Free tool · No sign-in
CVE radar: the latest vulnerabilities, explained.
Every new CVE from NVD, with whether it is exploited in the wild (CISA KEV), how likely it is to be (FIRST EPSS), and what it means for your architecture in plain language.
Updated 14 Nov, 05:18 UTC from NVD, CISA KEV and FIRST EPSSMarkdownRSSJSON Feed
Patch first
Exploited in the wild, newest first.
CISA adds a CVE to its Known Exploited Vulnerabilities catalog when attackers are using it. Patch these first, then CVEs with a high EPSS score, then the most severe, starting with anything reachable from the internet.
Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability
High7.8Exploited, CISA due date 2026-11-16EPSS 1.3%, higher than 70% of scored CVEscheckpoint Quantum Security Gateway and 1 moreCVSS 3.1 · 7.8CWE-732, CWE-862
UnrealIRCd Improper Neutralization of Delimiters Vulnerability
High8.6Exploited, CISA due date 2026-11-16EPSS 0.30%, higher than 23% of scored CVEsUnrealIRCdCVSS 3.1 · 8.6CWE-140
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
Medium6.5Exploited, CISA due date 2026-11-24EPSS 1.6%, higher than 76% of scored CVEsMicrosoft Office and 6 moreCVSS 3.1 · 6.5CWE-356
Google Chromium Use-After-Free Vulnerability
High8.8Exploited, CISA due date 2026-11-24EPSS 0.96%, higher than 62% of scored CVEsGoogle Chromium and 1 moreCVSS 3.1 · 8.8CWE-416
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Critical9.3Exploited, CISA due date 2026-11-13EPSS 11%, higher than 96% of scored CVEsBarracuda Email Security Gateway (ESG) and 5 moreCVSS 4.0 · 9.3CWE-288
Trends
The last 30 days, by severity.
6,463 CVEs published, 508 of them critical. Many arrive without a score yet: NVD and the reporting organisations add CVSS over the following days.
Show the numbers
| Day | Critical | High | Medium | Low | Not scored |
|---|---|---|---|---|---|
| 16 Oct 2026 | 0 | 0 | 1 | 0 | 0 |
| 17 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 18 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 20 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 21 Oct 2026 | 2 | 0 | 0 | 0 | 0 |
| 22 Oct 2026 | 2 | 0 | 0 | 0 | 0 |
| 23 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 24 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 25 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 27 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 28 Oct 2026 | 0 | 1 | 0 | 0 | 0 |
| 29 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 30 Oct 2026 | 0 | 0 | 0 | 0 | 0 |
| 31 Oct 2026 | 0 | 1 | 0 | 0 | 0 |
| 1 Nov 2026 | 0 | 0 | 0 | 0 | 0 |
| 2 Nov 2026 | 1 | 1 | 0 | 0 | 0 |
| 3 Nov 2026 | 0 | 0 | 1 | 0 | 0 |
| 4 Nov 2026 | 35 | 158 | 142 | 29 | 0 |
| 5 Nov 2026 | 55 | 213 | 149 | 36 | 0 |
| 6 Nov 2026 | 41 | 148 | 202 | 47 | 6 |
| 7 Nov 2026 | 54 | 165 | 232 | 10 | 13 |
| 8 Nov 2026 | 23 | 128 | 143 | 26 | 0 |
| 9 Nov 2026 | 32 | 164 | 231 | 42 | 1 |
| 10 Nov 2026 | 117 | 1221 | 623 | 61 | 92 |
| 11 Nov 2026 | 51 | 285 | 237 | 44 | 47 |
| 12 Nov 2026 | 28 | 172 | 129 | 23 | 6 |
| 13 Nov 2026 | 67 | 327 | 337 | 52 | 9 |
| 14 Nov 2026 | 0 | 0 | 0 | 0 | 0 |
Exploit likelihood (EPSS), last 30 days
- Under 1%5902
- 1% to 10%217
- 10% to 50%4
- 50% or more3
- Not scored yet337
Most affected vendors, last 30 days
Most common weaknesses, last 30 days
- Cross-site scripting (CWE-79)514
- Missing authorization (CWE-862)382
- Heap-based buffer overflow (CWE-122)363
- Use after free (CWE-416)340
- Insecure direct object reference (CWE-639)228
- Incorrect authorization (CWE-863)212
- Out-of-bounds read (CWE-125)206
- SQL injection (CWE-89)184
- Server-side request forgery (CWE-918)183
- Out-of-bounds write (CWE-787)181
Matching CVEs
2,462 CVEs match these filters, page 9 of 99.
