Senserva: actively-exploited non-Microsoft vulnerabilities (CISA KEV) https://senserva.com/non-microsoft-cve-tracker.html The newest non-Microsoft CVEs in the CISA Known Exploited Vulnerabilities catalog, with vendor, CVSS, and ransomware flags. From Senserva. CVSS data from NIST NVD and CIRCL. Use is subject to the Senserva EULA: https://senserva.com/eula.html; rules at https://senserva.com/feeds.html. en-us Provided by Senserva.com Provided by Senserva.com. Free to use; please credit Senserva.com and link back to https://senserva.com/. hello@senserva.com (Senserva) Sun, 12 Jul 2026 00:00:00 GMT 720 iCagenda iCagenda: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability https://senserva.com/cve/CVE-2026-48939.html kev-CVE-2026-48939 Fri, 10 Jul 2026 00:00:00 GMT Exploited CVE-2026-48939, CVSS 9.8. Actively exploited (CISA KEV), added 2026-07-10. Balbooa Forms: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability https://senserva.com/cve/CVE-2026-56291.html kev-CVE-2026-56291 Fri, 10 Jul 2026 00:00:00 GMT Exploited CVE-2026-56291, CVSS 9.8. Actively exploited (CISA KEV), added 2026-07-10. Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability https://senserva.com/cve/CVE-2026-48282.html kev-CVE-2026-48282 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-48282, CVSS 10. Actively exploited (CISA KEV), added 2026-07-07. Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability https://senserva.com/cve/CVE-2026-56290.html kev-CVE-2026-56290 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-56290, CVSS 9.8. Actively exploited (CISA KEV), added 2026-07-07. JoomShaper SP Page Builder: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability https://senserva.com/cve/CVE-2026-48908.html kev-CVE-2026-48908 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-48908, CVSS 9.8. Actively exploited (CISA KEV), added 2026-07-07. Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability https://senserva.com/cve/CVE-2026-55255.html kev-CVE-2026-55255 Tue, 07 Jul 2026 00:00:00 GMT Exploited CVE-2026-55255, CVSS 9.9. Actively exploited (CISA KEV), added 2026-07-07. SimpleHelp SimpleHelp: SimpleHelp Authentication Bypass Vulnerability https://senserva.com/cve/CVE-2026-48558.html kev-CVE-2026-48558 Mon, 29 Jun 2026 00:00:00 GMT Exploited CVE-2026-48558, CVSS 10. Actively exploited (CISA KEV), added 2026-06-29. Cisco Unified Communications Manager: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability https://senserva.com/cve/CVE-2026-20230.html kev-CVE-2026-20230 Thu, 25 Jun 2026 00:00:00 GMT Exploited CVE-2026-20230, CVSS 8.6. Actively exploited (CISA KEV), added 2026-06-25. PTC Windchill and FlexPLM: PTC Windchill and FlexPLM Improper Input Validation Vulnerability https://senserva.com/cve/CVE-2026-12569.html kev-CVE-2026-12569 Thu, 25 Jun 2026 00:00:00 GMT Exploited CVE-2026-12569, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-25. Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Input Validation Vulnerability https://senserva.com/cve/CVE-2026-34910.html kev-CVE-2026-34910 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34910, CVSS 10. Actively exploited (CISA KEV), added 2026-06-23. Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Access Control Vulnerability https://senserva.com/cve/CVE-2026-34908.html kev-CVE-2026-34908 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34908, CVSS 10. Actively exploited (CISA KEV), added 2026-06-23. Ubiquiti UniFi OS: Ubiquiti UniFi OS Path Traversal Vulnerability https://senserva.com/cve/CVE-2026-34909.html kev-CVE-2026-34909 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2026-34909, CVSS 10. Actively exploited (CISA KEV), added 2026-06-23. Lantronix EDS5000: Lantronix EDS5000 Code Injection Vulnerability https://senserva.com/cve/CVE-2025-67038.html kev-CVE-2025-67038 Tue, 23 Jun 2026 00:00:00 GMT Exploited CVE-2025-67038, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-23. Splunk Enterprise: Splunk Enterprise Missing Authentication for Critical Function Vulnerability https://senserva.com/cve/CVE-2026-20253.html kev-CVE-2026-20253 Thu, 18 Jun 2026 00:00:00 GMT Exploited CVE-2026-20253, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-18. Widget Factory Joomla Content Editor: Widget Factory Joomla Content Editor Improper Access Control Vulnerability https://senserva.com/cve/CVE-2026-48907.html kev-CVE-2026-48907 Tue, 16 Jun 2026 00:00:00 GMT Exploited CVE-2026-48907, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-16. