CVE Exploit Alerts

CVE exploit alerts published automatically whenever CISA adds a new vulnerability to the KEV catalog. Each alert includes CVSS scoring, EPSS exploitation probability, MITRE ATT&CK mapping, CWE-specific detection guidance, and a 3-tier recommended action checklist. No account required.

CVE-2026-8452 — Citrix NetScaler ADC and NetScaler Gateway | CVSS 8.8 HIGH

by

HIGH

CVSS 8.8 HIGH  ·  EPSS 1%  ·  Citrix NetScaler ADC and NetScaler Gateway

Read more

CVE-2022-0995 — Linux Kernel: Out-of-Bounds Write | CVSS 7.8 HIGH

by

HIGH

CVSS 7.8 HIGH  ·  EPSS 6%  ·  Linux Kernel

Read more

CVE-2015-3246 — Red Hat Libuser | CVSS 7.2 HIGH

by

HIGH

CVSS 7.2 HIGH  ·  EPSS 7%  ·  Red Hat Libuser

Read more

CVE-2021-23758 — Ajax.NET Professional Ajax.NET Professional: Insecure Deserialization | CVSS 8.1 HIGH

by

HIGH

CVSS 8.1 HIGH  ·  EPSS 89%  ·  Ajax.NET Professional Ajax.NET Professional

Read more

CVE-2026-21962 — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 43%  ·  Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in

Read more

CVE-2026-73570 — Synacor Zimbra Collaboration Suite (ZCS): OS Command Injection | CVSS 8.9 HIGH

by

HIGH

CVSS 8.9 HIGH  ·  EPSS 1%  ·  Synacor Zimbra Collaboration Suite (ZCS)

Read more

CVE-2026-69836 — Microsoft Entra ID : Insecure Deserialization | CVSS 10.0 CRITICAL

by

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 1%  ·  Microsoft Entra ID

Read more

CVE-2026-72529 — TrueConf Server: Missing Authentication | CVSS 9.3 CRITICAL

by

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 0%  ·  TrueConf Server

Read more

CVE-2026-72530 — TrueConf Server: Code Injection | CVSS 9.5 CRITICAL

by

CRITICAL

CVSS 9.5 CRITICAL  ·  EPSS 0%  ·  TrueConf Server

Read more

CVE-2026-64849 — MLflow MLflow | CVSS 9.3 CRITICAL

by

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 1%  ·  MLflow MLflow

Read more