Free tool · No sign-in
CVE radar: the latest vulnerabilities, explained.
Every new CVE from NVD, with whether it is exploited in the wild (CISA KEV), how likely it is to be (FIRST EPSS), and what it means for your architecture in plain language.
Updated 13 Nov, 15:14 UTC from NVD, CISA KEV and FIRST EPSSMarkdownRSSJSON Feed
Patch first
Exploited in the wild, newest first.
CISA adds a CVE to its Known Exploited Vulnerabilities catalog when attackers are using it. Patch these first, then CVEs with a high EPSS score, then the most severe, starting with anything reachable from the internet.
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Medium6.5Exploited, CISA due date 2026-11-24EPSS 1.6%, higher than 76% of scored CVEsMicrosoft Office and 6 moreCVSS 3.1 · 6.5CWE-356
Google Chromium Use-After-Free Vulnerability
High8.8Exploited, CISA due date 2026-11-24EPSS 0.96%, higher than 62% of scored CVEsGoogle Chromium and 1 moreCVSS 3.1 · 8.8CWE-416
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Critical9.3Exploited, CISA due date 2026-11-13EPSS 11%, higher than 96% of scored CVEsBarracuda Email Security Gateway (ESG) and 5 moreCVSS 4.0 · 9.3CWE-288
Barracuda Networks Multiple Products OS Command Injection Vulnerability
High8.6Exploited, CISA due date 2026-11-13EPSS 9.1%, higher than 95% of scored CVEsBarracuda Email Security Gateway (ESG) and 9 moreCVSS 4.0 · 8.6CWE-78
Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
Medium4.3Exploited, CISA due date 2026-11-24EPSS 0.64%, higher than 51% of scored CVEsOpenwave Messaging Limited Webtop Media Transcoder and 2 moreCVSS 3.1 · 4.3CWE-669
Trends
The last 30 days, by severity.
6,173 CVEs published, 473 of them critical. Many arrive without a score yet: NVD and the reporting organisations add CVSS over the following days.
Show the numbers
| Day | Critical | High | Medium | Low | Not scored |
|---|---|---|---|---|---|
| 15 Oct 2026 | 1 | 2 | 0 | 0 | 0 |
| 16 Oct 2026 | 0 | 0 | 1 | 0 | 0 |
| 17 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 18 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 20 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 21 Oct 2026 | 2 | 0 | 0 | 0 | 0 |
| 22 Oct 2026 | 2 | 0 | 0 | 0 | 0 |
| 23 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 24 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 25 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 27 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 28 Oct 2026 | 0 | 1 | 0 | 0 | 0 |
| 29 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 30 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 31 Oct 2026 | 0 | 1 | 0 | 0 | 0 |
| 1 Nov 2026 | 0 | 0 | 0 | 0 | 0 |
| 2 Nov 2026 | 1 | 1 | 0 | 0 | 0 |
| 3 Nov 2026 | 0 | 0 | 1 | 0 | 0 |
| 4 Nov 2026 | 35 | 158 | 142 | 29 | 0 |
| 5 Nov 2026 | 55 | 213 | 149 | 36 | 0 |
| 6 Nov 2026 | 40 | 148 | 203 | 47 | 6 |
| 7 Nov 2026 | 54 | 164 | 232 | 11 | 13 |
| 8 Nov 2026 | 23 | 128 | 143 | 26 | 0 |
| 9 Nov 2026 | 31 | 165 | 231 | 42 | 1 |
| 10 Nov 2026 | 110 | 1199 | 601 | 45 | 159 |
| 11 Nov 2026 | 51 | 284 | 237 | 44 | 48 |
| 12 Nov 2026 | 28 | 172 | 129 | 23 | 6 |
| 13 Nov 2026 | 40 | 191 | 204 | 39 | 25 |
Exploit likelihood (EPSS), last 30 days
- Under 1%5904
- 1% to 10%217
- 10% to 50%4
- 50% or more4
- Not scored yet44
Most affected vendors, last 30 days
Most common weaknesses, last 30 days
- Cross-site scripting (CWE-79)475
- Missing authorization (CWE-862)359
- Heap-based buffer overflow (CWE-122)358
- Use after free (CWE-416)338
- Insecure direct object reference (CWE-639)221
- Out-of-bounds read (CWE-125)192
- Incorrect authorization (CWE-863)191
- Server-side request forgery (CWE-918)177
- Path traversal (CWE-22)174
- SQL injection (CWE-89)172
Matching CVEs
203 CVEs match these filters, page 4 of 9.
NangoHQ nango SQL injection
High7.7EPSS 0.30%, higher than 23% of scored CVEsNangoHQ nangoCVSS 4.0 · 7.7CWE-89
Nango before 0.71.3 contains an sql injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL by supplying a crafted task group key to the orchestrator API. Attackers can send a malicious group.key to POST /v1/immediate, which…
ivanti Endpoint Manager SQL injection
Critical9.8EPSS 2.0%, higher than 81% of scored CVEsivanti Endpoint ManagerCVSS 3.1 · 9.8CWE-89
SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.
