AegiFlow Advisory Database
15,905 normalized security advisories from public sources (CISA KEV, NVD, GitHub Advisory Database, OSV, ENISA EUVD), scored with EPSS and matched by AegiFlow against exact software inventories. 3,000 entries are published here; the set grows automatically every day.
Known exploited — latest
- CVE-2026-20316mediumCVE-2026-20316 updated by NVD
- CVE-2026-16812criticalCVE-2026-16812 updated by NVD
- CVE-2025-68686mediumCVE-2025-68686 updated by NVD
- CVE-2026-16232criticalCVE-2026-16232 updated by NVD
- CVE-2026-50522criticalCVE-2026-50522 updated by NVD
- CVE-2026-60137mediumCVE-2026-60137 updated by NVD
- CVE-2021-27137highCVE-2021-27137 updated by NVD
- CVE-2026-0770criticalCVE-2026-0770 updated by NVD
- CVE-2026-63030criticalCVE-2026-63030 updated by NVD
- CVE-2026-58644unknownMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2026-25089criticalCVE-2026-25089 updated by NVD
- CVE-2026-39808unknownFortinet FortiSandbox OS Command Injection Vulnerability
- CVE-2023-4346unknownKNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vu
- CVE-2026-46817criticalCVE-2026-46817 updated by NVD
- CVE-2026-56164unknownMicrosoft SharePoint Server Missing Authentication for Critical Function Vulnerability
- CVE-2026-56155unknownMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- CVE-2026-15410unknownSonicWall SMA1000 Appliances Code Injection Vulnerability
- CVE-2026-15409unknownSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- CVE-2008-4128unknownCisco IOS Cross-Site Request Forgery Vulnerability
- CVE-2026-56291criticalCVE-2026-56291 updated by NVD
- CVE-2026-48939unknowniCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
- CVE-2026-48908unknownJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
- CVE-2026-48282unknownAdobe ColdFusion Path Traversal Vulnerability
- CVE-2026-55255unknownLangflow Authorization Bypass Through User-Controlled Key Vulnerability
- CVE-2026-56290criticalCVE-2026-56290 updated by NVD
- CVE-2026-45659highCVE-2026-45659 updated by NVD
- CVE-2026-48558unknownSimpleHelp Authentication Bypass Vulnerability
- CVE-2026-12569unknownPTC Windchill and FlexPLM Improper Input Validation Vulnerability
- CVE-2026-20230highCVE-2026-20230 updated by NVD
- CVE-2026-34908criticalCVE-2026-34908 updated by NVD
- CVE-2026-34910criticalCVE-2026-34910 updated by NVD
- CVE-2026-34909criticalCVE-2026-34909 updated by NVD
- CVE-2025-67038unknownLantronix EDS5000 Code Injection Vulnerability
- CVE-2026-20253criticalCVE-2026-20253 updated by NVD
- CVE-2026-48907criticalCVE-2026-48907 updated by NVD
- CVE-2026-54420highCVE-2026-54420 updated by NVD
- CVE-2026-20262mediumCVE-2026-20262 updated by NVD
- CVE-2026-35273criticalCVE-2026-35273 updated by NVD
- CVE-2026-10520criticalCVE-2026-10520 updated by NVD
- CVE-2026-20245highCVE-2026-20245 updated by NVD
Recently published
- CVE-2026-20316mediumCVE-2026-20316 updated by NVD
- CVE-2026-16812criticalCVE-2026-16812 updated by NVD
- CVE-2025-68686mediumCVE-2025-68686 updated by NVD
- CVE-2026-16232criticalCVE-2026-16232 updated by NVD
- CVE-2026-50522criticalCVE-2026-50522 updated by NVD
- CVE-2026-60137mediumCVE-2026-60137 updated by NVD
- CVE-2021-27137highCVE-2021-27137 updated by NVD
- CVE-2026-0770criticalCVE-2026-0770 updated by NVD
- CVE-2026-63030criticalCVE-2026-63030 updated by NVD
- CVE-2026-58644unknownMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2026-25089criticalCVE-2026-25089 updated by NVD
- CVE-2026-39808unknownFortinet FortiSandbox OS Command Injection Vulnerability
- CVE-2023-4346unknownKNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vu
- CVE-2026-46817criticalCVE-2026-46817 updated by NVD
- CVE-2026-56164unknownMicrosoft SharePoint Server Missing Authentication for Critical Function Vulnerability
- CVE-2026-56155unknownMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- CVE-2026-15410unknownSonicWall SMA1000 Appliances Code Injection Vulnerability
- CVE-2026-15409unknownSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- CVE-2008-4128unknownCisco IOS Cross-Site Request Forgery Vulnerability
- CVE-2026-56291criticalCVE-2026-56291 updated by NVD
- CVE-2026-48939unknowniCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
- CVE-2026-48908unknownJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
- CVE-2026-48282unknownAdobe ColdFusion Path Traversal Vulnerability
- CVE-2026-55255unknownLangflow Authorization Bypass Through User-Controlled Key Vulnerability
- CVE-2026-56290criticalCVE-2026-56290 updated by NVD
Browse all published advisories →
Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.
Includes data from the CISA Known Exploited Vulnerabilities catalog.
Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.
Includes data from OSV.dev. Includes data from the ENISA EU Vulnerability Database (EUVD).
CVE® is a registered trademark of The MITRE Corporation. EPSS scores by FIRST.org.