Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Published in the last 14 days and scored 7.0 or higher. Nothing here is confirmed exploited yet: it is the queue the known-exploited list draws from, and the window in which patching is still cheap.

Quick filters

has:exploit exploit code published epss>90 likely to be attacked is:ransomware used by ransomware groups is:overdue past the CISA deadline cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors
CVEs in the Emerging threats view, sorted by Published
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2026-84272 CVE-2026-84272 IBM not listed 0.4% 9.8, critical reference 1
CVE-2026-84271 CVE-2026-84271 IBM not listed <0.1% 7.8, high reference 1
CVE-2026-84250 CVE-2026-84250 IBM not listed <0.1% 7.8, high advisory 1
CVE-2026-84249 CVE-2026-84249 IBM not listed 0.4% 9.8, critical reference 1
CVE-2026-84247 CVE-2026-84247 IBM not listed 0.4% 8.1, high reference 1
CVE-2026-84246 CVE-2026-84246 IBM not listed 0.4% 9.8, critical patch 1
CVE-2026-84245 CVE-2026-84245 IBM not listed <0.1% 7.8, high reference 1
CVE-2026-84244 CVE-2026-84244 IBM not listed 0.2% 9.3, critical reference 1
CVE-2026-84230 CVE-2026-84230 IBM not listed 0.3% 7.5, high reference 1
CVE-2026-84209 CVE-2026-84209 IBM not listed 0.3% 9.8, critical advisory 1
CVE-2026-84198 CVE-2026-84198 IBM not listed 0.4% 9.8, critical patch 1
CVE-2026-84058 CVE-2026-84058 IBM not listed 0.4% 9.8, critical patch 1
CVE-2026-84057 CVE-2026-84057 IBM not listed 0.4% 9.8, critical advisory 1
CVE-2026-84035 CVE-2026-84035 IBM not listed 0.4% 9.8, critical patch 1
CVE-2026-84032 CVE-2026-84032 IBM not listed 0.2% 8.1, high patch 1
CVE-2026-83947 CVE-2026-83947 Microsoft not listed 0.4% 7.7, high advisory 1
CVE-2026-83943 CVE-2026-83943 Microsoft not listed 0.4% 8.7, high advisory 1
CVE-2026-82900 CVE-2026-82900 IBM not listed 0.4% 9.1, critical advisory 1
CVE-2026-82895 CVE-2026-82895 IBM not listed 0.4% 9.8, critical patch 1
CVE-2026-82344 CVE-2026-82344 IBM not listed 0.4% 9.8, critical advisory 1
CVE-2026-82335 CVE-2026-82335 IBM not listed 0.4% 9.8, critical advisory 1
CVE-2026-82334 CVE-2026-82334 IBM not listed 0.3% 9.1, critical advisory 1
CVE-2026-81932 CVE-2026-81932 IBM not listed 0.3% 9.8, critical patch 1
CVE-2026-80381 CVE-2026-80381 IBM not listed 0.3% 9.8, critical reference 1
CVE-2026-78401 CVE-2026-78401 IBM not listed 0.6% 9.8, critical advisory 1
CVE-2026-78388 CVE-2026-78388 IBM not listed 0.1% 8.8, high advisory 1
CVE-2026-77900 CVE-2026-77900 Microsoft not listed 0.5% 9.8, critical advisory 1
CVE-2026-75875 CVE-2026-75875 IBM not listed 0.6% 9.8, critical reference 1
CVE-2026-69435 CVE-2026-69435 Microsoft not listed 0.4% 8.1, high advisory 1
CVE-2026-5048 CVE-2026-5048 Brocade not listed 0.2% 8, high advisory 1
