Skip to main content

Security Dashboard

7d 14d 30d 90d
Total CVEs
1372
last 7 days
Avg Priority
20.7
of max 220
KEV
1
actively exploited
POC
64
public exploits
Unpatched
217
CRIT/HIGH without patch
How is Priority Score calculated?

Priority Score is a composite risk metric (0-220) combining multiple real-world threat signals:

KEV +50
CISA Known Exploited Vulnerability — confirmed active exploitation in the wild
EPSS x100
Exploit Prediction Scoring System — probability of exploitation in next 30 days (0-100)
CVSS x5
Common Vulnerability Scoring System — technical severity (0-50)
POC +20
Public exploit code exists — lowers barrier for attackers
0-40 Low 40-80 Medium 80-120 High 120+ Critical

Patch Now — Known Exploited Vulnerabilities

116
CVE-2026-48027
Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console,
CRITICAL

Priority Distribution

CRITICAL HIGH MEDIUM LOW KEV Only POC Only Unpatched CRIT/HIGH
Priority CVE
116 CVE-2026-48027
Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious ver
66 CVE-2026-24444
SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 con
57 CVE-2026-9346
A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function
57 CVE-2026-9345
A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the f
57 CVE-2026-9344
A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The
57 CVE-2026-9348
A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vuln
57 CVE-2026-9360
A security flaw has been discovered in Edimax EW-7438RPn 1.28a. Affected by this
57 CVE-2026-9295
A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the f
57 CVE-2026-9294
A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is
56 CVE-2025-70103
Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to th
56 CVE-2026-31266
Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in th
50 CVE-2026-33712
Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the preview cha
50 CVE-2026-42757
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v
50 CVE-2026-42748
Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo
50 CVE-2026-42756
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v
49 CVE-2026-42758
Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias Webinar
49 CVE-2026-32253
Sunshine is a self-hosted game stream host for Moonlight. In versions prior to 2
49 CVE-2026-48902
The password and username reset features created plain http links for https conn
49 CVE-2026-48691
FastNetMon Community Edition through 1.2.9 contains an integer overflow in the B
49 CVE-2026-7524
IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to im
49 CVE-2026-38707
A command injection vulnerability exists in the IPSec VPN feature of InHand Netw
49 CVE-2026-38703
A command injection vulnerability exists in the ZeroTier VPN feature of InHand N
49 CVE-2026-38702
A command injection vulnerability exists in the Admin Access feature of InHand N
49 CVE-2026-8760
The Login with OTP plugin for WordPress is vulnerable to authentication bypass i
49 CVE-2026-48689
FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buf
49 CVE-2026-45039
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta
49 CVE-2026-6960
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file upload
49 CVE-2026-9642
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthentica
49 CVE-2026-8175
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM A
49 CVE-2026-42731
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verifi
49 CVE-2026-38704
A command injection vulnerability exists in the WireGuard VPN feature of InHand
49 CVE-2026-48687
FastNetMon Community Edition through 1.2.9 contains an OS command injection vuln
47 CVE-2026-8134
Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the p
47 CVE-2026-9739
Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During
47 CVE-2026-32998
This vulnerability in Veeam Service Provider Console allows for remote code exec
47 CVE-2026-48906
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrar
47 CVE-2026-42747
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
47 CVE-2026-42755
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
46 CVE-2026-8980
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privile
46 CVE-2026-42740
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
46 CVE-2026-42761
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
46 CVE-2026-42727
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
46 CVE-2026-8979
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an auth
46 CVE-2026-49002
Access control failure means that an application does not effectively check user
46 CVE-2026-7876
IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19
45 CVE-2026-8135
Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to inse
44 CVE-2026-8832
The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code
44 CVE-2026-46414
Microsoft UFO open-source framework for intelligent automation across devices an
44 CVE-2026-47161
RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7
44 CVE-2026-8787
The Firebase Support & Chat Management plugin for WordPress is vulnerable to pri
44 CVE-2026-48920
Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining im
44 CVE-2026-38807
Insecure Permissions vulnerability in kvf-admin v1.0.0 allows a remote attacker
44 CVE-2026-6897
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modificat
44 CVE-2026-44988
LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and
44 CVE-2026-6895
The WishList Member plugin for WordPress is vulnerable to Missing Authorization
44 CVE-2026-6898
The Wishlist Member plugin for WordPress is vulnerable to unauthorized modificat
44 CVE-2026-6419
The WishList Member plugin for WordPress is vulnerable to Privilege Escalation v
44 CVE-2026-41075
RT is an open source, enterprise-grade issue and ticket tracking system. Version
44 CVE-2026-5065
IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credential
44 CVE-2026-9009
The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnera
44 CVE-2026-9018
The Easy Elements for Elementor - Addons & Website Templates plugin for WordPres
44 CVE-2026-6226
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthent
44 CVE-2026-8915
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflo
44 CVE-2026-9227
The GutenBee - Gutenberg Blocks plugin for WordPress is vulnerable to Arbitrary
44 CVE-2026-45044
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta
44 CVE-2026-7802
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authoriza
44 CVE-2026-4944
vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remot
44 CVE-2026-36044
@pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enume
44 CVE-2026-8179
IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM A
44 CVE-2026-8992
An improper certificate validation vulnerability in Ivanti Secure Access Client
44 CVE-2026-48544
Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in
44 CVE-2026-40850
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40819
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40818
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40817
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40816
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40815
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40814
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40813
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40812
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40811
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-40810
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection
44 CVE-2026-45041
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta
43 CVE-2026-42737
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v
43 CVE-2026-32997
A vulnerability allowing an authenticated user with the Backup Administrator rol
43 CVE-2026-8652
An OS Command Injection vulnerability exists in Aterm. If a malicious third pers
43 CVE-2026-3515
A vulnerability in the `GitHubRepository` block of the `prefect-github` integrat
43 CVE-2026-42730
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
43 CVE-2026-9789
A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense softwar
43 CVE-2026-9489
NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulner

Oldest Unpatched Critical/High CVEs

CVE Severity CVSS Priority Days Open
CVE-2024-3400 CRITICAL 10.0 224 776d
CVE-2019-19781 CRITICAL 9.8 223 2344d
CVE-2020-5902 CRITICAL 9.8 223 2157d
CVE-2021-35464 CRITICAL 9.8 223 1771d
CVE-2020-10189 CRITICAL 9.8 223 2274d
CVE-2012-4681 CRITICAL 9.8 223 5021d
CVE-2022-42475 CRITICAL 9.8 223 1242d
CVE-2023-3519 CRITICAL 9.8 223 1044d
CVE-2015-7450 CRITICAL 9.8 222 3798d
CVE-2023-34048 CRITICAL 9.8 222 946d
1 / 3 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy