine | 10.0 | P0 | KEV |
| CVE-2026-86296 | 10.0 | P0 | ||
| CVE-2026-93952 | Arista VeloCloud Orchestrator | 10.0 | P0 | KEV |
| CVE-2026-5430 | WSO2 Multiple Products | 10.0 | P0 | KEV |
| CVE-2026-88773 | 10.0 | P0 | ||
| CVE-2025-70974 | maven com.alibaba:fastjson | 10.0 | P0 | |
| CVE-2015-3306 | ProFTPD ProFTPD | 10.0 | P0 | KEV |
| CVE-2026-105134 | Ahsay AhsayCBS | 10.0 | P0 | KEV |
| CVE-2026-55255 | Langflow Langflow | 9.9 | P0 | KEV |
| CVE-2026-48752 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P0 | |
| CVE-2026-84869 | ConnectWise ScreenConnect | 9.9 | P0 | KEV |
| CVE-2026-48027 | Nx Nx Console | 9.8 | P0 | KEV |
| CVE-2026-8398 | Daemon Daemon Tools Lite | 9.8 | P0 | KEV |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 9.8 | P0 | KEV |
| CVE-2026-9082 | Drupal Core | 9.8 | P0 | KEV |
| CVE-2008-4250 | Microsoft Windows | 9.8 | P0 | KEV |
| CVE-2026-42208 | BerriAI LiteLLM | 9.8 | P0 | KEV |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 9.8 | P0 | KEV |
| CVE-2024-21413 | Microsoft Office Outlook | 9.8 | P0 | KEV |
| CVE-2023-29357 | Microsoft SharePoint Server | 9.8 | P0 | KEV |
| CVE-2023-22518 | Atlassian Confluence Data Center and Serve | 9.8 | P0 | KEV |
| CVE-2023-22515 | Atlassian Confluence Data Center and Serve | 9.8 | P0 | KEV |
| CVE-2023-42793 | JetBrains TeamCity | 9.8 | P0 | KEV |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | 9.8 | P0 | KEV |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN | 9.8 | P0 | KEV |
| CVE-2023-34362 | Progress MOVEit Transfer | 9.8 | P0 | KEV |
| CVE-2023-23397 | Microsoft Office | 9.8 | P0 | KEV |
| CVE-2022-47966 | Zoho ManageEngine | 9.8 | P0 | KEV |
| CVE-2022-42475 | Fortinet FortiOS | 9.8 | P0 | KEV |
| CVE-2022-40684 | Fortinet Multiple Products | 9.8 | P0 | KEV |
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 9.8 | P0 | KEV |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 9.8 | P0 | KEV |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 9.8 | P0 | KEV |
| CVE-2026-20253 | Splunk Enterprise | 9.8 | P0 | KEV |
| CVE-2025-67038 | Lantronix EDS5000 | 9.8 | P0 | KEV |
| CVE-2026-9698 | Ubuntu | 9.8 | P0 | |
| CVE-2026-12569 | PTC Windchill and FlexPLM | 9.8 | P0 | KEV |
| CVE-2026-42601 | pip archivebox | 9.8 | P0 | |
| CVE-2026-48908 | JoomShaper SP Page Builder | 9.8 | P0 | KEV |
| CVE-2026-56290 | Joomlack Page Builder | 9.8 | P0 | KEV |
| CVE-2026-56291 | Balbooa Forms | 9.8 | P0 | KEV |
| CVE-2026-48939 | iCagenda iCagenda | 9.8 | P0 | KEV |
| CVE-2026-56164 | Microsoft SharePoint Server | 9.8 | P0 | KEV |
| CVE-2026-46817 | Oracle E-Business Suite | 9.8 | P0 | KEV |