CVE-2026-19498 CVE-2026-19498 IBM not listed 0.3% 7.5, high advisory 1
CVE-2026-19493 CVE-2026-19493 IBM not listed 0.4% 7.5, high advisory 1
CVE-2026-19491 CVE-2026-19491 IBM not listed 0.3% 7.5, high advisory 1
CVE-2026-19482 CVE-2026-19482 IBM not listed 0.4% 8.8, high advisory 1
CVE-2026-17609 CVE-2026-17609 WebRehab not listed 0.3% 9.1, critical patch 1
CVE-2026-16916 CVE-2026-16916 IBM not listed 0.4% 8.8, high advisory 1
CVE-2026-16823 CVE-2026-16823 IBM not listed 0.3% 7.5, high advisory 1
CVE-2026-16165 CVE-2026-16165 IBM not listed 0.3% 7.5, high reference 1
CVE-2026-14999 CVE-2026-14999 IBM not listed 0.2% 7.5, high advisory 1
CVE-2026-14988 CVE-2026-14988 IBM not listed 0.3% 9.8, critical advisory 1
CVE-2026-14905 CVE-2026-14905 IBM not listed 0.3% 8.2, high reference 1
CVE-2026-14888 CVE-2026-14888 IBM not listed 0.4% 9.8, critical advisory 1
CVE-2026-14508 CVE-2026-14508 IBM not listed 0.3% 9.1, critical advisory 1
CVE-2026-12109 CVE-2026-12109 IBM not listed 0.2% 7.2, high advisory 1
CVE-2026-11930 CVE-2026-11930 IBM not listed 0.2% 7.5, high advisory 1
CVE-2026-11888 CVE-2026-11888 IBM not listed 0.2% 7.5, high advisory 1
CVE-2026-107782 CVE-2026-107782 Winsiderss not listed 0.1% 7.8, high patch 1
CVE-2026-107781 CVE-2026-107781 Dromara not listed 0.3% 7.4, high reference 4
CVE-2026-107780 CVE-2026-107780 Dromara not listed 2% 9.8, critical reference 4
CVE-2026-107779 CVE-2026-107779 Dromara not listed 0.5% 9.8, critical reference 4
CVE-2026-107707 CVE-2026-107707 Intego not listed 0.1% 7.8, high reference 3
CVE-2026-107704 CVE-2026-107704 Jtescher not listed 2% 9.8, critical reference 5
CVE-2026-107701 CVE-2026-107701 Ntharim not listed 0.3% 8.2, high reference 5
CVE-2026-107699 CVE-2026-107699 Tzwm not listed 1% 9.8, critical reference 4
CVE-2026-107639 CVE-2026-107639 ILIAS-eLearning e.V. not listed 0.7% 8.8, high patch 1
CVE-2026-107392 CVE-2026-107392 Borewit not listed 0.4% 7.5, high exploit 1 patch 3
CVE-2026-107391 CVE-2026-107391 Borewit not listed 0.3% 7.5, high exploit 3 patch 1
CVE-2026-107390 CVE-2026-107390 Borewit not listed 0.3% 7.5, high exploit 1 patch 3
CVE-2026-106432 CVE-2026-106432 MongoDB not listed 0.2% 8.2, high advisory 1
CVE-2026-104075 CVE-2026-104075 TVU Networks not listed 0.6% 9.8, critical reference 2
CVE-2026-93675 CVE-2026-93675 IBM not listed 0.8% 9.8, critical advisory 1
CVE-2026-93449 CVE-2026-93449 IBM not listed 0.7% 8.8, high advisory 1
CVE-2026-93445 CVE-2026-93445 IBM not listed 0.7% 8.8, high advisory 1
CVE-2026-93443 CVE-2026-93443 IBM not listed 0.7% 8.8, high advisory 1
CVE-2026-92414 CVE-2026-92414 Apache Software Foundation not listed 0.7% 9.1, critical advisory 2
CVE-2026-83742 CVE-2026-83742 wolfSSL Inc. not listed 0.4% 8.8, high patch 4
