CVE Tracker
96 records · 2 CISA KEV
A structured, cross-referenced database of 96 vulnerability records. Each record links the official CVSS severity (NVD), EPSS exploitation-probability (FIRST.org) and CISA KEV status. Filter, sort and download. All values are sourced and attributed; we add no opinion or risk rating of our own.
Source data as of:
Source: NVD · EPSS (FIRST.org) · CISA KEV
How to read these values
- CVSS — CVSS (NVD): a 0–10 severity score for the vulnerability itself. Higher is a more severe flaw, but a high CVSS does not by itself mean a record should be acted on first.
- EPSS — EPSS (FIRST.org): an estimated probability (0–1) that the vulnerability will be exploited in the wild in the next 30 days. It is a likelihood signal, distinct from CVSS severity.
- CISA KEV — CISA KEV: a yes/no flag for whether CISA has recorded the vulnerability as known to be exploited. Listing and dates are published by CISA.
Signals derived mechanically from the official source fields below (CVSS vector, CWE, EPSS percentile, CISA KEV, references). They restate facts — they are not a Quanteta risk rating, ranking or recommendation.
Filter & Sort
Showing 96 of 96 records
All records
| CVE ID | CVSS | Severity | EPSS | KEV | Signals | Affected vendors | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-56291 | 9.8 v3.1 | CRITICAL | 0.0084 | Yes | CISA KEVNetworkNo privilegesNo user interactionUnrestricted Upload | balbooa | 2026-07-09 |
| CVE-2026-48939 | 9.8 v3.1 | CRITICAL | 0.0150 | Yes | CISA KEVNetworkNo privilegesNo user interactionUnrestricted UploadVendor advisory ref | joomlic | 2026-06-20 |
| CVE-2026-57827 | 10.0 v4.0 | CRITICAL | — | — | NetworkNo privilegesNo user interactionUnrestricted Upload | — | 2026-07-11 |
| CVE-2026-61447 | 10.0 v3.1 | CRITICAL | — | — | NetworkNo privilegesNo user interactionCode InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61445 | 9.9 v3.1 | CRITICAL | — | — | NetworkNo user interactionPath TraversalVendor advisory ref | — | 2026-07-11 |
| CVE-2026-60090 | 9.8 v3.1 | CRITICAL | — | — | NetworkNo privilegesNo user interactionSQL InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-57828 | 9.0 v4.0 | CRITICAL | — | — | NetworkNo user interactionUnrestricted Upload | — | 2026-07-11 |
| CVE-2025-6784 | 8.8 v3.1 | HIGH | 0.0031 | — | NetworkNo user interactionCommand InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-13353 | 8.8 v3.1 | HIGH | 0.0038 | — | NetworkNo user interactionCode InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-1359 | 8.8 v3.1 | HIGH | — | — | NetworkNo user interactionIncorrect AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-14262 | 8.8 v3.1 | HIGH | 0.0031 | — | NetworkNo user interactionPrivilege ManagementVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15155 | 8.8 v3.1 | HIGH | 0.0037 | — | NetworkNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-2354 | 8.8 v3.1 | HIGH | 0.0033 | — | NetworkNo user interactionUnrestricted UploadVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61426 | 8.6 v3.1 | HIGH | — | — | NetworkNo privilegesNo user interactionInformation ExposureVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61429 | 8.5 v3.1 | HIGH | — | — | NetworkNo user interactionSSRFVendor advisory ref | — | 2026-07-11 |
| CVE-2026-21055 | 8.5 v4.0 | HIGH | 0.0012 | — | No privilegesNo user interaction | — | 2026-07-10 |
| CVE-2026-21042 | 8.4 v4.0 | HIGH | 0.0012 | — | No user interaction | — | 2026-07-10 |
| CVE-2026-21046 | 8.4 v4.0 | HIGH | 0.0010 | — | No user interaction | — | 2026-07-10 |
| CVE-2026-21049 | 8.4 v4.0 | HIGH | 0.0013 | — | No user interaction | — | 2026-07-10 |
| CVE-2026-58281 | 8.3 v3.1 | HIGH | — | — | NetworkNo privilegesInsecure DeserializationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-7655 | 8.1 v3.1 | HIGH | 0.0025 | — | NetworkNo privilegesNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15335 | 7.5 v3.1 | HIGH | 0.0039 | — | NetworkNo privilegesNo user interactionSQL InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15338 | 7.5 v3.1 | HIGH | 0.0032 | — | NetworkNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-4661 | 7.5 v3.1 | HIGH | 0.0029 | — | NetworkNo privilegesNo user interactionSQL InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-56303 | 7.5 v3.1 | HIGH | — | — | NetworkNo privilegesNo user interactionInformation ExposureVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61439 | 7.5 v3.1 | HIGH | — | — | NetworkNo privilegesNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-9282 | 7.5 v3.1 | HIGH | 0.0040 | — | NetworkNo privilegesNo user interactionPath TraversalVendor advisory ref | — | 2026-07-11 |
