Senserva: actively-exploited non-Microsoft vulnerabilities (CISA KEV) https://senserva.com/non-microsoft-cve-tracker.html The newest non-Microsoft CVEs in the CISA Known Exploited Vulnerabilities catalog, with vendor, CVSS, and ransomware flags. From Senserva. en-us Tue, 30 Jun 2026 00:00:00 GMT 720 SimpleHelp SimpleHelp: SimpleHelp Authentication Bypass Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-48558 kev-CVE-2026-48558 Mon, 29 Jun 2026 00:00:00 GMT Exploited CVE-2026-48558, CVSS 10. Actively exploited (CISA KEV), added 2026-06-29. Cisco Unified Communications Manager: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20230 kev-CVE-2026-20230 Thu, 25 Jun 2026 00:00:00 GMT Exploited CVE-2026-20230, CVSS 8.6. Actively exploited (CISA KEV), added 2026-06-25. PTC Windchill and FlexPLM: PTC Windchill and FlexPLM Improper Input Validation Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-12569 kev-CVE-2026-12569 Thu, 25 Jun 2026 00:00:00 GMT Exploited CVE-2026-12569, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-25. Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Input Validation Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-34910 kev-CVE-2026-34910 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34910, CVSS 10. Actively exploited (CISA KEV), added 2026-06-23. Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Access Control Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-34908 kev-CVE-2026-34908 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34908, CVSS 10. Actively exploited (CISA KEV), added 2026-06-23. Ubiquiti UniFi OS: Ubiquiti UniFi OS Path Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-34909 kev-CVE-2026-34909 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34909, CVSS 10. Actively exploited (CISA KEV), added 2026-06-23. Lantronix EDS5000: Lantronix EDS5000 Code Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-67038 kev-CVE-2025-67038 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2025-67038, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-23. Splunk Enterprise: Splunk Enterprise Missing Authentication for Critical Function Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20253 kev-CVE-2026-20253 Thu, 18 Jun 2026 00:00:00 GMT Exploited CVE-2026-20253, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-18. Widget Factory Joomla Content Editor: Widget Factory Joomla Content Editor Improper Access Control Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-48907 kev-CVE-2026-48907 Tue, 16 Jun 2026 00:00:00 GMT Exploited CVE-2026-48907, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-16. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20262 kev-CVE-2026-20262 Mon, 15 Jun 2026 00:00:00 GMT Exploited CVE-2026-20262, CVSS 6.5. Actively exploited (CISA KEV), added 2026-06-15. LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-54420 kev-CVE-2026-54420 Mon, 15 Jun 2026 00:00:00 GMT Exploited CVE-2026-54420, CVSS 8.5. Actively exploited (CISA KEV), added 2026-06-15. Oracle PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-35273 kev-CVE-2026-35273 Fri, 12 Jun 2026 00:00:00 GMT Ransomware CVE-2026-35273, CVSS 9.8, ransomware-linked. Actively exploited (CISA KEV), added 2026-06-12. Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-10520 kev-CVE-2026-10520 Thu, 11 Jun 2026 00:00:00 GMT Exploited CVE-2026-10520, CVSS 10. Actively exploited (CISA KEV), added 2026-06-11. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20245 kev-CVE-2026-20245 Tue, 09 Jun 2026 00:00:00 GMT Exploited CVE-2026-20245, CVSS 7.8. Actively exploited (CISA KEV), added 2026-06-09. Google Chromium V8: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-11645 kev-CVE-2026-11645 Tue, 09 Jun 2026 00:00:00 GMT Exploited CVE-2026-11645, CVSS 8.8. Actively exploited (CISA KEV), added 2026-06-09. Arista Extensible Operating System: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-7473 kev-CVE-2026-7473 Tue, 09 Jun 2026 00:00:00 GMT Exploited CVE-2026-7473, CVSS 5.8. Actively exploited (CISA KEV), added 2026-06-09. BerriAI LiteLLM: BerriAI LiteLLM Command Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-42271 kev-CVE-2026-42271 Mon, 08 Jun 2026 00:00:00 GMT Exploited CVE-2026-42271, CVSS 8.8. Actively exploited (CISA KEV), added 2026-06-08. Check Point Security Gateway: Check Point Security Gateway Improper Authentication Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-50751 kev-CVE-2026-50751 Mon, 08 Jun 2026 00:00:00 GMT Ransomware CVE-2026-50751, CVSS 9.3, ransomware-linked. Actively exploited (CISA KEV), added 2026-06-08. SolarWinds Serv-U: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-28318 kev-CVE-2026-28318 Fri, 05 Jun 2026 00:00:00 GMT