CVE-2026-83540 CVE-2026-83540 wolfSSL not listed 0.4% 8.8, high patch 2 advisory 1
CVE-2026-81535 CVE-2026-81535 wolfSSL Inc. not listed 0.3% 9.1, critical patch 3
CVE-2026-77214 CVE-2026-77214 Libexpat not listed 0.5% 8.2, high patch 2
CVE-2026-76468 CVE-2026-76468 Cisco not listed 0.2% 8.2, high advisory 1
CVE-2026-76459 CVE-2026-76459 Cisco not listed 0.3% 9.8, critical advisory 1
CVE-2026-76454 CVE-2026-76454 Cisco not listed 0.6% 9.1, critical advisory 1
CVE-2026-76285 CVE-2026-76285 Splunk not listed 0.3% 9.8, critical advisory 1
CVE-2026-46569 CVE-2026-46569 Tuxera not listed 0.2% 7.7, high patch 1
CVE-2026-42616 CVE-2026-42616 Tuxera not listed 0.2% 7.8, high patch 1
CVE-2026-16516 CVE-2026-16516 wolfSSL Inc. not listed 0.1% 7.4, high patch 1 advisory 1
CVE-2026-107223 CVE-2026-107223 Qax-os not listed 0.3% 7.5, high exploit 1 patch 2
CVE-2026-106583 CVE-2026-106583 OpenBSD not listed 0.2% 7.8, high reference 1
CVE-2026-106059 CVE-2026-106059 Gitahead not listed 1% 8.8, high reference 4
CVE-2026-96890 CVE-2026-96890 GitHub not listed 0.5% 8.8, high advisory 3
CVE-2026-82531 CVE-2026-82531 Smarty-php not listed 0.8% 8.1, high patch 2 advisory 1
CVE-2026-82162 CVE-2026-82162 Dell not listed 0.3% 9.8, critical patch 1
CVE-2026-71168 CVE-2026-71168 Dell not listed 0.2% 7.8, high patch 1
CVE-2026-63697 CVE-2026-63697 Dell not listed 0.3% 7.2, high patch 1
CVE-2026-54472 CVE-2026-54472 Dell not listed 0.5% 7.5, high advisory 1
CVE-2026-106555 CVE-2026-106555 OpenBSD not listed 0.1% 7.5, high reference 1
CVE-2026-106553 CVE-2026-106553 OpenBSD not listed 0.1% 7.5, high reference 1
CVE-2026-106509 CVE-2026-106509 Backstage and 1 more vendor not listed 0.4% 8.8, high exploit 2 advisory 1
CVE-2026-106505 CVE-2026-106505 Backstage and 1 more vendor not listed 0.3% 8.5, high patch 4 advisory 1
CVE-2026-106237 CVE-2026-106237 Google not listed 0.2% 9.6, critical advisory 1
CVE-2026-106221 CVE-2026-106221 Google not listed 0.3% 8.3, high advisory 1
CVE-2026-106219 CVE-2026-106219 JetBrains not listed 0.6% 7.5, high advisory 1
CVE-2026-106218 CVE-2026-106218 JetBrains not listed 0.3% 10, critical advisory 1
CVE-2026-106199 CVE-2026-106199 Google not listed 0.2% 8.2, high advisory 1
CVE-2026-106198 CVE-2026-106198 Google not listed 0.3% 8.2, high advisory 1
CVE-2026-106196 CVE-2026-106196 Google not listed 0.3% 7.6, high advisory 1
CVE-2026-106195 CVE-2026-106195 Google not listed 0.3% 9.1, critical advisory 1
CVE-2026-106188 CVE-2026-106188 Google not listed 0.2% 7.1, high advisory 1
CVE-2026-106122 CVE-2026-106122 Rabbitmq and 1 more vendor not listed 0.5% 7.5, high exploit 1 patch 2
CVE-2026-106121 CVE-2026-106121 Rabbitmq and 1 more vendor not listed 0.5% 7.5, high exploit 1 patch 2

Showing 701–800 of 829 records in this view. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.