Vulnerability intelligence

VULONE Vulnerability Database

Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.

424,636CVE records
5,163Published, last 7 days
1,779In CISA KEV
1,557Critical, last 30 days
5,599Analysed
13:17 UTCLast NVD sync
Filters Show:
SeverityCriticalHighMediumLow
ExploitationCISA KEVRansomware useHighest EPSS
PublishedLast 7 daysLast 30 daysLast 90 daysLast year
SortNewestRecently modifiedHighest CVSSNewest in KEV

Latest CVEs. Most recently published vulnerabilities.

View all
IDSeverityScoreTechnologyWeaknessCISA KEVExploitEPSSPublished
CVE-2026-75869High8.8Not yet mappedOS command injection---Nov 12, 2026
CVE-2026-75868High8.1Not yet mappedIncorrect authorization---Nov 12, 2026
CVE-2026-75867High8.1Not yet mappedIncorrect authorization---Nov 12, 2026
CVE-2026-75864High8.1Not yet mappedMissing authorization---Nov 12, 2026
CVE-2026-19422Critical9.1Not yet mappedMissing authentication for critica---Nov 12, 2026
CVE-2026-127056High8.7Not yet mappedCWE-407---Nov 12, 2026
CVE-2026-127050High7.1Not yet mappedPath traversal---Nov 12, 2026
CVE-2026-126994Low2.1Not yet mappedCWE-470---Nov 12, 2026
CVE-2026-126993Medium5.5Not yet mappedCWE-310---Nov 12, 2026
CVE-2026-125870Low2.3Not yet mappedIncorrect authorization---Nov 12, 2026
CVE-2026-125285High8.8Not yet mappedAuthentication bypass via alternat---Nov 12, 2026
CVE-2026-123139Medium5.8Not yet mappedCWE-940---Nov 12, 2026

Exploited in the wild. Newest additions to the CISA Known Exploited Vulnerabilities catalog.

View all
IDSeverityScoreTechnologyWeaknessCISA KEVExploitEPSSKEV added
CVE-2026-116606Critical9.3Barracuda Email Security Gateway 300 Firmw +4Authentication bypass via alternatListedConfirmed8.9%Nov 10, 2026
CVE-2026-125350High8.8Google ChromeUse after freeListedConfirmed0.96%Nov 10, 2026
CVE-2026-111560High8.6Barracuda Networks Multiple Products OS OS command injectionListedConfirmed6.2%Nov 10, 2026
CVE-2026-20320High7.5Cisco Broadworks Application Delivery Plat +3XML external entity (XXE)ListedConfirmed0.82%Nov 10, 2026
CVE-2026-124194Medium6.5Microsoft 365 Apps +2CWE-356ListedConfirmed1.6%Nov 10, 2026
CVE-2026-111793Medium4.3Openwave Webtop Media TranscoderCWE-669ListedConfirmed0.64%Nov 10, 2026
CVE-2026-102895Critical9.8GpustackImproper authenticationListedConfirmed0.52%Nov 9, 2026
CVE-2026-116779Critical9.8FreeswitchCommand injectionListedConfirmed2.5%Nov 9, 2026

Most likely to be exploited. Highest EPSS probability among CVEs published in the last six months.

View all
IDSeverityScoreTechnologyWeaknessCISA KEVExploitEPSSPublished
CVE-2026-109619Critical9.2Php +11Use after freeListedConfirmed100%Oct 21, 2026
CVE-2026-109618Critical9.2Php +10Use after freeListedConfirmed100%Oct 21, 2026
CVE-2026-10520Critical10.0Ivanti Standalone SentryOS command injectionListedConfirmed100%Jun 9, 2026
CVE-2026-8037Critical9.8Progress Connection Manager For Objectscal +3Command injectionListedConfirmed100%Jun 4, 2026
CVE-2026-21589Critical9.3Atlassian Bitbucket Data Center +9CWE-552ListedConfirmed100%Oct 5, 2026
CVE-2026-75650Critical10.0Adobe Commerce +2CWE-1336ListedConfirmed99%Sep 7, 2026
CVE-2026-72898Critical10.0MetabaseSQL injectionListedConfirmed98%Aug 10, 2026
CVE-2026-85706Critical10.0GitlabPath traversalListedConfirmed97%Sep 12, 2026

Ransomware-linked. Known ransomware use per CISA, or referenced in a crew playbook in the VULONE knowledge base.