| CVE-2026-34481 | 7.5 v3.1 | HIGH | 0.0056 | — | NetworkNo privilegesNo user interactionVendor advisory ref | apache | 2026-04-10 |
| CVE-2026-61428 | 7.3 v3.1 | HIGH | — | — | NetworkNo privilegesNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-13114 | 7.2 v3.1 | HIGH | 0.0023 | — | NetworkNo privilegesNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-13378 | 7.2 v3.1 | HIGH | 0.0022 | — | NetworkNo privilegesNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-3576 | 7.2 v3.1 | HIGH | 0.0029 | — | NetworkNo privilegesNo user interactionImproper Input Validation | — | 2026-07-11 |
| CVE-2026-6939 | 7.2 v3.1 | HIGH | 0.0027 | — | NetworkNo privilegesNo user interactionXSS | — | 2026-07-11 |
| CVE-2026-61442 | 7.1 v3.1 | HIGH | — | — | NetworkNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-21052 | 6.8 v4.0 | MEDIUM | 0.0013 | — | No user interaction | — | 2026-07-10 |
| CVE-2026-21043 | 6.7 v4.0 | MEDIUM | 0.0013 | — | No user interaction | — | 2026-07-10 |
| CVE-2026-13262 | 6.5 v3.1 | MEDIUM | 0.0034 | — | NetworkNo user interactionSQL InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15072 | 6.5 v3.1 | MEDIUM | 0.0029 | — | NetworkNo user interactionSQL InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15073 | 6.5 v3.1 | MEDIUM | 0.0026 | — | NetworkNo user interactionSQL InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2025-13968 | 6.4 v3.1 | MEDIUM | 0.0020 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-10660 | 6.4 v3.1 | MEDIUM | — | — | No privilegesNo user interactionOut-of-bounds WriteVendor advisory ref | — | 2026-07-11 |
| CVE-2026-12126 | 6.4 v3.1 | MEDIUM | 0.0021 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-1382 | 6.4 v3.1 | MEDIUM | 0.0019 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15010 | 6.4 v3.1 | MEDIUM | 0.0021 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15096 | 6.4 v3.1 | MEDIUM | 0.0019 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15097 | 6.4 v3.1 | MEDIUM | 0.0020 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-5743 | 6.4 v3.1 | MEDIUM | 0.0024 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15473 | 6.3 v3.1 | MEDIUM | — | — | NetworkNo user interactionImproper Authorization | — | 2026-07-12 |
| CVE-2026-13757 | 6.2 v3.1 | MEDIUM | 0.0013 | — | No privilegesNo user interactionUncontrolled RecursionVendor advisory ref | p11-kit_project, redhat | 2026-06-29 |
| CVE-2026-0278 | 5.8 v4.0 | MEDIUM | 0.0015 | — | No user interaction | — | 2026-07-09 |
| CVE-2026-60088 | 5.5 v3.1 | MEDIUM | — | — | No privilegesPath TraversalVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15475 | 5.3 v3.1 | MEDIUM | — | — | No user interaction | — | 2026-07-12 |
| CVE-2026-15476 | 5.3 v3.1 | MEDIUM | — | — | No user interaction | — | 2026-07-12 |
| CVE-2026-10865 | 5.3 v3.1 | MEDIUM | 0.0033 | — | NetworkNo privilegesNo user interactionInformation ExposureVendor advisory ref | — | 2026-07-11 |
| CVE-2026-11901 | 5.3 v3.1 | MEDIUM | 0.0018 | — | NetworkNo privilegesNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-12426 | 5.3 v3.1 | MEDIUM | 0.0027 | — | NetworkNo privilegesNo user interactionInformation ExposureVendor advisory ref | — | 2026-07-11 |
| CVE-2026-12994 | 5.3 v3.1 | MEDIUM | 0.0030 | — | NetworkNo privilegesNo user interactionMissing Authorization | — | 2026-07-11 |
| CVE-2026-13250 | 5.3 v3.1 | MEDIUM | 0.0025 | — | NetworkNo privilegesNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-56296 | 5.3 v3.1 | MEDIUM | — | — | NetworkNo privilegesNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61454 | 5.3 v3.1 | MEDIUM | — | — | NetworkNo privilegesNo user interactionInformation ExposureVendor advisory ref | — | 2026-07-11 |
