CVE Exploit Alerts

CVE exploit alerts published automatically whenever CISA adds a new vulnerability to the KEV catalog. Each alert includes CVSS scoring, EPSS exploitation probability, MITRE ATT&CK mapping, CWE-specific detection guidance, and a 3-tier recommended action checklist. No account required.

CVE-2026-54420 — LiteSpeed cPanel Plugin | CVSS 8.5 HIGH

by

HIGH

CVSS 8.5 HIGH  ·  EPSS 0%  ·  LiteSpeed cPanel Plugin

Read more

CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools: Missing Authentication | CVSS 9.8 CRITICAL

by

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 0%  ·  Oracle  PeopleSoft Enterprise PeopleTools

Read more

CVE-2026-10520 — Ivanti Sentry: OS Command Injection | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 3%  ·  Ivanti Sentry

Read more

CVE-2026-20245 — Cisco Catalyst SD-WAN Manager | CVSS 7.8 HIGH

by

HIGH

CVSS 7.8 HIGH  ·  EPSS 0%  ·  Cisco Catalyst SD-WAN Manager

Read more

CVE-2026-11645 — Google Chromium V8: Out-of-Bounds Read | CVSS 8.8 HIGH

by

HIGH

CVSS 8.8 HIGH  ·  EPSS 0%  ·  Google Chromium V8

Read more

CVE-2026-50751 — Check Point Security Gateway: Improper Authentication | CVSS 9.3 CRITICAL

by

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 0%  ·  Check Point Security Gateway

Read more

CVE-2026-42271 — BerriAI LiteLLM: Command Injection | CVSS 8.7 HIGH

by

HIGH

CVSS 8.7 HIGH  ·  EPSS 4%  ·  BerriAI LiteLLM

Read more

CVE-2026-28318 — SolarWinds Serv-U: Resource Exhaustion | CVSS 7.5 HIGH

by

HIGH

CVSS 7.5 HIGH  ·  EPSS 0%  ·  SolarWinds Serv-U

Read more

CVE-2026-45247 — Mirasvit Mirasvit Full Page Cache Warmer: Insecure Deserialization | CVSS 9.3 CRITICAL

by

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 0%  ·  Mirasvit Mirasvit Full Page Cache Warmer

Read more

CVE-2025-48595 — Android Framework: Integer Overflow | CVSS 8.4 HIGH

by

HIGH

CVSS 8.4 HIGH  ·  EPSS 0%  ·  Android Framework

Read more