openemr missing authorization
High7.2EPSS 0.33%, higher than 26% of scored CVEsopenemrCVSS 4.0 · 7.2CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in five Module Manager InstallerController actions that lack the admin/manage_modules ACL check and CSRF validation. Low-privilege users such as Front Office accounts can POST to saveConfig or SaveHooks to…
openemr SQL injection
High7.2EPSS 0.34%, higher than 27% of scored CVEsopenemrCVSS 4.0 · 7.2CWE-89
OpenEMR before 8.5.0 contains an SQL injection vulnerability in the Syndromic Surveillance report because the form_icd_codes[] POST array is concatenated into an unquoted numeric IN() clause without integer validation. Authenticated users can submit quote-free payloads that…
openemr insecure direct object reference
High8.7EPSS 0.44%, higher than 39% of scored CVEsopenemrCVSS 4.0 · 8.7CWE-639
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccda_gateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and…
openemr missing authorization
High7.1EPSS 0.36%, higher than 30% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in print_referral.php and trend_form.php that allows low-privileged Front Office users to access patient PHI without patients:med permission. Attackers can directly request these endpoints with arbitrary…
openemr insecure direct object reference
High8.7EPSS 0.44%, higher than 39% of scored CVEsopenemrCVSS 4.0 · 8.7CWE-639
OpenEMR before 8.5.0 contains an insecure direct object reference vulnerability in the Carecoordination module that allows authenticated users with send_to_hie permission to access any patient's CCDA/CCR/QRDA documents. Attackers can supply arbitrary document or patient IDs to…
openemr missing authorization
High8.7EPSS 0.56%, higher than 47% of scored CVEsopenemrCVSS 4.0 · 8.7CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in several custom/ scripts that rely only on session authentication and never call AclMain::aclCheckCore(). Any authenticated low-privilege user can request export_labworks.php, chart_tracker.php, or…
openemr missing authorization
High8.7EPSS 0.44%, higher than 39% of scored CVEsopenemrCVSS 4.0 · 8.7CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability that allows any authenticated low-privilege user to access reports, dated reminders, and batch reminder endpoints lacking AclMain::aclCheckCore() checks. Attackers can request patient_list.php,…
openemr mass assignment
High7.1EPSS 0.38%, higher than 32% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-915
OpenEMR before 8.5.0 contains a mass assignment vulnerability in ObservationController::processEnhancedFormSave() that allows authenticated low-privilege users to forge authorization flags through an incomplete field blacklist. Attackers can submit authorized=1 or override the…
openemr missing authorization
High8.7EPSS 0.44%, higher than 39% of scored CVEsopenemrCVSS 4.0 · 8.7CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability that allows any authenticated user to create patient records and enumerate patients by omitting aclCheckCore() checks. Attackers can POST to new_comprehensive_save.php to create patients with insurance PHI, or…
openemr SQL injection
High7.1EPSS 0.44%, higher than 39% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-89
OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal api/onsiteactivityviews endpoint that allows any authenticated staff user to inject SQL through unquoted Id_BitwiseAnd Criteria values. Attackers can close the bitwise parenthesis and append OR…
openemr SQL injection
High7.1EPSS 0.32%, higher than 26% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-89
OpenEMR before 8.5.0 contains multiple sql injection vulnerabilities that allow authenticated users to inject payloads through ERA CLP01, form_facility, form_icd_codes, and POST key names. Attackers can perform UNION, blind, and error-based injection to read users_secure…
openemr server-side request forgery
High7.1EPSS 0.35%, higher than 30% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-918
OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/user_settings.php that lets any authenticated user persist arbitrary global configuration overrides. Attackers can POST global:-prefixed keys to re-point external service hosts like CouchDB,…
openemr SQL injection
High7.1EPSS 0.32%, higher than 26% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-89
OpenEMR before 8.5.0 contains a persistent SQL injection vulnerability in SLEOB::slInvoiceNumber(), where the CLP01 claim control number from uploaded X12 835 ERA files is concatenated unescaped into a query. Attackers with billing write access can upload a crafted .edi file…
openemr missing authorization
High8.7EPSS 0.47%, higher than 41% of scored CVEsopenemrCVSS 4.0 · 8.7CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in authorizations_full.php that allows any authenticated staff user to authorize arbitrary patients' clinical records. Attackers can send a mode=authorize request with an attacker-chosen pid and their own CSRF…