Exploited CVE-2026-28318, CVSS 7.5. Actively exploited (CISA KEV), added 2026-06-05. Mirasvit Mirasvit Full Page Cache Warmer: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-45247 kev-CVE-2026-45247 Wed, 03 Jun 2026 00:00:00 GMT Exploited CVE-2026-45247, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-03. Linux Kernel: Linux Kernel Improper Authentication Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-0492 kev-CVE-2022-0492 Tue, 02 Jun 2026 00:00:00 GMT Exploited CVE-2022-0492, CVSS 7.8. Actively exploited (CISA KEV), added 2026-06-02. Android Framework: Android Framework Integer Overflow Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-48595 kev-CVE-2025-48595 Tue, 02 Jun 2026 00:00:00 GMT Exploited CVE-2025-48595, CVSS 8.4. Actively exploited (CISA KEV), added 2026-06-02. Oracle WebLogic Server: Oracle WebLogic Server Unspecified Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-21182 kev-CVE-2024-21182 Mon, 01 Jun 2026 00:00:00 GMT Exploited CVE-2024-21182, CVSS 7.5. Actively exploited (CISA KEV), added 2026-06-01. Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-0257 kev-CVE-2026-0257 Fri, 29 May 2026 00:00:00 GMT Exploited CVE-2026-0257, CVSS 9.1. Actively exploited (CISA KEV), added 2026-05-29. TanStack TanStack: TanStack Unspecified Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-45321 kev-CVE-2026-45321 Wed, 27 May 2026 00:00:00 GMT Ransomware CVE-2026-45321, CVSS 9.6, ransomware-linked. Actively exploited (CISA KEV), added 2026-05-27. Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-48027 kev-CVE-2026-48027 Wed, 27 May 2026 00:00:00 GMT Ransomware CVE-2026-48027, CVSS 9.8, ransomware-linked. Actively exploited (CISA KEV), added 2026-05-27. Daemon Daemon Tools Lite: Daemon Tools Lite Embedded Malicious Code Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-8398 kev-CVE-2026-8398 Wed, 27 May 2026 00:00:00 GMT Exploited CVE-2026-8398, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-27. LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-48172 kev-CVE-2026-48172 Tue, 26 May 2026 00:00:00 GMT Exploited CVE-2026-48172, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-26. Drupal Core: Drupal Core SQL Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-9082 kev-CVE-2026-9082 Fri, 22 May 2026 00:00:00 GMT Exploited CVE-2026-9082, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-22. Langflow Langflow: Langflow Origin Validation Error Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-34291 kev-CVE-2025-34291 Thu, 21 May 2026 00:00:00 GMT Exploited CVE-2025-34291, CVSS 8.8. Actively exploited (CISA KEV), added 2026-05-21. Trend Micro Apex One: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-34926 kev-CVE-2026-34926 Thu, 21 May 2026 00:00:00 GMT Exploited CVE-2026-34926, CVSS 6.7. Actively exploited (CISA KEV), added 2026-05-21. Adobe Acrobat and Reader: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2009-3459 kev-CVE-2009-3459 Wed, 20 May 2026 00:00:00 GMT Exploited CVE-2009-3459, CVSS 8.8. Actively exploited (CISA KEV), added 2026-05-20. Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20182 kev-CVE-2026-20182 Thu, 14 May 2026 00:00:00 GMT Exploited CVE-2026-20182, CVSS 10. Actively exploited (CISA KEV), added 2026-05-14. BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-42208 kev-CVE-2026-42208 Fri, 08 May 2026 00:00:00 GMT Exploited CVE-2026-42208, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-08. Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-6973 kev-CVE-2026-6973 Thu, 07 May 2026 00:00:00 GMT Exploited CVE-2026-6973, CVSS 7.2. Actively exploited (CISA KEV), added 2026-05-07. Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-0300 kev-CVE-2026-0300 Wed, 06 May 2026 00:00:00 GMT Exploited CVE-2026-0300, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-06. Linux Kernel: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-31431 kev-CVE-2026-31431 Fri, 01 May 2026 00:00:00 GMT Exploited CVE-2026-31431, CVSS 7.8. Actively exploited (CISA KEV), added 2026-05-01. WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-41940 kev-CVE-2026-41940 Thu, 30 Apr 2026 00:00:00 GMT Ransomware CVE-2026-41940, CVSS 9.8, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-30. ConnectWise ScreenConnect: ConnectWise ScreenConnect Path Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-1708 kev-CVE-2024-1708 Tue, 28 Apr 2026 00:00:00 GMT Ransomware CVE-2024-1708, CVSS 8.4, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-28. Samsung MagicINFO 9 Server: Samsung MagicINFO 9 Server Path Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-7399 kev-CVE-2024-7399 Fri, 24 Apr 2026 00:00:00 GMT Exploited CVE-2024-7399, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-24. D-Link