CVE Intelligence Dashboard

Real-time vulnerability intelligence from NVD, CISA KEV, MITRE, EPSS, and GHSA feeds.

Hunt List CVEs with PoCs No Auth Required Last 30 Days
Quick Search: KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS SQLi Code Injection Path Traversal SSRF KEV + Has PoC
29,293
Total CVEs
3,291
Critical
11,440
High
9,153
Medium
1,762
CISA KEV
361
Ransomware
371
High EPSS (≥0.5)
762
PoC Links (18 CVEs)

⚠ ACT NOW — KEV + High EPSS

Known exploited with ≥50% exploitation probability
CVE CVSS EPSS Vendor Product Flags
CVE-2022-26134 —
1.0000
Atlassian Confluence Server/Data Center KEV RW
CVE-2022-29464 —
1.0000
WSO2 Multiple Products KEV RW
CVE-2023-0669 —
1.0000
Fortra GoAnywhere MFT KEV RW
CVE-2023-1389 —
1.0000
TP-Link Archer AX21 KEV
CVE-2023-1671 —
1.0000
Sophos Web Appliance KEV
CVE-2023-22518 —
1.0000
Atlassian Confluence Data Center and Server KEV RW
CVE-2023-27350 —
1.0000
PaperCut MF/NG KEV RW
CVE-2023-32315 —
1.0000
Ignite Realtime Openfire KEV
CVE-2023-35078 —
1.0000
Ivanti Endpoint Manager Mobile (EPMM) KEV RW
CVE-2023-35082 —
1.0000
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core KEV RW
CVE-2023-44487 —
1.0000
IETF HTTP/2 KEV
CVE-2023-4966 —
1.0000
Citrix NetScaler ADC and NetScaler Gateway KEV RW
CVE-2024-21887 —
1.0000
Ivanti Connect Secure and Policy Secure KEV RW
CVE-2024-21893 —
1.0000
Ivanti Connect Secure, Policy Secure, and Neurons KEV RW
CVE-2024-23897 —
1.0000
Jenkins Jenkins Command Line Interface (CLI) KEV RW
CVE-2024-3400 —
1.0000
Palo Alto Networks PAN-OS KEV RW
CVE-2024-7593 —
1.0000
Ivanti Virtual Traffic Manager KEV
CVE-2025-53770 —
1.0000
Microsoft SharePoint KEV RW
CVE-2026-109618 9.2
1.0000
PHP Group PHP KEV 710 PoC
CVE-2026-109619 9.2
1.0000
PHP Group PHP KEV

Recent High & Critical CVEs

View all critical →
CVE Severity CVSS EPSS First Seen Description Flags
CVE-2026-118984 high 7.0 — 2026-10-29 OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holde
CVE-2026-33923 high 7.5 — 2026-10-29 A signature verification vulnerability was discovered in the update installation functionality due t
CVE-2026-33924 high 7.5 — 2026-10-29 Two OS command injection vulnerabilities were discovered in the update installation functionality du
CVE-2026-105192 critical 9.8 0.0077 2026-10-29 LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so w
CVE-2026-107743 high 7.2 — 2026-10-29 The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up
CVE-2026-96889 high 7.8 0.0053 2026-10-29 A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincl
CVE-2026-117611 high 7.1 — 2026-10-29 Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Cert
CVE-2026-111418 high 7.5 — 2026-10-29 A server-side request forgery (SSRF) vulnerability exists in the Foxit official website’s HTML-to-PD
CVE-2026-111419 high 8.6 — 2026-10-29 A sensitive information exposure vulnerability exists on the Foxit official website because JavaScri
CVE-2026-111417 high 7.5 — 2026-10-29 A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion
CVE-2026-114358 critical 9.3 — 2026-10-29 This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user su
CVE-2025-49794 critical 9.1 0.0083 2026-10-29 A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements u
CVE-2025-62841 high 8.7 — 2026-10-29 An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup
CVE-2025-62839 high 8.7 — 2026-10-29 An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup
CVE-2026-32557 critical 9.3 0.0037 2026-10-29 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i
CVE-2024-3056 high 7.7 0.0054 2026-10-29 A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container
CVE-2024-1394 high 7.5 0.0153 2026-10-29 A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a
CVE-2026-114488 high 7.4 — 2026-10-29 A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as
CVE-2026-15564 high 7.4 — 2026-10-29 Wildfly's IIOP listener may permit deserialization of input streams before authentication is perform
CVE-2026-118905 high 7.1 — 2026-10-29 Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js version

Recent PoC Discoveries

View all →

Pipeline Status

Activity log →
● epss 2026-10-29T11:04
● kev 2026-10-29T11:00
● mitre 2026-10-29T11:00
● nvd 2026-10-29T11:00
● osv 2026-10-29T11:04
● vulncheck 2026-10-29T11:04

Data Sources

nvd 25,234
mitre 6,593
kev 1,762

Top KEV Vendors

View all →
Microsoft
390
Cisco
101
Apple
95
Adobe
83
Google
76
Oracle
46
Apache
41
Ivanti
36
Linux
32