| CVE-2026-58644 | Microsoft SharePoint | 9.8 | P0 | KEV |
| CVE-2026-25089 | Fortinet FortiSandbox | 9.8 | P0 | KEV |
| CVE-2026-39808 | Fortinet FortiSandbox | 9.8 | P0 | KEV |
| CVE-2026-63030 | WordPress Core | 9.8 | P0 | KEV |
| CVE-2026-0770 | Langflow Langflow | 9.8 | P0 | KEV |
| CVE-2026-50522 | Microsoft SharePoint | 9.8 | P0 | KEV |
| CVE-2026-16232 | Check Point SmartConsole | 9.8 | P0 | KEV |
| CVE-2026-63077 | JetBrains TeamCity | 9.8 | P0 | KEV |
| CVE-2026-9198 | IBM Langflow | 9.8 | P0 | KEV |
| CVE-2026-8037 | Progress LoadMaster | 9.8 | P0 | KEV |
| CVE-2026-59310 | Broadcom VMware vCenter | 9.8 | P0 | KEV |
| CVE-2026-62878 | 9.8 | P0 | ||
| CVE-2026-42027 | maven org.apache.opennlp:opennlp-tools | 9.8 | P0 | |
| CVE-2026-65400 | Apple macOS | 9.8 | P0 | KEV |
| CVE-2026-15748 | 9.8 | P0 | ||
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Serv | 9.8 | P0 | KEV |
| CVE-2026-72529 | TrueConf Server | 9.8 | P0 | KEV |
| CVE-2026-60004 | Gitea Gitea | 9.8 | P0 | KEV |
| CVE-2026-19912 | 9.8 | P0 | ||
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professiona | 9.8 | P0 | KEV |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 9.8 | P0 | KEV |
| CVE-2023-49105 | ownCloud ownCloud | 9.8 | P0 | KEV |
| CVE-2026-74233 | 9.8 | P0 | ||
| CVE-2026-74232 | 9.8 | P0 | ||
| CVE-2026-81578 | PaperCut NG/MF | 9.8 | P0 | KEV |
| CVE-2026-82329 | JFrog Artifactory | 9.8 | P0 | KEV |
| CVE-2026-9586 | Sangoma Switchvox | 9.8 | P0 | KEV |
| CVE-2026-65905 | maven org.apache.tomcat:tomcat | 9.8 | P0 | |
| CVE-2026-19490 | Citrix NetScaler | 9.8 | P0 | KEV |
| CVE-2025-25249 | Fortinet Multiple Products | 9.8 | P0 | KEV |
| CVE-2026-86060 | MikroTik RouterOS | 9.8 | P0 | KEV |
| CVE-2026-85102 | Check Point Multiple Products | 9.8 | P0 | KEV |
| CVE-2026-76461 | Cisco Secure Email Gateway | 9.8 | P0 | KEV |
| CVE-2026-89026 | 9.8 | P0 | ||
| CVE-2025-39682 | Linux Kernel | 9.8 | P0 | KEV |
| CVE-2026-94127 | F5 BIG-IP APM | 9.8 | P0 | KEV |
| CVE-2026-93616 | Check Point Multiple Products | 9.8 | P0 | KEV |
| CVE-2026-88771 | Citrix NetScaler | 9.8 | P0 | KEV |
| CVE-2026-88776 | 9.8 | P0 | ||
| CVE-2026-88777 | 9.8 | P0 | ||
| CVE-2026-88775 | 9.8 | P0 | ||
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | 9.8 | P0 | KEV |
| CVE-2026-104286 | Fortinet FortiMail | 9.8 | P0 | KEV |
| CVE-2026-102490 | Zammad GmbH Zammad | 9.8 | P0 | KEV |
| CVE-2026-102489 | Zammad GmbH Zammad | 9.8 | P0 | KEV |
| CVE-2026-58264 | Ubuntu | 9.8 | P0 | |
| CVE-2021-3199 | ONLYOFFICE Docs | 9.8 | P0 | KEV |
| CVE-2026-85097 | 9.8 | P0 | ||