DIR-823X: D-Link DIR-823X Command Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-29635 kev-CVE-2025-29635 Fri, 24 Apr 2026 00:00:00 GMT Exploited CVE-2025-29635, CVSS 7.2. Actively exploited (CISA KEV), added 2026-04-24. SimpleHelp SimpleHelp: SimpleHelp Missing Authorization Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-57726 kev-CVE-2024-57726 Fri, 24 Apr 2026 00:00:00 GMT Ransomware CVE-2024-57726, CVSS 9.9, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-24. SimpleHelp SimpleHelp: SimpleHelp Path Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-57728 kev-CVE-2024-57728 Fri, 24 Apr 2026 00:00:00 GMT Ransomware CVE-2024-57728, CVSS 7.2, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-24. Marimo Marimo: Marimo Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-39987 kev-CVE-2026-39987 Thu, 23 Apr 2026 00:00:00 GMT Exploited CVE-2026-39987, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-23. JetBrains TeamCity: JetBrains TeamCity Relative Path Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-27199 kev-CVE-2024-27199 Mon, 20 Apr 2026 00:00:00 GMT Ransomware CVE-2024-27199, CVSS 7.3, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-20. PaperCut NG/MF: PaperCut NG/MF Improper Authentication Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-27351 kev-CVE-2023-27351 Mon, 20 Apr 2026 00:00:00 GMT Ransomware CVE-2023-27351, CVSS 7.5, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-20. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20133 kev-CVE-2026-20133 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2026-20133, CVSS 7.5. Actively exploited (CISA KEV), added 2026-04-20. Cisco Catalyst SD-WAN Manger: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20122 kev-CVE-2026-20122 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2026-20122, CVSS 5.4. Actively exploited (CISA KEV), added 2026-04-20. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-20128 kev-CVE-2026-20128 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2026-20128, CVSS 7.5. Actively exploited (CISA KEV), added 2026-04-20. Kentico Kentico Xperience: Kentico Xperience Path Traversal Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-2749 kev-CVE-2025-2749 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2025-2749, CVSS 7.2. Actively exploited (CISA KEV), added 2026-04-20. Quest KACE Systems Management Appliance (SMA): Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-32975 kev-CVE-2025-32975 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2025-32975, CVSS 10. Actively exploited (CISA KEV), added 2026-04-20. Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-48700 kev-CVE-2025-48700 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2025-48700, CVSS 6.1. Actively exploited (CISA KEV), added 2026-04-20. Apache ActiveMQ: Apache ActiveMQ Improper Input Validation Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-34197 kev-CVE-2026-34197 Thu, 16 Apr 2026 00:00:00 GMT Exploited CVE-2026-34197, CVSS 8.8. Actively exploited (CISA KEV), added 2026-04-16. Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-21643 kev-CVE-2026-21643 Mon, 13 Apr 2026 00:00:00 GMT Exploited CVE-2026-21643, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-13. Adobe Acrobat: Adobe Acrobat Use-After-Free Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-9715 kev-CVE-2020-9715 Mon, 13 Apr 2026 00:00:00 GMT Exploited CVE-2020-9715, CVSS 7.8. Actively exploited (CISA KEV), added 2026-04-13. Adobe Acrobat and Reader: Adobe Acrobat and Reader Prototype Pollution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-34621 kev-CVE-2026-34621 Mon, 13 Apr 2026 00:00:00 GMT Exploited CVE-2026-34621, CVSS 8.6. Actively exploited (CISA KEV), added 2026-04-13. Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-1340 kev-CVE-2026-1340 Wed, 08 Apr 2026 00:00:00 GMT Exploited CVE-2026-1340, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-08. Fortinet FortiClient EMS: Fortinet FortiClient EMS Improper Access Control Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-35616 kev-CVE-2026-35616 Mon, 06 Apr 2026 00:00:00 GMT Exploited CVE-2026-35616, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-06. TrueConf Client: TrueConf Client Download of Code Without Integrity Check Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-3502 kev-CVE-2026-3502 Thu, 02 Apr 2026 00:00:00 GMT Exploited CVE-2026-3502, CVSS 7.8. Actively exploited (CISA KEV), added 2026-04-02. Google Dawn: Google Dawn Use-After-Free Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-5281 kev-CVE-2026-5281 Wed, 01 Apr 2026 00:00:00 GMT Exploited CVE-2026-5281, CVSS 8.8. Actively exploited (CISA KEV), added 2026-04-01.