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability https://senserva.com/cve/CVE-2026-20262.html kev-CVE-2026-20262 Mon, 15 Jun 2026 00:00:00 GMT Exploited CVE-2026-20262, CVSS 6.5. Actively exploited (CISA KEV), added 2026-06-15. LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability https://senserva.com/cve/CVE-2026-54420.html kev-CVE-2026-54420 Mon, 15 Jun 2026 00:00:00 GMT Exploited CVE-2026-54420, CVSS 8.5. Actively exploited (CISA KEV), added 2026-06-15. Oracle PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability https://senserva.com/cve/CVE-2026-35273.html kev-CVE-2026-35273 Fri, 12 Jun 2026 00:00:00 GMT Ransomware CVE-2026-35273, CVSS 9.8, ransomware-linked. Actively exploited (CISA KEV), added 2026-06-12. Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability https://senserva.com/cve/CVE-2026-10520.html kev-CVE-2026-10520 Thu, 11 Jun 2026 00:00:00 GMT Exploited CVE-2026-10520, CVSS 10. Actively exploited (CISA KEV), added 2026-06-11. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability https://senserva.com/cve/CVE-2026-20245.html kev-CVE-2026-20245 Tue, 09 Jun 2026 00:00:00 GMT Exploited CVE-2026-20245, CVSS 7.8. Actively exploited (CISA KEV), added 2026-06-09. Google Chromium V8: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability https://senserva.com/cve/CVE-2026-11645.html kev-CVE-2026-11645 Tue, 09 Jun 2026 00:00:00 GMT Exploited CVE-2026-11645, CVSS 8.8. Actively exploited (CISA KEV), added 2026-06-09. Arista Extensible Operating System: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability https://senserva.com/cve/CVE-2026-7473.html kev-CVE-2026-7473 Tue, 09 Jun 2026 00:00:00 GMT Exploited CVE-2026-7473, CVSS 5.8. Actively exploited (CISA KEV), added 2026-06-09. BerriAI LiteLLM: BerriAI LiteLLM Command Injection Vulnerability https://senserva.com/cve/CVE-2026-42271.html kev-CVE-2026-42271 Mon, 08 Jun 2026 00:00:00 GMT Exploited CVE-2026-42271, CVSS 8.8. Actively exploited (CISA KEV), added 2026-06-08. Check Point Security Gateway: Check Point Security Gateway Improper Authentication Vulnerability https://senserva.com/cve/CVE-2026-50751.html kev-CVE-2026-50751 Mon, 08 Jun 2026 00:00:00 GMT Ransomware CVE-2026-50751, CVSS 9.3, ransomware-linked. Actively exploited (CISA KEV), added 2026-06-08. SolarWinds Serv-U: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability https://senserva.com/cve/CVE-2026-28318.html kev-CVE-2026-28318 Fri, 05 Jun 2026 00:00:00 GMT Exploited CVE-2026-28318, CVSS 7.5. Actively exploited (CISA KEV), added 2026-06-05. Mirasvit Mirasvit Full Page Cache Warmer: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability https://senserva.com/cve/CVE-2026-45247.html kev-CVE-2026-45247 Wed, 03 Jun 2026 00:00:00 GMT Exploited CVE-2026-45247, CVSS 9.8. Actively exploited (CISA KEV), added 2026-06-03. Linux Kernel: Linux Kernel Improper Authentication Vulnerability https://senserva.com/cve/CVE-2022-0492.html kev-CVE-2022-0492 Tue, 02 Jun 2026 00:00:00 GMT Exploited CVE-2022-0492, CVSS 7.8. Actively exploited (CISA KEV), added 2026-06-02. Android Framework: Android Framework Integer Overflow Vulnerability https://senserva.com/cve/CVE-2025-48595.html kev-CVE-2025-48595 Tue, 02 Jun 2026 00:00:00 GMT Exploited CVE-2025-48595, CVSS 8.4. Actively exploited (CISA KEV), added 2026-06-02. Oracle WebLogic Server: Oracle WebLogic Server Unspecified Vulnerability https://senserva.com/cve/CVE-2024-21182.html kev-CVE-2024-21182 Mon, 01 Jun 2026 00:00:00 GMT Exploited CVE-2024-21182, CVSS 7.5. Actively exploited (CISA KEV), added 2026-06-01. Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability https://senserva.com/cve/CVE-2026-0257.html kev-CVE-2026-0257 Fri, 29 May 2026 00:00:00 GMT Exploited CVE-2026-0257, CVSS 9.1. Actively exploited (CISA KEV), added 2026-05-29. TanStack TanStack: TanStack Unspecified Vulnerability https://senserva.com/cve/CVE-2026-45321.html kev-CVE-2026-45321 Wed, 27 May 2026 00:00:00 GMT Ransomware CVE-2026-45321, CVSS 9.6, ransomware-linked. Actively exploited (CISA KEV), added 2026-05-27. Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability https://senserva.com/cve/CVE-2026-48027.html kev-CVE-2026-48027 Wed, 27 May 2026 00:00:00 GMT Ransomware CVE-2026-48027, CVSS 9.8, ransomware-linked. Actively exploited (CISA KEV), added 2026-05-27. Daemon Daemon Tools Lite: Daemon Tools Lite Embedded Malicious Code Vulnerability https://senserva.com/cve/CVE-2026-8398.html kev-CVE-2026-8398 Wed, 27 May 2026 00:00:00 GMT Exploited CVE-2026-8398, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-27. LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability https://senserva.com/cve/CVE-2026-48172.html kev-CVE-2026-48172 Tue, 26 May 2026 00:00:00 GMT Exploited CVE-2026-48172, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-26. Drupal Core: Drupal Core SQL Injection Vulnerability https://senserva.com/cve/CVE-2026-9082.html kev-CVE-2026-9082 Fri, 22 May 2026 00:00:00 GMT Exploited CVE-2026-9082, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-22. Langflow Langflow: Langflow Origin Validation Error Vulnerability https://senserva.com/cve/CVE-2025-34291.html kev-CVE-2025-34291 Thu, 21 May 2026 00:00:00 GMT Exploited CVE-2025-34291, CVSS 8.8. Actively exploited (CISA KEV), added 2026-05-21. Trend Micro Apex One: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability https://senserva.com/cve/CVE-2026-34926.html kev-CVE-2026-34926 Thu, 21 May 2026 00:00:00 GMT Exploited CVE-2026-34926, CVSS 6.7. Actively exploited (CISA KEV), added 2026-05-21. Adobe Acrobat and Reader: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability https://senserva.com/cve/CVE-2009-3459.html kev-CVE-2009-3459 Wed, 20 May 2026 00:00:00 GMT Exploited CVE-2009-3459, CVSS 8.8. Actively exploited (CISA KEV), added 2026-05-20. Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://senserva.com/cve/CVE-2026-20182.html kev-CVE-2026-20182 Thu, 14 May 2026 00:00:00 GMT Exploited CVE-2026-20182, CVSS 10. Actively exploited (CISA KEV), added 2026-05-14. BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability https://senserva.com/cve/CVE-2026-42208.html kev-CVE-2026-42208 Fri, 08 May 2026 00:00:00 GMT Exploited CVE-2026-42208, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-08. Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability https://senserva.com/cve/CVE-2026-6973.html kev-CVE-2026-6973 Thu, 07 May 2026 00:00:00 GMT Exploited CVE-2026-6973, CVSS 7.2. Actively exploited (CISA KEV), added 2026-05-07. Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability https://senserva.com/cve/CVE-2026-0300.html kev-CVE-2026-0300 Wed, 06 May 2026 00:00:00 GMT Exploited CVE-2026-0300, CVSS 9.8. Actively exploited (CISA KEV), added 2026-05-06. Linux Kernel: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability https://senserva.com/cve/CVE-2026-31431.html kev-CVE-2026-31431 Fri, 01 May 2026 00:00:00 GMT Exploited CVE-2026-31431, CVSS 7.8. Actively exploited (CISA KEV), added 2026-05-01. WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability https://senserva.com/cve/CVE-2026-41940.html kev-CVE-2026-41940 Thu, 30 Apr 2026 00:00:00 GMT Ransomware CVE-2026-41940, CVSS 9.8, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-30. ConnectWise ScreenConnect: ConnectWise ScreenConnect Path Traversal Vulnerability https://senserva.com/cve/CVE-2024-1708.html kev-CVE-2024-1708 