Zohocorp DDI Central SQL injection
High7.2EPSS 3.4%, higher than 89% of scored CVEsZohocorp DDI CentralCVSS 3.1 · 7.2CWE-89
Zoho Corporation ManageEngine DDI Central version below 6201 is vulnerable to SQL injection in HA replication username handling leading to command execution as the PostgreSQL service account.
Deltaww DIAEnergie SQL injection
High8.8EPSS 0.24%, higher than 15% of scored CVEsDeltaww DIAEnergieCVSS 3.1 · 8.8CWE-89
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww DIAEnergie allows SQL Injection. This issue affects DIAEnergie: before 1.11.01.032.
gcpaas DataRoom SQL injection
Medium6.0EPSS 0.29%, higher than 22% of scored CVEsgcpaas DataRoomCVSS 4.0 · 6.0CWE-89
DataRoom through 3.0.0 contains an sql injection vulnerability in MyBatisService.generateSql that allows sharer-role users to inject SQL by supplying crafted dataset parameters. Attackers can send crafted inputParam values to /dataRoom/dataset/run, exploiting unquoted string…
craftcms cms SQL injection
Critical9.3EPSS 0.48%, higher than 42% of scored CVEscraftcms cmsCVSS 4.0 · 9.3CWE-89
An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search, allowing stacked query execution and enabling escalation to an administrator. Note that this only affects MySQL/MariaDB. Impact * SQL injection — The attribute…
dynatrace-oss dynatrace-mcp SQL injection
Medium4.3EPSS 0.23%, higher than 14% of scored CVEsdynatrace-oss dynatrace-mcpCVSS 3.1 · 4.3CWE-89
Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.1.1, several read capabilities interpolate caller-controlled values into DQL without sufficient validation or escaping. The src/capabilities/find-monitored-entity-by-name.ts capability embeds…
axew3.com WP w3all phpBB SQL injection
High8.5EPSS 0.26%, higher than 18% of scored CVEsaxew3.com WP w3all phpBBCVSS 3.1 · 8.5CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9.
flowintel SQL injection
High7.3EPSS 0.13%, higher than 2% of scored CVEsflowintelCVSS 4.0 · 7.3CWE-89
A SQL injection vulnerability exists in a database migration script in flowintel. The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written…
PipraPay SQL injection
Low2.1EPSS 0.20%, higher than 11% of scored CVEsPipraPayCVSS 4.0 · 2.1CWE-74, CWE-89
A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteData of the file pp-content/pp-include/pp-functions.php of the component Admin Panel. The manipulation of the argument selected_ids/ItemID leads to sql injection. It is…
GALENO SISTEMI MAGISTRA SQL injection
Medium4.4EPSS 0.10%, higher than 1% of scored CVEsGALENO SISTEMI MAGISTRACVSS 4.0 · 4.4CWE-89
An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.
CompuGroup Medical XDent SQL injection
High8.1EPSS 0.38%, higher than 33% of scored CVEsCompuGroup Medical XDent and 1 moreCVSS 4.0 · 8.1CWE-89
CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary SQL queries against backend MySQL databases.
itsourcecode Airline Reservation System SQL injection
Medium5.5EPSS 0.26%, higher than 18% of scored CVEsitsourcecode Airline Reservation SystemCVSS 4.0 · 5.5CWE-74, CWE-89
A vulnerability was determined in itsourcecode Airline Reservation System 1.0. Affected is an unknown function of the file /admin/manage_flight.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has…
SourceCodester Simple CRUD using PHP and FPDF SQL injection
Low2.1EPSS 0.20%, higher than 10% of scored CVEsSourceCodester Simple CRUD using PHP and FPDFCVSS 4.0 · 2.1CWE-74, CWE-89
A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed…
JeecgBoot SQL injection
Low2.1EPSS 0.19%, higher than 9% of scored CVEsJeecgBootCVSS 4.0 · 2.1CWE-74, CWE-89
A weakness has been identified in JeecgBoot 3.9.5. This vulnerability affects the function JimuFormApiService.getTableDictList of the file /jeecg-boot/jmreport/form/getTableDictList of the component Table Dictionary API. Executing a manipulation of the argument searchSql can…
JeecgBoot SQL injection
Medium5.5EPSS 0.25%, higher than 17% of scored CVEsJeecgBootCVSS 4.0 · 5.5CWE-74, CWE-89
A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation of the argument params results in sql injection. Remote exploitation of the…
erupts erupt SQL injection
Low2.1EPSS 0.21%, higher than 11% of scored CVEserupts eruptCVSS 4.0 · 2.1CWE-74, CWE-89
A vulnerability was detected in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Performing a manipulation of the argument sort results in sql injection. The attack is possible to be carried out remotely.…
IBM Guardium Data Protection SQL injection
Medium5.6EPSS 0.30%, higher than 24% of scored CVEsIBM Guardium Data ProtectionCVSS 3.1 · 5.6CWE-89
IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
WPVibes AnyWhere Elementor SQL injection
High8.5EPSS 0.33%, higher than 27% of scored CVEsWPVibes AnyWhere ElementorCVSS 3.1 · 8.5CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Blind SQL Injection.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
