CVE Intelligence Center

LIVE

Every vulnerability below is confirmed actively exploited by CISA, enriched with its EPSS exploit-prediction score, and ranked by a transparent Cyronix Priority Score. Open any CVE to see the full record and exactly why it scored the way it did.

50 ranked vulnerabilities

48score
CVE-2026-85706MEDIUM
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab Community Edition and Enterprise Edition · EPSS 93.0% · added 2026-09-11
46score
CVE-2026-71362MEDIUM
Adobe Commerce and Magento Incorrect Authorization Vulnerability
Adobe Commerce and Magento · EPSS 87.5% · added 2026-09-24
46score
CVE-2026-20079MEDIUM
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management · EPSS 88.2% · added 2026-09-09
46score
CVE-2026-81578MEDIUM
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
PaperCut NG/MF · EPSS 85.2% · added 2026-08-31
38score
CVE-2026-82078LOW
PaperCut NG/MF Unsafe Reflection Vulnerability
PaperCut NG/MF · EPSS 61.4% · added 2026-08-31
35score
CVE-2026-85046LOW
Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8 · EPSS 48.9% · added 2026-09-04
34score
CVE-2026-87902LOW
WordPress Core Remote File Inclusion Vulnerability
WordPress Core · EPSS 45.5% · added 2026-09-25
28score
CVE-2026-76461LOW
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco Secure Email Gateway · EPSS 28.3% · added 2026-09-14
27score
CVE-2026-19490LOW
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Citrix NetScaler · EPSS 23.2% · added 2026-09-09
26score
CVE-2026-93616LOW
Check Point Multiple Products Path Traversal Vulnerability
Check Point Multiple Products · EPSS 19.7% · added 2026-09-22
26score
CVE-2026-9586LOW
Sangoma Switchvox SQL Injection Vulnerability
Sangoma Switchvox · EPSS 19.0% · added 2026-09-02
24score
CVE-2026-76460LOW
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco Identity Services Engine · EPSS 14.0% · added 2026-09-16
24score
CVE-2026-86218LOW
N-able N-central Static Code Injection Vulnerability
N-able N-central · EPSS 12.9% · added 2026-09-08
24score
CVE-2026-82329LOW
JFrog Artifactory Improper Authentication Vulnerability
JFrog Artifactory · EPSS 14.1% · added 2026-09-02
23score
CVE-2026-42018LOW
JFrog Artifactory Improper Authentication Vulnerability
JFrog Artifactory · EPSS 9.8% · added 2026-09-11
23score
CVE-2026-42016LOW
JFrog Artifactory Incorrect Authorization Vulnerability
JFrog Artifactory · EPSS 8.6% · added 2026-09-11
23score
CVE-2026-83549LOW
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall SMA1000 Appliances · EPSS 10.8% · added 2026-09-02
23score
CVE-2026-83548LOW
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances · EPSS 8.8% · added 2026-09-02
22score
CVE-2026-85102LOW
Check Point Multiple Products Improper Certificate Validation Vulnerability
Check Point Multiple Products · EPSS 7.5% · added 2026-09-22
22score
CVE-2026-86060LOW
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
MikroTik RouterOS · EPSS 6.4% · added 2026-09-10
22score
CVE-2026-48710LOW
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex Starlette · EPSS 7.1% · added 2026-09-02
21score
CVE-2026-104286LOW
Fortinet FortiMail Path Traversal Vulnerability
Fortinet FortiMail · EPSS 2.2% · added 2026-10-01
21score
CVE-2026-65660LOW
Microsoft SharePoint Code Injection Vulnerability
Microsoft SharePoint · EPSS 2.1% · added 2026-09-25
21score
CVE-2026-94127LOW
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 BIG-IP APM · EPSS 2.2% · added 2026-09-22
21score
CVE-2026-7273LOW
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel GS1900 Series Switches · EPSS 2.5% · added 2026-09-21
21score
CVE-2025-39682LOW
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Linux Kernel · EPSS 2.9% · added 2026-09-18
