Explore a curated list of the latest CVEs, with a focus on critical and high-severity vulnerabilities. Stay informed about actively exploited threats and get the insights you need to respond quickly and confidently.
| CVE ID | CVSS | Summary | Link |
|---|---|---|---|
| CVE-2026-80097 | 8.6 | CVE-2026-80097 is an improper authentication vulnerability in Microsoft Authenticator for Android that allows unauthorized attackers to elevate privileges locally. | View |
| CVE-2026-98432 | 9.8 | CVE-2026-98432 is a critical Linux kernel IPv4 vulnerability that allows remote attackers to trigger memory corruption, system crashes, or potentially execute code. | View |
| CVE-2026-109618 and CVE-2026-109619 | 9.2 | Learn how PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 enable unauthenticated remote code execution, and discover affected versions, mitigations, and patch updates. | View |
| CVE-2026-76504 | 9.8 | CVE-2026-76504 allows unauthenticated remote attackers to bypass authentication and gain administrator-level access to Cisco Catalyst SD-WAN Manager through improper URL encoding. | View |
| CVE-2026-86950 | 8.8 | CVE-2026-86950 is an Apple vulnerability that allows arbitrary code execution when processing a maliciously crafted file due to an out-of-bounds write flaw. | View |
| CVE-2026-35273 | 9.8 | CVE-2026-35273 is a critical Oracle PeopleSoft PeopleTools vulnerability that enables unauthenticated attackers to compromise systems remotely and potentially execute code. | View |
| CVE-2026-104286 | 9.8 | CVE-2026-104286 is a critical Fortinet FortiMail path traversal vulnerability that enables unauthenticated attackers to write arbitrary files remotely. | View |
| CVE-2026-42018 | 7.5 | CVE-2026-42018 is a high-severity JFrog Artifactory flaw allowing unauthenticated attackers to obtain an anonymous-user token and access sensitive resources. | View |
| CVE-2026-42016 | 8.1 | CVE-2026-42016 is a high-severity JFrog Artifactory vulnerability that allows attackers to escalate privileges through incorrect authorization of user tokens. | View |
| CVE-2026-67276 | 9.2 | CVE-2026-67276 allows attackers to forge RSA signatures and impersonate authorized users through an incomplete SSH public-key verification flaw in MikroTik RouterOS. | View |
| CVE-2026-20079 | 10.0 | CVE-2026-20079 is a critical Cisco FMC authentication bypass vulnerability allowing unauthenticated attackers to gain root access and execute commands remotely. | View |
| CVE-2026-44756 | 10.0 | CVE-2026-44756 is a critical SAP EPP memory safety flaw that allows unauthenticated attackers to send malformed requests and potentially execute code remotely. | View |
| CVE-2026-55040 | 9.1 | CVE-2026-55040 is a critical Microsoft SharePoint vulnerability allowing unauthenticated attackers to bypass authentication remotely and compromise sensitive data. | View |
| CVE-2026-68820 | 7.0 | CVE-2026-68820 is a Windows WinSock vulnerability that allows local attackers to elevate privileges through a use-after-free flaw. | View |
| CVE-2026-65791 | 9.8 | CVE-2026-65791 is a critical Windows iSCSI Target Service vulnerability that allows unauthorized attackers to execute code remotely over a network. | View |
| CVE-2026-62878 | 9.8 | CVE-2026-62878 is a critical Windows DNS vulnerability that allows remote attackers to execute code and potentially compromise affected systems. | View |
| CVE-2026-58231 | 10.0 | CVE-2026-58231 allows unauthenticated attackers to execute arbitrary code in SAP Commerce Cloud. | View |
| CVE-2026-65400 | 7.1 | CVE-2026-65400 is a macOS Screen Sharing vulnerability that allows attackers to bypass authentication and gain unauthorized remote access to affected systems | View |
| CVE-2026-63077 | 9.8 | CVE-2026-63077 is a critical JetBrains TeamCity vulnerability allowing unauthenticated remote code execution through the agent polling protocol. | View |