openemr SQL injection
Critical9.4EPSS 0.31%, higher than 24% of scored CVEsopenemrCVSS 4.0 · 9.4CWE-89
OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause. Low-privileged authenticated users can submit Fee Sheet product lines…
openemr SQL injection
High7.1EPSS 0.27%, higher than 20% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-89
OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Standard REST API patient insurance and employer search, which concatenates query-string parameter names into SQL as column identifiers without escaping. Authenticated clients, including low-privilege…
openemr SQL injection
High7.1EPSS 0.24%, higher than 15% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-89
OpenEMR before 8.4.0 contains a mass assignment vulnerability in the patient portal OnsiteDocument query API that lets request parameters set bitwise criteria filters whose values are placed unquoted into the SQL WHERE clause. Authenticated patient portal users can inject SQL…
Jinher OA SQL injection
Medium5.5EPSS 0.25%, higher than 17% of scored CVEsJinher OACVSS 4.0 · 5.5CWE-74, CWE-89
A vulnerability was identified in Jinher OA C6. This impacts an unknown function of the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManage.aspx. Such manipulation of the argument ProjID leads to sql injection. It is possible to launch the attack remotely. The…
Productive Commerce SQL injection
High8.6EPSS 0.26%, higher than 18% of scored CVEsProductive CommerceCVSS 3.1 · 8.6CWE-89
The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.
Razorpay for WooCommerce SQL injection
Medium4.1EPSS 0.19%, higher than 8% of scored CVEsRazorpay for WooCommerceCVSS 3.1 · 4.1CWE-89
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret (administrators) to perform SQL injection attacks.
Reading the radar
CVSS, KEV and EPSS, briefly.
What is a CVE?
A CVE is a public identifier for one vulnerability in one product, such as CVE-2026-59310. The CVE program assigns it; NVD, run by the US National Institute of Standards and Technology, adds scores, weakness classes and affected product lists.
What does the CVSS score tell me?
CVSS rates how severe a vulnerability is on its own, from 0 to 10, and its vector says how it is reached: over the network or locally, with or without an account, with or without someone clicking. It says nothing about whether anyone is exploiting it. The radar shows the newest CVSS version scored and names it, because version 4.0 and 3.1 scores differ.
What is CISA KEV?
The Known Exploited Vulnerabilities catalog is CISA's list of CVEs with reliable evidence of exploitation in the wild. US federal agencies must fix each one by its due date, and it is the strongest signal of what to patch first.
What is EPSS?
FIRST's Exploit Prediction Scoring System estimates the probability that a CVE will see exploitation activity in the next 30 days, recomputed daily. Most CVEs score well under 1%, so the radar also shows the percentile: how a CVE ranks against every scored CVE.
How should I prioritise?
Patch what CISA lists as exploited first. Then CVEs with a high EPSS score, then the most severe by CVSS. Within each group, start with whatever is reachable from the internet without an account.
Where do the explanations come from?
Veriom writes them from fixed templates over each record: the weakness class says what went wrong and where in an architecture it lives, the CVSS vector says how it is reached and what it affects, and KEV, EPSS and CISA's assessment say whether it is exploited. Nobody reviews each CVE by hand, so read the description and the references before acting.
How fresh is the data?
New and changed CVEs arrive from NVD every hour, the KEV catalog every six hours and EPSS scores once a day. Each page shows when the data was last updated.
Know where a vulnerable component would sit in your systems.
A CVE names a product. Whether it matters depends on where that product sits in your systems: what reaches it, which trust boundary it guards and what it can reach once compromised. Veriom maps your components, their relationships and your trust boundaries from your code, cloud and delivery evidence, so you can see where a component like this sits. The radar itself does not look at your systems.
Sources
- CVE records and CVSS scores from the NVD CVE API. This product uses the NVD API but is not endorsed or certified by the NVD.
- Exploitation status from CISA’s Known Exploited Vulnerabilities catalog.
- Exploit likelihood from FIRST’s Exploit Prediction Scoring System (EPSS), refreshed daily.
- Explanations are written by Veriom from fixed templates over each record’s data, not by a person reviewing each CVE. Descriptions are quoted from the records as published. The radar covers CVEs published since 4 Nov 2026, plus every CVE in the KEV catalog.