| CVE-2026-76519 | Cisco Secure Email Gateway | 9.8 | P0 | KEV |
| CVE-2026-102764 | BeyondTrust Remote Support | 9.8 | P0 | KEV |
| CVE-2026-45321 | TanStack TanStack | 9.6 | P0 | KEV |
| CVE-2026-48519 | pip langflow | 9.6 | P0 | |
| CVE-2026-6875 | 9.5 | P0 | ||
| CVE-2026-88772 | Citrix NetScaler | 9.5 | P0 | KEV |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 9.4 | P0 | KEV |
| CVE-2026-73653 | npm @vitest/browser | 9.4 | P0 | |
| CVE-2025-62593 | Ray-Project Ray | 9.4 | P0 | KEV |
| CVE-2026-19478 | 9.4 | P0 | ||
| CVE-2026-82078 | PaperCut NG/MF | 9.4 | P0 | KEV |
| CVE-2026-107282 | maven org.asynchttpclient:async-http-clien | 9.4 | P0 | |
| CVE-2026-50751 | Check Point Security Gateway | 9.3 | P0 | KEV |
| CVE-2026-64825 | pip homeassistant | 9.3 | P0 | |
| CVE-2026-64849 | MLflow MLflow | 9.3 | P0 | KEV |
| CVE-2026-110447 | 9.2 | P0 | ||
| CVE-2026-0257 | Palo Alto Networks PAN-OS | 9.1 | P0 | KEV |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 9.1 | P0 | KEV |
| CVE-2026-34182 | Ubuntu | 9.1 | P0 | |
| CVE-2026-53486 | npm @xhmikosr/decompress | 9.1 | P0 | |
| CVE-2026-53512 | npm better-auth | 9.1 | P0 | |
| CVE-2026-60137 | WordPress Core | 9.1 | P0 | KEV |
| CVE-2026-55040 | Microsoft SharePoint | 9.1 | P0 | KEV |
| CVE-2026-71362 | Adobe Commerce and Magento | 9.1 | P0 | KEV |
| CVE-2026-50627 | maven org.apache.cxf:cxf-rt-rs-security-oa | 9.1 | P0 | |
| CVE-2026-101894 | npm @xhmikosr/decompress | 9.1 | P0 | |
| CVE-2026-105279 | 9.1 | P0 | ||
| CVE-2026-11386 | Ubuntu | 9.0 | P0 | |
| CVE-2026-72530 | TrueConf Server | 9.0 | P0 | KEV |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 8.9 | P0 | KEV |
| CVE-2025-34291 | Langflow Langflow | 8.8 | P0 | KEV |
| CVE-2009-1537 | Microsoft DirectX | 8.8 | P0 | KEV |
| CVE-2009-3459 | Adobe Acrobat and Reader | 8.8 | P0 | KEV |
| CVE-2010-0249 | Microsoft Internet Explorer | 8.8 | P0 | KEV |
| CVE-2010-0806 | Microsoft Internet Explorer | 8.8 | P0 | KEV |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | 8.8 | P0 | KEV |
| CVE-2026-42271 | BerriAI LiteLLM | 8.8 | P0 | KEV |
| CVE-2026-35044 | pip bentoml | 8.8 | P0 | |
| CVE-2026-11645 | Google Chromium V8 | 8.8 | P0 | KEV |
| CVE-2026-46612 | go github.com/fission/fission | 8.8 | P0 | |
| CVE-2026-47162 | Ubuntu | 8.8 | P0 | |
| CVE-2026-12244 | Ubuntu | 8.8 | P0 | |
| CVE-2026-55698 | npm pnpm | 8.8 | P0 | |
| CVE-2026-45659 | Microsoft SharePoint Server | 8.8 | P0 | KEV |
| CVE-2026-47300 | Ubuntu | 8.8 | P0 | |
| CVE-2026-56001 | Ubuntu | 8.8 | P0 | |
| CVE-2026-56002 | Ubuntu | 8.8 | P0 | |
| CVE-2019-1068 | Microsoft SQL Server | 8.8 | P0 | KEV |