| CVE-2026-6801 | 5.3 v3.1 | MEDIUM | 0.0021 | — | NetworkNo privilegesNo user interactionInformation ExposureVendor advisory ref | — | 2026-07-11 |
| CVE-2026-6803 | 5.3 v3.1 | MEDIUM | 0.0029 | — | NetworkNo privilegesNo user interactionMissing Authorization | — | 2026-07-11 |
| CVE-2026-6804 | 5.3 v3.1 | MEDIUM | 0.0029 | — | NetworkNo privilegesNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-9017 | 5.3 v3.1 | MEDIUM | 0.0025 | — | NetworkNo privilegesNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2025-5017 | 4.9 v3.1 | MEDIUM | 0.0027 | — | NetworkNo user interactionSQL InjectionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-12141 | 4.9 v3.1 | MEDIUM | 0.0019 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-56763 | 4.8 v3.1 | MEDIUM | — | — | NetworkNo privilegesNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-11591 | 4.4 v3.1 | MEDIUM | 0.0025 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-11898 | 4.4 v3.1 | MEDIUM | 0.0025 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-3367 | 4.4 v3.1 | MEDIUM | 0.0026 | — | NetworkNo user interactionXSS | — | 2026-07-11 |
| CVE-2026-9738 | 4.4 v3.1 | MEDIUM | 0.0021 | — | NetworkNo user interactionXSSVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15470 | 4.3 v3.1 | MEDIUM | — | — | NetworkNo user interactionImproper Authorization | — | 2026-07-12 |
| CVE-2026-15471 | 4.3 v3.1 | MEDIUM | — | — | NetworkNo user interactionImproper Authorization | — | 2026-07-12 |
| CVE-2026-15472 | 4.3 v3.1 | MEDIUM | — | — | NetworkNo user interactionImproper Authorization | — | 2026-07-12 |
| CVE-2026-15474 | 4.3 v3.1 | MEDIUM | — | — | NetworkNo user interactionImproper Authorization | — | 2026-07-12 |
| CVE-2026-10041 | 4.3 v3.1 | MEDIUM | 0.0025 | — | NetworkNo user interactionAuthorization Bypass (IDOR) | — | 2026-07-11 |
| CVE-2026-10628 | 4.3 v3.1 | MEDIUM | 0.0026 | — | NetworkNo user interactionMissing Authorization | — | 2026-07-11 |
| CVE-2026-12103 | 4.3 v3.1 | MEDIUM | 0.0027 | — | NetworkNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-12738 | 4.3 v3.1 | MEDIUM | 0.0020 | — | NetworkNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-13116 | 4.3 v3.1 | MEDIUM | 0.0022 | — | NetworkNo user interactionAuthorization Bypass (IDOR)Vendor advisory ref | — | 2026-07-11 |
| CVE-2026-1832 | 4.3 v3.1 | MEDIUM | 0.0020 | — | NetworkNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-3552 | 4.3 v3.1 | MEDIUM | 0.0021 | — | NetworkNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-56240 | 4.3 v3.1 | MEDIUM | — | — | NetworkNo user interactionImproper AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-7544 | 4.3 v3.1 | MEDIUM | 0.0024 | — | NetworkNo user interactionInformation ExposureVendor advisory ref | — | 2026-07-11 |
| CVE-2026-7559 | 4.3 v3.1 | MEDIUM | 0.0025 | — | NetworkNo user interactionMissing Authorization | — | 2026-07-11 |
| CVE-2026-7620 | 4.3 v3.1 | MEDIUM | 0.0025 | — | NetworkNo user interactionMissing Authorization | — | 2026-07-11 |
| CVE-2026-8678 | 4.3 v3.1 | MEDIUM | 0.0021 | — | NetworkNo user interactionMissing AuthorizationVendor advisory ref | — | 2026-07-11 |
| CVE-2026-15028 | 3.9 v3.1 | LOW | 0.0020 | — | — | 2026-07-10 | |
| CVE-2026-61857 | 3.7 v3.1 | LOW | — | — | NetworkNo privilegesNo user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61861 | 3.7 v3.1 | LOW | — | — | NetworkNo privilegesNo user interactionUse After FreeVendor advisory ref | — | 2026-07-11 |
| CVE-2026-56372 | 3.3 v3.1 | LOW | — | — | No privilegesHeap OverflowVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61465 | 3.3 v3.1 | LOW | — | — | No privilegesResource ExhaustionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61858 | 3.3 v3.1 | LOW | — | — | No user interactionVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61870 | 2.9 v3.1 | LOW | — | — | No privilegesNo user interactionMemory LeakVendor advisory ref | — | 2026-07-11 |
| CVE-2026-61448 | 2.1 v4.0 | LOW | — | — | NetworkUnrestricted UploadVendor advisory ref | — | 2026-07-11 |
| CVE-2026-0276 | 1.1 v4.0 | LOW | 0.0014 | — | No user interactionPrivilege Management | — | 2026-07-09 |