View all
IDSeverityScoreTechnologyWeaknessCISA KEVExploitEPSSKEV added
CVE-2026-59310Critical9.8Vmware Vcenter ServerPath traversalListed · RWConfirmed62%Aug 18, 2026
CVE-2026-63077Critical9.8Jetbrains TeamcityDeserialization of untrusted dataListed · RWConfirmed95%Aug 5, 2026
CVE-2026-20316Medium5.3Cisco Secure Firewall Management CenterHard-coded passwordListed · RWConfirmed35%Jul 29, 2026
CVE-2026-15409Critical10.0Sonicwall Sma6210 Firmware +2Server-side request forgery (SSRF)Listed · RWConfirmed6.8%Jul 14, 2026
CVE-2026-15410High7.2Sonicwall Sma6210 Firmware +2Code injectionListed · RWConfirmed12%Jul 14, 2026
CVE-2026-45659High8.8Microsoft Sharepoint ServerDeserialization of untrusted dataListed · RWConfirmed80%Jul 1, 2026
CVE-2026-12569Critical9.3Ptc Flexplm +1Improper input validationListed · RWConfirmed46%Jun 25, 2026
CVE-2026-35273Critical9.8Oracle Peoplesoft Enterprise PeopletoolsMissing authentication for criticaListed · RWConfirmed97%Jun 12, 2026

Critical. CVSS 9.0 and above, newest first.

View all
IDSeverityScoreTechnologyWeaknessCISA KEVExploitEPSSPublished
CVE-2026-19422Critical9.1Not yet mappedMissing authentication for critica---Nov 12, 2026
CVE-2026-127046Critical9.2Not yet mappedInformation exposure---Nov 12, 2026
CVE-2026-127016Critical9.2Not yet mappedMissing authorization---Nov 12, 2026
CVE-2026-90908Critical9.3Not yet mappedCWE-807---Nov 12, 2026
CVE-2026-110003Critical9.3Not yet mappedAuthentication bypass via alternat---Nov 12, 2026
CVE-2026-8333Critical9.4Not yet mappedCross-site scripting---Nov 12, 2026
CVE-2026-12591Critical9.9Not yet mappedMissing authorization---Nov 12, 2026
CVE-2026-12507Critical9.1Not yet mappedSQL injection---Nov 12, 2026

Most affected vendors. Vulnerable configurations published in the last 12 months.

Microsoft36,209 Qualcomm13,117 Google4,659 Apple3,719 Oracle3,589 Linux3,228 Ibm2,410 Mediatek2,183 Adobe1,578 Hanwhavision1,200 Mozilla1,112 Tp Link1,107 Phoenixcontact1,003 F5983 Apache941 Redhat904
Browse all vulnerabilities

For your tooling

The same records as JSON.

Filter by KEV, severity, EPSS, vendor and product, poll with since, and pull the ransomware crews, C2 servers and forum chatter that reference each CVE. Or subscribe over TAXII from Sentinel, Splunk, MISP or OpenCTI.

Start freeRead the docs
$ curl -H "Authorization: Bearer vul_your_key" \
    https://app.vulone.com/api/v1/cve?kev=1&sort=kev

{ "total": 1,779, "has_more": true, "cves": [ … ] }

Sources: NIST NVD (CVE API 2.0), CISA Known Exploited Vulnerabilities catalog, FIRST EPSS. Automated analyses are generated by VULONE's analysis model and are not human-reviewed.