| CVE-2026-19949 | 8.8 | P0 | ||
| CVE-2026-85046 | Google Chromium V8 | 8.8 | P0 | KEV |
| CVE-2026-76220 | pip GitPython | 8.8 | P0 | |
| CVE-2026-87491 | Google Chromium V8 | 8.8 | P0 | KEV |
| CVE-2026-67277 | MikroTik RouterOS | 8.8 | P0 | KEV |
| CVE-2026-42016 | JFrog Artifactory | 8.8 | P0 | KEV |
| CVE-2026-58704 | Google Pixel | 8.8 | P0 | KEV |
| CVE-2026-53266 | Linux Kernel | 8.8 | P0 | KEV |
| CVE-2026-58197 | go github.com/stacklok/toolhive | 8.8 | P0 | |
| CVE-2026-28326 | 8.8 | P0 | ||
| CVE-2026-7273 | Zyxel GS1900 Series Switches | 8.8 | P0 | KEV |
| CVE-2026-65660 | Microsoft SharePoint | 8.8 | P0 | KEV |
| CVE-2026-88778 | 8.8 | P0 | ||
| CVE-2026-86950 | Apple Multiple Products | 8.8 | P0 | KEV |
| CVE-2026-96951 | Microsoft Windows | 8.8 | P0 | KEV |
| CVE-2026-41241 | pip pretalx | 8.7 | P0 | |
| CVE-2026-49259 | composer nukeviet/nukeviet | 8.7 | P0 | |
| CVE-2026-71476 | npm nx | 8.7 | P0 | |
| CVE-2026-77615 | maven org.opencastproject:opencast-engage- | 8.7 | P0 | |
| CVE-2026-88779 | Citrix NetScaler | 8.7 | P0 | KEV |
| CVE-2024-20353 | Cisco Adaptive Security Appliance (ASA) an | 8.6 | P0 | KEV |
| CVE-2026-20230 | Cisco Unified Communications Manager | 8.6 | P0 | KEV |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Ap | 8.6 | P0 | KEV |
| CVE-2026-104935 | Ivanti Connect Secure | 8.6 | P0 | KEV |
| CVE-2026-0322 | Palo Alto Networks PAN-OS | 8.6 | P0 | KEV |
| CVE-2026-54420 | LiteSpeed cPanel Plugin | 8.5 | P0 | KEV |
| CVE-2026-45414 | rubygems decidim | 8.5 | P0 | |
| CVE-2026-61429 | pip praisonaiagents | 8.5 | P0 | |
| CVE-2025-48595 | Android Framework | 8.4 | P0 | KEV |
| CVE-2026-67323 | pip GitPython | 8.4 | P0 | |
| CVE-2026-49229 | npm @actual-app/sync-server | 8.3 | P0 | |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | 8.2 | P0 | KEV |
| CVE-2026-44016 | pip docling | 8.2 | P0 | |
| CVE-2026-54727 | pip proot-distro | 8.2 | P0 | |
| CVE-2026-54574 | pip proot-distro | 8.2 | P0 | |
| CVE-2026-18577 | N-able N-central | 8.2 | P0 | KEV |
| CVE-2026-18556 | N-able N-central | 8.2 | P0 | KEV |
| CVE-2026-59822 | BerriAI LiteLLM | 8.2 | P0 | KEV |
| CVE-2026-104852 | npm @graphql-tools/utils | 8.2 | P0 | |
| CVE-2026-42897 | Microsoft Microsoft | 8.1 | P0 | KEV |
| CVE-2024-21412 | Microsoft Windows | 8.1 | P0 | KEV |
| CVE-2026-47740 | composer shopper/framework | 8.1 | P0 | |
| CVE-2026-44249 | maven io.netty:netty-handler | 8.1 | P0 | |
| CVE-2026-53849 | npm openclaw | 8.1 | P0 | |
| CVE-2026-53857 | npm openclaw | 8.1 | P0 | |
| CVE-2026-12246 | Ubuntu | 8.1 | P0 | |
| CVE-2026-49340 | go go.senan.xyz/gonic | 8.1 | P0 | |