21score
CVE-2026-87491LOW
Google Chromium V8 Out of Bounds Write Vulnerability
Google Chromium V8 · EPSS 3.1% · added 2026-09-09
21score
CVE-2025-25249LOW
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Fortinet Multiple Products · EPSS 3.9% · added 2026-09-09
21score
CVE-2026-85880LOW
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft Windows · EPSS 3.6% · added 2026-09-08
21score
CVE-2026-75650LOW
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe Commerce and Magento · EPSS 3.9% · added 2026-09-08
21score
CVE-2026-49869LOW
Kestra OSS OS Command Injection Vulnerability
Kestra Kestra OSS · EPSS 2.1% · added 2026-09-02
20score
CVE-2026-88779LOW
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler · EPSS 0.3% · added 2026-10-04
20score
CVE-2026-102489LOW
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH Zammad · EPSS 1.4% · added 2026-10-02
20score
CVE-2026-102490LOW
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH Zammad · EPSS 0.6% · added 2026-10-02
20score
CVE-2026-76504LOW
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Cisco Catalyst SD-WAN Manager · EPSS 1.6% · added 2026-09-30
20score
CVE-2026-86950LOW
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple Multiple Products · EPSS 1.2% · added 2026-09-29
20score
CVE-2026-88771LOW
Citrix NetScaler Improper Input Validation Vulnerability
Citrix NetScaler · EPSS 1.1% · added 2026-09-27
20score
CVE-2026-88772LOW
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler · EPSS 1.3% · added 2026-09-27
20score
CVE-2026-67279LOW
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
MikroTik RouterOS · EPSS 1.0% · added 2026-09-25
20score
CVE-2026-5430LOW
WSO2 Multiple Products Path Traversal Vulnerability
WSO2 Multiple Products · EPSS 0.6% · added 2026-09-24
20score
CVE-2026-93952LOW
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista VeloCloud Orchestrator · EPSS 1.1% · added 2026-09-22
20score
CVE-2026-53266LOW
Linux Kernel Out-of-Bounds Write Vulnerability
Linux Kernel · EPSS 0.8% · added 2026-09-18
20score
CVE-2025-39964LOW
Linux Kernel Race Condition Vulnerability
Linux Kernel · EPSS 1.0% · added 2026-09-18
20score
CVE-2026-87886LOW
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis Backup · EPSS 0.2% · added 2026-09-16
20score
CVE-2026-58704LOW
Google Pixel Improper Authorization Vulnerability
Google Pixel · EPSS 0.6% · added 2026-09-16
20score
CVE-2026-84869LOW
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise ScreenConnect · EPSS 0.9% · added 2026-09-11
20score
CVE-2026-67277LOW
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik RouterOS · EPSS 1.6% · added 2026-09-10
20score
CVE-2026-81963LOW
Microsoft Windows Link Following Vulnerability
Microsoft Windows · EPSS 0.4% · added 2026-09-08
20score
CVE-2026-59822LOW
BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI LiteLLM · EPSS 0.8% · added 2026-09-02
20score
CVE-2026-66384LOW
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog Artifactory · EPSS 0.7% · added 2026-08-27

How the Cyronix Priority Score works

The score is fully transparent and composed only of these factors: base severity (CVSS, up to 40 points), exploit probability (EPSS, up to 30), confirmed exploitation (CISA KEV, 20), and ransomware association (10). Organization-specific factors like internet exposure and asset criticality are deliberately excluded here — they require your asset context and appear in the private organization-risk view. Every CVE detail page shows the exact point contribution of each factor.

Sources:CISA KEV· 2026-10-05FIRST EPSS· 2026-10-05NVD (NIST)· 2026-10-05

Live verified intelligence · refreshed every 6 hours · showing the 50 newest exploited CVEs