CVE registry

extracted from the last 150 dispatches · 444 CVE · CISA KEV · FIRST EPSS · NVD

spectrum over CVE-bearing dispatches

CVE-2021-33044

2026-08-18

KEVEPSS 100%CVSS 9.8EK

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

→ dispatch: 🎥 Operation CameraSwarm: over 14,000 Dahua ca…NVD ↗

CVE-2026-33824

2026-08-18

KEVEPSS 73%CVSS 9.8ZF

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

→ dispatch: [KEV] CVE-2026-33824: Microsoft Internet Key E…NVD ↗

CVE-2026-59310

2026-08-12

KEVEPSS 46%CVSS 9.8EK

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

→ dispatch: [KEV] CVE-2026-59310: Broadcom VMware vCenter …NVD ↗

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted i…

→ dispatch: Exploited Zimbra Flaw Highlights Shrinking Win…NVD ↗

CVE-2025-62593

2026-08-17

KEVEPSS 17%CVSS 8.8ZF

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to a…

→ dispatch: [KEV] CVE-2025-62593: Ray-Project Ray Code Inj…NVD ↗

CVE-2026-64849

2026-08-19

KEVEPSS 16%CVSS 9.3ZF

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webho…

→ dispatch: [KEV] CVE-2026-64849: MLflow Server-Side Reque…NVD ↗

CVE-2026-65400

2026-08-15

KEVEPSS 10%CVSS 9.8EK

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen…

→ dispatch: [KEV] CVE-2026-65400: Apple macOS Improper Aut…NVD ↗

CVE-2026-68820

2026-08-11

KEVEPSS 6%CVSS 7TQ

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-72530

2026-08-20

KEVEPSS 2%CVSS 9ZF

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the is…

→ dispatch: [KEV] CVE-2026-72530: TrueConf Server Code Inj…NVD ↗

CVE-2026-82078

2026-09-01

KEVEPSS 0.46%CVSS 9.1EK

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without va…

→ dispatch: PaperCut Exploitation Escalates to Active Intr…NVD ↗

CVE-2026-72898

2026-08-11

KEVCVSS 10EK

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

→ dispatch: [KEV] CVE-2026-72898: Metabase SQL Injection V…NVD ↗

CVE-2026-20349

2026-08-11

KEVCVSS 8.6EK

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote att…

→ dispatch: [KEV] CVE-2026-20349: Cisco Secure Firewall Ad…NVD ↗

CVE-2026-8037

2026-08-07

KEVCVSS 9.6ZF

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in mu…

→ dispatch: [KEV] CVE-2026-8037: Progress LoadMaster Comma…NVD ↗

CVE-2024-39943

2026-08-18

EPSS 37%CVSS 9.9EK

rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if they have Upload permissions). This occurs because a shell is used to execute df…

→ dispatch: 🎥 Operation CameraSwarm: over 14,000 Dahua ca…NVD ↗

CVE-2026-62832

2026-08-11

EPSS 3%CVSS 7.8TQ

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65665

2026-08-11

EPSS 3%CVSS 8.8TQ

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62893

2026-08-11

EPSS 3%CVSS 9.8TQ

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-59124

2026-08-11

EPSS 2%CVSS 9.8TQ

Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-69836

2026-08-21

EPSS 2%CVSS 10EK

Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

→ dispatch: The Cyber Express Weekly Roundup: Exploited En…NVD ↗

CVE-2026-62878

2026-08-11

EPSS 1%CVSS 9.8TQ

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62898

2026-08-11

EPSS 1%CVSS 7.5TQ

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-50515

2026-08-11

EPSS 1%CVSS 9.9TQ

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62901

2026-08-11

EPSS 1%CVSS 7.5TQ

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-64921

2026-08-11

EPSS 1.00%CVSS 8.8TQ

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62815

2026-08-11

EPSS 0.98%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62818

2026-08-11

EPSS 0.97%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62911

2026-08-11

EPSS 0.95%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-47299

2026-08-11

EPSS 0.94%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-50516

2026-08-11

EPSS 0.84%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62869

2026-08-11

EPSS 0.82%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-57104

2026-08-11

EPSS 0.81%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62902

2026-08-11

EPSS 0.78%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-59115

2026-08-11

EPSS 0.77%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-49163

2026-08-11

EPSS 0.75%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62827

2026-08-11

EPSS 0.73%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62899

2026-08-11

EPSS 0.71%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62817

2026-08-11

EPSS 0.67%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-56162

2026-08-11

EPSS 0.66%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62823

2026-08-11

EPSS 0.66%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62822

2026-08-11

EPSS 0.63%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-70332

2026-08-11

EPSS 0.63%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62824

2026-08-11

EPSS 0.63%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65667

2026-08-11

EPSS 0.62%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-68823

2026-08-11

EPSS 0.60%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-70340

2026-08-11

EPSS 0.60%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65791

2026-08-11

EPSS 0.60%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62819

2026-08-11

EPSS 0.58%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65806

2026-08-11

EPSS 0.58%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-50481

2026-08-11

EPSS 0.56%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62889

2026-08-11

EPSS 0.56%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62900

2026-08-11

EPSS 0.55%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65789

2026-08-11

EPSS 0.54%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62820

2026-08-11

EPSS 0.54%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62872

2026-08-11

EPSS 0.54%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63508

2026-08-11

EPSS 0.53%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62873

2026-08-11

EPSS 0.53%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62830

2026-08-11

EPSS 0.52%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65668

2026-08-11

EPSS 0.52%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65675

2026-08-11

EPSS 0.50%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-59118

2026-08-11

EPSS 0.48%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62896

2026-08-11

EPSS 0.47%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-56161

2026-08-11

EPSS 0.46%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-71331

2026-08-11

EPSS 0.45%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62918

2026-08-11

EPSS 0.45%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65657

2026-08-11

EPSS 0.44%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62836

2026-08-11

EPSS 0.43%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-58641

2026-08-11

EPSS 0.40%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62886

2026-08-11

EPSS 0.40%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62871

2026-08-11

EPSS 0.40%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62816

2026-08-11

EPSS 0.39%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2025-31702

2026-08-18

EPSS 0.39%EK

→ dispatch: 🎥 Operation CameraSwarm: over 14,000 Dahua ca…NVD ↗

CVE-2026-63525

2026-08-11

EPSS 0.38%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-66802

2026-08-11

EPSS 0.36%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-68794

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-68804

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63513

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63519

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65664

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-66807

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63515

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63518

2026-08-11

EPSS 0.35%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-68816

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63526

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63532

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-64898

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-64903

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-64909

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-64910

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-64911

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-64907

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-59130

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62897

2026-08-11

EPSS 0.34%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-70130

2026-08-11

EPSS 0.32%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-61357

2026-08-11

EPSS 0.31%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-70354

2026-08-11

EPSS 0.29%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62909

2026-08-11

EPSS 0.29%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65777

2026-08-11

EPSS 0.29%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-59131

2026-08-11

EPSS 0.28%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62890

2026-08-11

EPSS 0.27%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-66799

2026-08-11

EPSS 0.27%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-65810

2026-08-11

EPSS 0.27%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-63522

2026-08-11

EPSS 0.24%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

CVE-2026-62892

2026-08-11

EPSS 0.20%TQ

→ dispatch: CVE-2026-68820 is in KEV. Here Is What CISA BO…NVD ↗

sources: CISA KEV · FIRST EPSS · NIST NVD — keyless, free. EPSS = 30-day exploit probability. KEV = actively exploited in the wild.