| CVE-2026-12569 | 9.8 | CVE-2026-12569 is a critical PTC Windchill and FlexPLM vulnerability enabling unauthenticated remote code execution through unsafe deserialization. | View |
| CVE-2026-60137 | 9.1 | CVE-2026-60137 is a WordPress Core SQL injection vulnerability that can expose sensitive data and contribute to remote code execution when chained with other flaws. | View |
| CVE-2026-63030 | 9.8 | CVE-2026-63030 is a critical WordPress REST API vulnerability that can lead to SQL injection and remote code execution when chained with CVE-2026-60137. | View |
| CVE-2026-16232 | 9.1 | CVE-2026-16232 is a critical Check Point SmartConsole authentication bypass vulnerability that enables attackers to gain unauthorized administrative access. | View |
| CVE-2025-34291 | 8.8 | CVE-2025-34291 is a critical Langflow vulnerability that enables account takeover and remote code execution through a chained CORS misconfiguration. | View |
| CVE-2025-3248 | 9.8 | CVE-2025-3248 Explained: How the Critical Langflow RCE Enabled JADEPUFFER Attacks | View |
| CVE-2026-45321 | 9.6 | CVE-2026-45321 Explained: Chained GitHub Actions Weaknesses Behind the TanStack Attack | View |
| CVE-2026-21385 | 7.8 | Qualcomm CVE-2026-21385: Analysis of an Actively Exploited Graphics Component Vulnerability | View |
| CVE-2026-46333 | 7.1 | CVE-2026-46333 is a Linux kernel vulnerability that allows local information disclosure through improper ptrace access control. | View |
| CVE-2026-34926 | 6.7 | Trend Micro Apex One CVE-2026-34926: Technical Analysis of an Actively Exploited Directory Traversal Vulnerability | View |
| CVE-2026-42945 | 8.1 | CVE-2026-42945 is a vulnerability in Apache HTTP Server that allows attackers to cause a denial-of-service (DoS), impacting service availability. | View |
| CVE-2026-48172 | 9.8 | From cPanel User to Root: How CVE-2026-48172 Enables Full Server Takeover in LiteSpeed Plugin | View |
| CVE-2026-26980 | 9.4 | CVE-2026-26980 is a critical Ghost CMS SQL injection vulnerability that allows attackers to access sensitive database information without authentication. | View |
| CVE-2026-0257 | 7.8 | Palo Alto PAN-OS GlobalProtect Authentication Bypass: Understanding CVE-2026-0257 | View |
| CVE-2026-48027 | 9.8 | Embedded Malicious Code in Nx Console: A Deep Dive into CVE-2026-48027 | View |
| CVE-2026-39987 | 9.8 | Missing Authentication in Marimo Terminal WebSocket Enables Remote Code Execution: CVE-2026-39987 | View |
| CVE-2026-32201 | 6.5 | Unauthorized Spoofing Attacks in Microsoft SharePoint Server: Understanding CVE-2026-32201 | View |
| CVE-2026-20128 | 7.5 | CVE-2026-20128: Information Disclosure in Cisco SD-WAN Manager DCA Feature Due to Recoverable Password Storage | View |
| CVE-2026-40372 | 9.1 | CVE-2026-40372 is a critical vulnerability in ASP.NET Core that allows remote attackers to elevate privileges due to improper cryptographic signature verification. | View |
| CVE-2026-28950 | 6.2 | CVE-2026-28950 is an information disclosure vulnerability in Apple iOS and iPadOS where deleted notifications may remain stored on the device due to improper data redaction | View |
| CVE-2025-13480 | 6.5 | CVE-2025-13480 allows low-privileged users to access administrator-only resources in Fudo Enterprise through improperly protected API endpoints, exposing sensitive system information. | View |
| CVE-2026-32202 | 4.3 | CVE-2026-32202 is a Windows Shell protection mechanism failure vulnerability that allows attackers to perform spoofing attacks over a network, potentially exposing sensitive information. | View |
| CVE-2026-3854 | 8.8 | A command injection flaw in Enterprise Server allows attackers with repository push access to execute remote code through crafted git push options due to improper input sanitization | View |
| CVE-2026-41940 | 9.8 | CVE-2026-41940 in Focus: cPanel & WHM Session Flaw Leading to Full Server Takeover | View |