| CVE-2026-49286 | composer pontedilana/php-weasyprint | 8.1 | P0 | |
| CVE-2026-56123 | Ubuntu | 8.1 | P0 | |
| CVE-2021-27137 | DD-WRT DD-WRT | 8.1 | P0 | KEV |
| CVE-2026-11816 | pip keras | 8.1 | P0 | |
| CVE-2026-56876 | npm extract-zip | 8.1 | P0 | |
| CVE-2026-54148 | maven org.http4k:http4k-security-digest | 8.1 | P0 | |
| CVE-2026-19693 | npm extract-zip | 8.1 | P0 | |
| CVE-2025-9566 | go github.com/containers/podman/v5 | 8.1 | P0 | |
| CVE-2026-62369 | go github.com/kubeedge/kubeedge | 8.1 | P0 | |
| CVE-2026-87902 | WordPress Core | 8.1 | P0 | KEV |
| CVE-2026-77967 | 8.1 | P0 | ||
| CVE-2026-48842 | 8.1 | P0 | ||
| CVE-2016-3081 | Apache Struts | 8.1 | P0 | KEV |
| CVE-2026-39460 | 8.1 | P0 | ||
| CVE-2026-107723 | npm fast-jwt | 8.1 | P0 | |
| CVE-2026-107810 | go github.com/0xJacky/Nginx-UI | 8.1 | P0 | |
| CVE-2026-53932 | composer wnx/laravel-backup-restore | 8.0 | P0 | |
| CVE-2026-23879 | pip py7zr | 8.0 | P0 | |
| CVE-2026-41091 | Microsoft Defender | 7.8 | P0 | KEV |
| CVE-2023-38831 | RARLAB WinRAR | 7.8 | P0 | KEV |
| CVE-2022-30190 | Microsoft Windows | 7.8 | P0 | KEV |
| CVE-2022-0492 | Linux Kernel | 7.8 | P0 | KEV |
| CVE-2026-47331 | Ubuntu | 7.8 | P0 | |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | 7.8 | P0 | KEV |
| CVE-2026-55693 | Ubuntu | 7.8 | P0 | |
| CVE-2026-56155 | Microsoft Active Directory Federation Serv | 7.8 | P0 | KEV |
| CVE-2026-59856 | Ubuntu | 7.8 | P0 | |
| CVE-2026-50656 | 7.8 | P0 | ||
| CVE-2026-69414 | 7.8 | P0 | ||
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | 7.8 | P0 | KEV |
| CVE-2022-0995 | Linux Kernel | 7.8 | P0 | KEV |
| CVE-2026-53362 | Linux Kernel | 7.8 | P0 | KEV |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 7.8 | P0 | KEV |
| CVE-2026-81963 | Microsoft Windows | 7.8 | P0 | KEV |
| CVE-2026-85880 | Microsoft Windows | 7.8 | P0 | KEV |
| CVE-2026-87886 | Acronis Backup | 7.8 | P0 | KEV |
| CVE-2025-39964 | Linux Kernel | 7.8 | P0 | KEV |
| CVE-2026-95837 | go github.com/containerd/containerd/v2 | 7.8 | P0 | |
| CVE-2026-47260 | composer phanan/koel | 7.7 | P0 | |
| CVE-2026-54018 | pip open-webui | 7.7 | P0 | |
| CVE-2026-50567 | go github.com/fission/fission | 7.7 | P0 | |
| CVE-2026-70479 | pip open-webui | 7.7 | P0 | |
| CVE-2026-54155 | npm node-opcua | 7.7 | P0 | |
| CVE-2026-87996 | pip open-webui | 7.7 | P0 | |
| CVE-2026-45337 | npm better-auth | 7.6 | P0 | |
| CVE-2026-9809 | composer mautic/core | 7.6 | P0 | |
| CVE-2026-54245 | go github.com/fleetdm/fleet | 7.6 | P0 | |
| CVE-2024-21182 | Oracle WebLogic Server | 7.5 | P0 | KEV |
| CVE-2023-44487 | IETF HTTP/2 | 7.5 | P0 | KEV |
| CVE-2023-27532 | Veeam Backup & Replication | 7.5 | P0 | KEV |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 7.5 | P0 | KEV |
| CVE-2026-41292 | Ubuntu | 7.5 | P0 | |
| CVE-2026-42959 | Ubuntu | 7.5 | P0 | |
| CVE-2026-44017 | pip docling | 7.5 | P0 | |
| CVE-2026-43891 | pip changedetection.io | 7.5 | P0 | |
| CVE-2026-28318 | SolarWinds Serv-U | 7.5 | P0 | KEV |
| CVE-2025-10156 | pip picklescan | 7.5 | P0 | |
| CVE-2026-44439 | pip PlaywrightCapture | 7.5 | P0 | |
| CVE-2026-47736 | rubygems puma | 7.5 | P0 | |
| CVE-2026-44316 | go github.com/free5gc/pcf | 7.5 | P0 | |
| CVE-2026-34180 | Ubuntu | 7.5 | P0 | |
| CVE-2026-45591 | Ubuntu | 7.5 | P0 | |
| CVE-2026-12151 | npm undici | 7.5 | P0 | |
| CVE-2026-46862 | Ubuntu | 7.5 | P0 | |
| CVE-2026-46863 | Ubuntu | 7.5 | P0 | |
| CVE-2026-55697 | npm pnpm | 7.5 | P0 | |
| CVE-2026-44937 | go github.com/rancher/fleet | 7.5 | P0 | |
| CVE-2026-41992 | Ubuntu | 7.5 | P0 | |
| CVE-2026-20213 | Ubuntu | 7.5 | P0 | |
| CVE-2026-20214 | Ubuntu | 7.5 | P0 | |
| CVE-2026-58469 | Ubuntu | 7.5 | P0 | |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Au | 7.5 | P0 | KEV |
| CVE-2026-47302 | Ubuntu | 7.5 | P0 | |
| CVE-2026-56741 | maven org.jline:jline-remote-telnet | 7.5 | P0 | |
| CVE-2026-59874 | npm tar | 7.5 | P0 | |
| CVE-2026-23490 | pip pyasn1 | 7.5 | P0 | |
| CVE-2026-58419 | go code.gitea.io/gitea | 7.5 | P0 | |
| CVE-2026-24451 | go code.gitea.io/gitea | 7.5 | P0 | |
| CVE-2026-59884 | pip pyasn1 | 7.5 | P0 | |
| CVE-2026-14164 | Ubuntu | 7.5 | P0 | |
| CVE-2026-55833 | maven io.netty:netty-codec-http | 7.5 | P0 | |
| CVE-2024-7708 | maven org.eclipse.jetty:jetty-server | 7.5 | P0 | |
| CVE-2024-56526 | composer oxid-esales/oxideshop-ce | 7.5 | P0 | |
| CVE-2026-34486 | Apache Tomcat | 7.5 | P0 | KEV |
| CVE-2026-19913 | 7.5 | P0 | ||
| CVE-2026-45820 | npm fflate | 7.5 | P0 | |
| CVE-2026-42018 | JFrog Artifactory | 7.5 | P0 | KEV |
| CVE-2026-88975 | maven org.http4s:http4s-ember-core_2.13 | 7.5 | P0 | |
| CVE-2026-69218 | maven org.http4s:http4s-ember-core_2.12 | 7.5 | P0 | |
| CVE-2026-85396 | rubygems rubyzip | 7.5 | P0 | |
| CVE-2026-84409 | 7.5 | P0 | ||
| CVE-2015-5477 | ISC BIND | 7.5 | P0 | KEV |
| CVE-2026-106117 | nuget ImageSharp | 7.5 | P0 | |
| CVE-2026-97370 | maven com.github.junrar:junrar | 7.5 | P0 | |
| CVE-2026-105667 | 7.5 | P0 | ||
| CVE-2026-44511 | rubygems katalyst-koi | 7.4 | P0 | |
| CVE-2026-54783 | nuget CoreWCF.Primitives | 7.4 | P0 | |
| CVE-2026-56821 | maven io.netty:netty-handler-ssl-ocsp | 7.4 | P0 | |
| CVE-2026-56820 | maven io.netty:netty-handler-ssl-ocsp | 7.4 | P0 | |
