Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
424,636CVE records
5,163Published, last 7 days
1,779In CISA KEV
1,557Critical, last 30 days
5,599Analysed
13:17 UTCLast NVD sync
Filters Show:
1,779 results. Confirmed exploited in the wild.
Page 1 of 89| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-124194 | Medium | 6.5 |  Microsoft 365 Apps +2 | CWE-356 | Listed | Confirmed | 1.6% | Nov 10, 2026 |
| CVE-2026-125350 | High | 8.8 |  Google Chrome | Use after free | Listed | Confirmed | 0.96% | Nov 10, 2026 |
| CVE-2026-123218 | Critical | 9.8 |  Ibm Aspera Faspex | Incorrect authorization | Listed | Confirmed | 0.53% | Nov 7, 2026 |
| CVE-2026-19868 | High | 7.5 |  Sonicwall Sonicos | CWE-308 | Listed | Confirmed | 0.53% | Nov 6, 2026 |
| CVE-2026-116779 | Critical | 9.8 |  Freeswitch | Command injection | Listed | Confirmed | 2.5% | Nov 5, 2026 |
| CVE-2026-123158 | High | 8.1 |  Openbsd Openssh | CWE-394 | Listed | Confirmed | 19% | Nov 5, 2026 |
| CVE-2026-102895 | Critical | 9.8 |  Gpustack | Improper authentication | Listed | Confirmed | 0.52% | Nov 4, 2026 |
| CVE-2026-118527 | Medium | 4.3 |  Ivanti Connect Secure | CWE-340 | Listed | Confirmed | 0.82% | Nov 3, 2026 |
| CVE-2026-116606 | Critical | 9.3 |  Barracuda Email Security Gateway 300 Firmw +4 | Authentication bypass via alternat | Listed | Confirmed | 8.9% | Nov 2, 2026 |
| CVE-2026-111560 | High | 8.6 | Barracuda Networks Multiple Products OS | OS command injection | Listed | Confirmed | 6.2% | Nov 2, 2026 |
| CVE-2026-119977 | High | 8.1 |  Wordpress | TOCTOU race condition | Listed | Confirmed | 1.2% | Oct 31, 2026 |
| CVE-2026-76418 | High | 8.6 |  Cisco Adaptive Security Appliance Software +1 | CWE-690 | Listed | Confirmed | 0.82% | Oct 28, 2026 |
| CVE-2026-114625 | Critical | 9.4 |  Arista Velocloud Orchestrator | SQL injection | Listed | Confirmed | 1.0% | Oct 22, 2026 |
| CVE-2026-111497 | Critical | 9.2 | Google Brotli +39 | Unchecked return value | Listed | Confirmed | 83% | Oct 22, 2026 |
| CVE-2026-109619 | Critical | 9.2 |  Php +11 | Use after free | Listed | Confirmed | 100% | Oct 21, 2026 |
| CVE-2026-109618 | Critical | 9.2 | Php +10 | Use after free | Listed | Confirmed | 100% | Oct 21, 2026 |
| CVE-2026-111793 | Medium | 4.3 |  Openwave Webtop Media Transcoder | CWE-669 | Listed | Confirmed | 0.64% | Oct 16, 2026 |
| CVE-2026-111357 | High | 7.0 | Ivanti Connect Secure | Inclusion from untrusted sphere | Listed | Confirmed | 0.53% | Oct 15, 2026 |
| CVE-2026-102764 | Critical | 9.3 |  Beyondtrust Remote Support | Authentication bypass by spoofing | Listed | Confirmed | 79% | Oct 15, 2026 |
| CVE-2026-110936 | High | 8.4 |  Siemens Software Center | Uncontrolled search path element | Listed | Confirmed | 0.97% | Oct 15, 2026 |
