Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
405,032CVE records
3,524Published, last 7 days
1,739In CISA KEV
1,462Critical, last 30 days
5,599Analysed
00:17 UTCLast NVD sync
Filters Show:
9,883 results. Critical severity.
Page 2 of 495| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-77366 | Critical | 9.9 | Not yet mapped | Insecure direct object reference | - | - | - | Oct 12, 2026 |
| CVE-2026-108918 | Critical | 9.3 | Not yet mapped | Injection | - | - | - | Oct 12, 2026 |
| CVE-2026-108917 | Critical | 9.3 | Not yet mapped | Injection | - | - | - | Oct 12, 2026 |
| CVE-2026-109373 | Critical | 9.2 | Not yet mapped | CWE-441 | - | - | - | Oct 12, 2026 |
| CVE-2026-109372 | Critical | 9.3 | Not yet mapped | Improper authentication | - | - | - | Oct 12, 2026 |
| CVE-2026-109357 | Critical | 9.2 | Not yet mapped | LDAP injection | - | - | - | Oct 12, 2026 |
| CVE-2026-109321 | Critical | 9.3 | Not yet mapped | CWE-1391 | - | - | - | Oct 12, 2026 |
| CVE-2026-109238 | Critical | 9.2 | Not yet mapped | Server-side request forgery (SSRF) | - | - | - | Oct 12, 2026 |
| CVE-2026-108907 | Critical | 9.3 | Not yet mapped | Improper authentication | - | - | - | Oct 12, 2026 |
| CVE-2026-9191 | Critical | 9.6 | Not yet mapped | Origin validation error | - | - | - | Oct 12, 2026 |
| CVE-2026-92681 | Critical | 9.3 | Not yet mapped | Missing authentication for critica | - | - | - | Oct 12, 2026 |
| CVE-2026-85956 | Critical | 9.6 | Not yet mapped | Improper privilege management | - | - | - | Oct 12, 2026 |
| CVE-2026-85955 | Critical | 9.9 | Not yet mapped | Improper privilege management | - | - | - | Oct 12, 2026 |
| CVE-2026-85948 | Critical | 9.9 | Not yet mapped | Improper privilege management | - | - | - | Oct 12, 2026 |
| CVE-2026-85947 | Critical | 9.9 | Not yet mapped | Improper privilege management | - | - | - | Oct 12, 2026 |
| CVE-2026-109399 | Critical | 9.2 | Not yet mapped | Improper certificate validation | - | - | - | Oct 12, 2026 |
| CVE-2026-109394 | Critical | 9.1 | Not yet mapped | Insecure direct object reference | - | - | - | Oct 12, 2026 |
| CVE-2026-109391 | Critical | 9.2 | Not yet mapped | Deserialization of untrusted data | - | - | - | Oct 12, 2026 |
| CVE-2026-109390 | Critical | 9.8 | Not yet mapped | CWE-130 | - | - | - | Oct 12, 2026 |
| CVE-2026-108892 | Critical | 9.3 | Not yet mapped | Memory buffer overflow | - | - | - | Oct 12, 2026 |