Tue, 28 Apr 2026 00:00:00 GMT Ransomware CVE-2024-1708, CVSS 8.4, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-28. Samsung MagicINFO 9 Server: Samsung MagicINFO 9 Server Path Traversal Vulnerability https://senserva.com/cve/CVE-2024-7399.html kev-CVE-2024-7399 Fri, 24 Apr 2026 00:00:00 GMT Exploited CVE-2024-7399, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-24. D-Link DIR-823X: D-Link DIR-823X Command Injection Vulnerability https://senserva.com/cve/CVE-2025-29635.html kev-CVE-2025-29635 Fri, 24 Apr 2026 00:00:00 GMT Exploited CVE-2025-29635, CVSS 7.2. Actively exploited (CISA KEV), added 2026-04-24. SimpleHelp SimpleHelp: SimpleHelp Missing Authorization Vulnerability https://senserva.com/cve/CVE-2024-57726.html kev-CVE-2024-57726 Fri, 24 Apr 2026 00:00:00 GMT Ransomware CVE-2024-57726, CVSS 9.9, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-24. SimpleHelp SimpleHelp: SimpleHelp Path Traversal Vulnerability https://senserva.com/cve/CVE-2024-57728.html kev-CVE-2024-57728 Fri, 24 Apr 2026 00:00:00 GMT Ransomware CVE-2024-57728, CVSS 7.2, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-24. Marimo Marimo: Marimo Remote Code Execution Vulnerability https://senserva.com/cve/CVE-2026-39987.html kev-CVE-2026-39987 Thu, 23 Apr 2026 00:00:00 GMT Exploited CVE-2026-39987, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-23. JetBrains TeamCity: JetBrains TeamCity Relative Path Traversal Vulnerability https://senserva.com/cve/CVE-2024-27199.html kev-CVE-2024-27199 Mon, 20 Apr 2026 00:00:00 GMT Ransomware CVE-2024-27199, CVSS 7.3, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-20. PaperCut NG/MF: PaperCut NG/MF Improper Authentication Vulnerability https://senserva.com/cve/CVE-2023-27351.html kev-CVE-2023-27351 Mon, 20 Apr 2026 00:00:00 GMT Ransomware CVE-2023-27351, CVSS 7.5, ransomware-linked. Actively exploited (CISA KEV), added 2026-04-20. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability https://senserva.com/cve/CVE-2026-20133.html kev-CVE-2026-20133 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2026-20133, CVSS 7.5. Actively exploited (CISA KEV), added 2026-04-20. Cisco Catalyst SD-WAN Manger: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability https://senserva.com/cve/CVE-2026-20122.html kev-CVE-2026-20122 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2026-20122, CVSS 5.4. Actively exploited (CISA KEV), added 2026-04-20. Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability https://senserva.com/cve/CVE-2026-20128.html kev-CVE-2026-20128 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2026-20128, CVSS 7.5. Actively exploited (CISA KEV), added 2026-04-20. Kentico Kentico Xperience: Kentico Xperience Path Traversal Vulnerability https://senserva.com/cve/CVE-2025-2749.html kev-CVE-2025-2749 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2025-2749, CVSS 7.2. Actively exploited (CISA KEV), added 2026-04-20. Quest KACE Systems Management Appliance (SMA): Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability https://senserva.com/cve/CVE-2025-32975.html kev-CVE-2025-32975 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2025-32975, CVSS 10. Actively exploited (CISA KEV), added 2026-04-20. Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability https://senserva.com/cve/CVE-2025-48700.html kev-CVE-2025-48700 Mon, 20 Apr 2026 00:00:00 GMT Exploited CVE-2025-48700, CVSS 6.1. Actively exploited (CISA KEV), added 2026-04-20. Apache ActiveMQ: Apache ActiveMQ Improper Input Validation Vulnerability https://senserva.com/cve/CVE-2026-34197.html kev-CVE-2026-34197 Thu, 16 Apr 2026 00:00:00 GMT Exploited CVE-2026-34197, CVSS 8.8. Actively exploited (CISA KEV), added 2026-04-16. Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability https://senserva.com/cve/CVE-2026-21643.html kev-CVE-2026-21643 Mon, 13 Apr 2026 00:00:00 GMT Exploited CVE-2026-21643, CVSS 9.8. Actively exploited (CISA KEV), added 2026-04-13.