| CVE-2026-50631 | maven org.apache.cxf:cxf-rt-rs-security-oa | 7.4 | P0 | |
| CVE-2025-9906 | pip keras | 7.3 | P0 | |
| CVE-2026-107716 | pip banks | 7.3 | P0 | |
| CVE-2026-105133 | Ahsay AhsayCBS | 7.3 | P0 | KEV |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | 7.2 | P0 | KEV |
| CVE-2023-20273 | Cisco Cisco IOS XE Web UI | 7.2 | P0 | KEV |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 7.2 | P0 | KEV |
| CVE-2026-41567 | go github.com/moby/moby/v2 | 7.2 | P0 | |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | 7.2 | P0 | KEV |
| CVE-2026-25700 | go github.com/apache/incubator-answer | 7.2 | P0 | |
| CVE-2026-88774 | 7.2 | P0 | ||
| CVE-2023-22894 | Strapi Strapi | 7.2 | P0 | KEV |
| CVE-2026-49338 | go go.senan.xyz/gonic | 7.1 | P0 | |
| CVE-2026-49339 | go go.senan.xyz/gonic | 7.1 | P0 | |
| CVE-2026-49284 | composer simplesamlphp/simplesamlphp | 7.1 | P0 | |
| CVE-2026-35341 | rust uu_mkfifo | 7.1 | P0 | |
| CVE-2026-54491 | composer phanan/koel | 7.1 | P0 | |
| CVE-2026-20779 | go code.gitea.io/gitea | 7.1 | P0 | |
| CVE-2026-17106 | go github.com/moby/go-archive | 7.1 | P0 | |
| CVE-2026-54321 | go github.com/daytonaio/daytona | 7.0 | P0 | |
| CVE-2026-58050 | Ubuntu | 7.0 | P0 | |
| CVE-2025-54518 | Ubuntu | 7.0 | P0 | |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Drive | 7.0 | P0 | KEV |
| CVE-2026-49271 | Ubuntu | 6.5 | P0 | |
| CVE-2025-15661 | Ubuntu | 6.5 | P0 | |
| CVE-2026-58051 | Ubuntu | 6.5 | P0 | |
| CVE-2026-14324 | Ubuntu | 6.5 | P0 | |
| CVE-2026-56434 | Ubuntu | 6.5 | P0 | |
| CVE-2026-45491 | Ubuntu | 6.2 | P0 | |
| CVE-2026-50229 | Ubuntu | 6.1 | P0 | |
| CVE-2026-50813 | Ubuntu | 6.1 | P0 | |
| CVE-2026-10305 | Ubuntu | 6.1 | P0 | |
| CVE-2026-47306 | Ubuntu | 6.1 | P0 | |
| CVE-2025-68686 | Fortinet FortiOS | 5.9 | P0 | KEV |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Fire | 5.0 | P0 | KEV |
| CVE-2008-4128 | Cisco IOS | 4.3 | P0 | KEV |
| CVE-2022-1388 | F5 BIG-IP | 0.0 | P0 | KEV |
| CVE-2022-29464 | WSO2 Multiple Products | 0.0 | P0 | KEV |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 0.0 | P0 | KEV |
| CVE-2022-0609 | Google Chromium Animation | 0.0 | P0 | KEV |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | 0.0 | P0 | KEV |
| CVE-2021-44228 | Apache Log4j2 | 0.0 | P0 | KEV |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / | 0.0 | P0 | KEV |
| CVE-2021-42321 | Microsoft Exchange | 0.0 | P0 | KEV |
| CVE-2021-27104 | Accellion FTA | 0.0 | P0 | KEV |
| CVE-2021-26084 | Atlassian Confluence Server and Data Cente | 0.0 | P0 | KEV |
| CVE-2019-3396 | Atlassian Confluence Server and Data Serve | 0.0 | P0 | KEV |