| CVE-2026-34621 | 8.6 | CVE-2026-34621 is a high-severity Adobe Acrobat and Reader prototype pollution flaw actively exploited in the wild. Malicious PDFs can trigger code execution on Windows and macOS. It is listed in CISA’s KEV catalog, and Adobe has released security patches. | View |
| CVE-2026-27944 | 9.8 | CVE-2026-27944 is a critical Nginx UI flaw before 2.3.3. An unauthenticated /api/backup endpoint exposes full backups. It also leaks AES keys in the X-Backup-Security header, allowing decryption. This can expose credentials, sessions, SSL keys, and configs, leading to full system compromise. | View |
| CVE-2026-31431 | 7.8 | CVE-2026-31431 (“Copy Fail”) is a Linux kernel AF_ALG privilege escalation flaw allowing local users to gain root by corrupting page cache memory without modifying disk files. It enables container escape and impacts major Linux distributions since 2017, requiring immediate patching. | View |
| CVE-2026-20122 | 5.4 | CVE-2026-20122 is a Cisco SD-WAN Manager API flaw where authenticated read-only users can overwrite system files due to improper file handling. It can lead to vManage privilege escalation and is actively exploited in the wild, listed in CISA’s KEV catalog. | View |
| CVE-2026-29000 | 9.1 | CVE-2026-29000 is a critical pac4j-jwt flaw that lets attackers bypass authentication by forging encrypted JWTs using the server’s public key. It affects versions before 4.5.9, 5.7.9, and 6.3.3 and requires immediate patching. | View |
| CVE-2026-21262 | 8.8 | CVE-2026-21262 is a high-severity SQL Server privilege escalation flaw (CVSS 8.8) caused by improper access control. It allows a low-privileged authenticated user to gain sysadmin access over the network. Exploitation can result in full control of the database, including the ability to read, modify, or delete data. It affects SQL Server 2016-2025 and has been fixed through Microsoft security updates. | View |
| CVE-2026-25172 | 8.0 | CVE-2026-25172 is a high-severity remote code execution vulnerability in Windows Routing and Remote Access Service caused by integer overflow conditions leading to heap memory corruption when processing crafted network traffic. It affects multiple Windows client and server versions with RRAS enabled and is addressed through Microsoft March 2026 security updates, including cumulative patches and hotpatch releases. | View |
A CVE (Common Vulnerabilities and Exposures) is a unique identifier given to a publicly known cybersecurity flaw. It helps researchers and security teams talk about the same issue using a standard reference.
Vulnerabilities in cybersecurity are weaknesses or flaws in software, hardware, or systems that attackers can exploit to gain unauthorized access, disrupt operations, or steal sensitive information.
Each CVE can be linked to a CVSS (Common Vulnerability Scoring System) score, which rates the severity of the vulnerability (from 0 to 10). This score is usually available in the CVE details and helps assess how dangerous the issue is.
You can find CVEs through official databases like NVD, MITRE, vendor advisories, security blogs, or tools like scanners and vulnerability management platforms.
Fixing a CVE usually involves applying a patch or update released by the software vendor. In some cases, temporary workarounds or configuration changes can reduce the risk until a full fix is available.
A CVE is not calculated; it’s a unique ID assigned to a discovered vulnerability. However, the related CVSS score is calculated based on how easy the vulnerability is to exploit, the potential impact, and whether it needs user interaction.
See Fidelis Security platforms in action. Learn how our fast scalable platforms provide full visibility, deep insights, and rapid response to help security teams worldwide protect, detect, respond, and neutralize against advanced cyber adversaries.
Understand the security risks AI agents introduce and learn how to protect machine identities across your enterprise.
