CVE Exploit Alerts

CVE exploit alerts published automatically whenever CISA adds a new vulnerability to the KEV catalog. Each alert includes CVSS scoring, EPSS exploitation probability, MITRE ATT&CK mapping, CWE-specific detection guidance, and a 3-tier recommended action checklist. No account required.

CVE-2025-34291 — Langflow Langflow | CVSS 9.4 CRITICAL

by

CRITICAL

CVSS 9.4 CRITICAL  ·  EPSS 9%  ·  Langflow Langflow

Read more

CVE-2026-41091 — Microsoft Defender | CVSS 7.8 HIGH

by

HIGH

CVSS 7.8 HIGH  ·  EPSS N/A  ·  Microsoft Defender

Read more

CVE-2010-0806 — Microsoft Internet Explorer | CVSS 9.3 HIGH

by

HIGH

CVSS 9.3 HIGH  ·  EPSS 89%  ·  Microsoft Internet Explorer

Read more

CVE-2009-3459 — Adobe Acrobat and Reader | CVSS 9.3 HIGH

by

HIGH

CVSS 9.3 HIGH  ·  EPSS 87%  ·  Adobe Acrobat and Reader

Read more

CVE-2009-1537 — Microsoft DirectX | CVSS 9.3 HIGH

by

HIGH

CVSS 9.3 HIGH  ·  EPSS 68%  ·  Microsoft DirectX

Read more

CVE-2008-4250 — Microsoft Windows: Code Injection | CVSS 10.0 HIGH

by

HIGH

CVSS 10.0 HIGH  ·  EPSS 93%  ·  Microsoft Windows

Read more

CVE-2010-0249 — Microsoft Internet Explorer: Use-After-Free | CVSS 8.8 HIGH

by

HIGH

CVSS 8.8 HIGH  ·  EPSS 90%  ·  Microsoft Internet Explorer

Read more

CVE-2026-42897 — Microsoft Microsoft: Cross-Site Scripting | CVSS 8.1 HIGH

by

HIGH

CVSS 8.1 HIGH  ·  EPSS 0%  ·  Microsoft Microsoft

Read more

CVE-2026-20182 — Cisco Catalyst SD-WAN: Improper Authentication | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS N/A  ·  Cisco Catalyst SD-WAN

Read more

CVE-2026-42208 — BerriAI LiteLLM: SQL Injection | CVSS 9.3 CRITICAL

by

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 0%  ·  BerriAI LiteLLM

Read more