| CVE-2018-0171 | Cisco IOS and IOS XE | 0.0 | P0 | KEV |
| CVE-2019-19781 | Citrix Application Delivery Controller (AD | 0.0 | P0 | KEV |
| CVE-2021-22205 | GitLab Community and Enterprise Editions | 0.0 | P0 | KEV |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Managemen | 0.0 | P0 | KEV |
| CVE-2020-17144 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-34523 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2020-0688 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-34473 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-34527 | Microsoft Windows | 0.0 | P0 | KEV |
| CVE-2021-31207 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-26411 | Microsoft Internet Explorer | 0.0 | P0 | KEV |
| CVE-2021-40444 | Microsoft MSHTML | 0.0 | P0 | KEV |
| CVE-2017-0199 | Microsoft Office and WordPad | 0.0 | P0 | KEV |
| CVE-2020-1472 | Microsoft Netlogon | 0.0 | P0 | KEV |
| CVE-2021-26855 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-26858 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2021-27065 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2019-0604 | Microsoft SharePoint | 0.0 | P0 | KEV |
| CVE-2021-26857 | Microsoft Exchange Server | 0.0 | P0 | KEV |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 0.0 | P0 | KEV |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 | 0.0 | P0 | KEV |
| CVE-2021-22005 | VMware vCenter Server | 0.0 | P0 | KEV |
| CVE-2021-21985 | VMware vCenter Server | 0.0 | P0 | KEV |
| CVE-2020-10189 | Zoho ManageEngine | 0.0 | P0 | KEV |
| CVE-2023-25574 | pip jupyterhub-ltiauthenticator | 10.0 | P1 | |
| CVE-2026-47668 | npm dbgate-serve | 10.0 | P1 | |
| CVE-2025-14009 | pip nltk | 10.0 | P1 | |
| CVE-2026-44329 | go github.com/free5gc/smf | 10.0 | P1 | |
| CVE-2026-43898 | npm @nyariv/sandboxjs | 10.0 | P1 | |
| CVE-2026-45087 | go github.com/hahwul/dalfox/v2 | 10.0 | P1 | |
| CVE-2026-44330 | go github.com/free5gc/nef | 10.0 | P1 | |
| CVE-2026-44327 | go github.com/free5gc/nef | 10.0 | P1 | |
| CVE-2026-46695 | pip boxlite | 10.0 | P1 | |
| CVE-2026-47140 | npm vm2 | 10.0 | P1 | |
| CVE-2026-47137 | npm vm2 | 10.0 | P1 | |
| CVE-2026-47208 | npm vm2 | 10.0 | P1 | |
| CVE-2026-47131 | npm vm2 | 10.0 | P1 | |
| CVE-2026-54309 | npm n8n | 10.0 | P1 | |
| CVE-2026-3490 | pip picklescan | 10.0 | P1 | |
| CVE-2026-54782 | nuget CoreWCF.Primitives | 10.0 | P1 | |
| CVE-2026-54350 | npm @budibase/server | 10.0 | P1 | |
| CVE-2026-52813 | go gogs.io/gogs | 10.0 | P1 | |
| CVE-2026-46595 | go golang.org/x/crypto | 10.0 | P1 | |
| CVE-2026-49257 | pip mcp-pinot-server | 10.0 | P1 |