CVE Exploit Alerts

CVE exploit alerts published automatically whenever CISA adds a new vulnerability to the KEV catalog. Each alert includes CVSS scoring, EPSS exploitation probability, MITRE ATT&CK mapping, CWE-specific detection guidance, and a 3-tier recommended action checklist. No account required.

CVE-2026-34910 — Ubiquiti UniFi OS: Improper Input Validation | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 34%  ·  Ubiquiti UniFi OS

Read more

CVE-2025-67038 — Lantronix EDS5000: Code Injection | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 0%  ·  Lantronix EDS5000

Read more

CVE-2026-20253 — Splunk Enterprise: Missing Authentication | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 2%  ·  Splunk Enterprise

Read more

CVE-2026-48907 — Widget Factory Joomla Content Editor | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 1%  ·  Widget Factory Joomla Content Editor

Read more

CVE-2026-54420 — LiteSpeed cPanel Plugin | CVSS 8.5 HIGH

by

HIGH

CVSS 8.5 HIGH  ·  EPSS 0%  ·  LiteSpeed cPanel Plugin

Read more

CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools: Missing Authentication | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 0%  ·  Oracle  PeopleSoft Enterprise PeopleTools

Read more

CVE-2026-10520 — Ivanti Sentry: OS Command Injection | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 3%  ·  Ivanti Sentry

Read more

CVE-2026-20245 — Cisco Catalyst SD-WAN Manager | CVSS 7.8 HIGH

by

HIGH

CVSS 7.8 HIGH  ·  EPSS 0%  ·  Cisco Catalyst SD-WAN Manager

Read more

CVE-2026-11645 — Google Chromium V8: Out-of-Bounds Read | CVSS 8.8 HIGH

by

HIGH

CVSS 8.8 HIGH  ·  EPSS 0%  ·  Google Chromium V8

Read more

CVE-2026-50751 — Check Point Security Gateway: Improper Authentication | CVSS 9.3 CRITICAL

by

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 0%  ·  Check Point Security Gateway

Read more