Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,493CVE records
2,864Published, last 7 days
1,726In CISA KEV
1,450Critical, last 30 days
5,599Analysed
15:16 UTCLast NVD sync
Filters Show:
363 results. Linked to ransomware operations.
Page 1 of 19| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-59310 | Critical | 9.8 |  Vmware Vcenter Server | Path traversal | Listed · RW | Confirmed | 2.6% | Jul 30, 2026 |
| CVE-2026-20316 | Medium | 5.3 |  Cisco Secure Firewall Management Center | Hard-coded password | Listed · RW | Confirmed | 35% | Jul 29, 2026 |
| CVE-2026-63077 | Critical | 9.8 |  Jetbrains Teamcity | Deserialization of untrusted data | Listed · RW | Confirmed | 9.8% | Jul 27, 2026 |
| CVE-2026-15410 | High | 7.2 |  Sonicwall Sma6210 Firmware +2 | Code injection | Listed · RW | Confirmed | 12% | Jul 14, 2026 |
| CVE-2026-15409 | Critical | 10.0 | Sonicwall Sma6210 Firmware +2 | Server-side request forgery (SSRF) | Listed · RW | Confirmed | 6.8% | Jul 14, 2026 |
| CVE-2026-12569 | Critical | 9.3 |  Ptc Flexplm +1 | Improper input validation | Listed · RW | Confirmed | 46% | Jun 18, 2026 |
| CVE-2026-35273 | Critical | 9.8 |  Oracle Peoplesoft Enterprise Peopletools | Missing authentication for critica | Listed · RW | Confirmed | 9.4% | Jun 11, 2026 |
| CVE-2026-50751 | Critical | 9.3 |  Checkpoint Gaia Os +1 | Improper authentication | Listed · RW | Confirmed | 6.3% | Jun 8, 2026 |
| CVE-2026-48027 | Critical | 9.3 | NNx Console | CWE-506 | Listed · RW | Confirmed | 1.3% | May 27, 2026 |
| CVE-2026-45659 | High | 8.8 |  Microsoft Sharepoint Server | Deserialization of untrusted data | Listed · RW | Confirmed | 2.7% | May 22, 2026 |
| CVE-2026-0257 | High | 7.8 |  Paloaltonetworks Pan Os +2 | Reliance on cookies without valida | Listed · RW | Confirmed | 96% | May 13, 2026 |
| CVE-2026-45321 | Critical | 9.6 |  Tanstack\/Arktype Adapter +39 | CWE-506 | Listed · RW | Confirmed | 1.1% | May 12, 2026 |
| CVE-2026-41940 | Critical | 9.3 |  Cpanel +2 | Missing authentication for critica | Listed · RW | Confirmed | 99% | Apr 29, 2026 |
| CVE-2026-33825 | High | 7.8 | Microsoft Defender Antimalware Platform | CWE-1220 | Listed · RW | Confirmed | 0.40% | Apr 14, 2026 |
| CVE-2026-20131 | Critical | 10.0 | Cisco Secure Firewall Management Center | Deserialization of untrusted data | Listed · RW | Confirmed | 43% | Mar 4, 2026 |
| CVE-2026-1731 | Critical | 9.9 |  Beyondtrust Privileged Remote Access +1 | OS command injection | Listed · RW | Confirmed | 91% | Feb 6, 2026 |
| CVE-2026-24423 | Critical | 9.3 |  Smartertools Smartermail | Missing authentication for critica | Listed · RW | Confirmed | 88% | Jan 23, 2026 |
| CVE-2026-23760 | Critical | 9.3 | Smartertools Smartermail | Authentication bypass via alternat | Listed · RW | Confirmed | 97% | Jan 22, 2026 |
| CVE-2025-68947 | Medium | 5.7 | Not yet mapped | Missing authorization | — | — | 0.13% | Jan 13, 2026 |
| CVE-2025-52691 | Critical | 10.0 | Smartertools Smartermail | Unrestricted file upload | Listed · RW | Confirmed | 86% | Dec 29, 2025 |