openemr missing authorization
High7.1EPSS 0.31%, higher than 24% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in InstallerController that allows any authenticated user to modify module administration settings without the admin/manage_modules permission. Low-privileged users such as Front Office clerks can POST to…
openemr missing authorization
High8.6EPSS 0.38%, higher than 32% of scored CVEsopenemrCVSS 4.0 · 8.6CWE-862
OpenEMR before 8.5.0 contains multiple missing authorization and SQL injection defects across report, portal, transaction, and immunization components. Low-privileged Front Office clerks can chain these to read arbitrary database tables including users_secure hashes, hijack…
openemr unlimited sign-in attempts
High8.6EPSS 0.47%, higher than 42% of scored CVEsopenemrCVSS 4.0 · 8.6CWE-307
OpenEMR before 8.5.0 lacks rate limiting or lockout on TOTP submission, allowing attackers with a valid password to brute-force the 6-digit MFA code. Attackers can script repeated POST requests to main_screen.php or the OAuth2 authorization flow with re-submitted hidden…
openemr insufficient session expiration
High7.1EPSS 0.35%, higher than 30% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-613
OpenEMR before 8.5.0 contains an inverted comparison in Document::has_expired() that causes the FHIR Binary download endpoint to treat time-limited PHI documents as unexpired after their one-hour lifetime. Authenticated users still authorized for a Binary/{id} resource can…
openemr insecure direct object reference
High7.1EPSS 0.35%, higher than 29% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-639
OpenEMR before 8.5.0 contains a missing authorization vulnerability in diagnosis_full.php that allows authenticated users to delete or clear any billing record by ID. Attackers can supply a target billing ID in the id parameter with delete or clear mode to deactivate other…
openemr cross-site scripting
High8.5EPSS 0.37%, higher than 31% of scored CVEsopenemrCVSS 4.0 · 8.5CWE-79
OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows portal patients to run JavaScript in staff sessions by injecting javascript: URLs into document template_data. Attackers can submit an encounterForm value rendered unsanitized into an iframe…
openemr missing authorization
High7.1EPSS 0.31%, higher than 25% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in immunizations.php, diagnosis_full.php, and billing_process.php that lets low-privileged users bypass ACL checks. Authenticated Front Office users can reuse their session CSRF token to add or delete…
openemr missing authorization
High7.1EPSS 0.35%, higher than 30% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in dynamic_finder_ajax.php that allows authenticated users without patients/demo permission to query patient demographics. Attackers can supply arbitrary patient_data columns via the sColumns parameter to…
openemr missing authorization
High8.6EPSS 0.36%, higher than 31% of scored CVEsopenemrCVSS 4.0 · 8.6CWE-862
OpenEMR before 8.5.0 contains a missing authorization vulnerability in create_portallogin.php that allows low-privilege authenticated users to replace patient portal credentials without ACL checks. Attackers can select a victim patient in session and post replacement…
openemr insecure direct object reference
High7.1EPSS 0.38%, higher than 32% of scored CVEsopenemrCVSS 4.0 · 7.1CWE-639
OpenEMR before 8.5.0 contains an authorization bypass vulnerability in portal/lib/download_template.php that allows any authenticated core user to render documents for arbitrary patients by setting isModule. Attackers can submit arbitrary pid and template_id values to disclose…
openemr missing authorization
High8.7EPSS 0.43%, higher than 38% of scored CVEsopenemrCVSS 4.0 · 8.7CWE-862
OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows OAuth2 clients to use unregistered grant types because oauth_clients.grant_types is never enforced. Attackers can request tokens with grant_type=password to bypass the user consent screen, and…
Reading the radar
CVSS, KEV and EPSS, briefly.
What is a CVE?
A CVE is a public identifier for one vulnerability in one product, such as CVE-2026-59310. The CVE program assigns it; NVD, run by the US National Institute of Standards and Technology, adds scores, weakness classes and affected product lists.
What does the CVSS score tell me?
CVSS rates how severe a vulnerability is on its own, from 0 to 10, and its vector says how it is reached: over the network or locally, with or without an account, with or without someone clicking. It says nothing about whether anyone is exploiting it. The radar shows the newest CVSS version scored and names it, because version 4.0 and 3.1 scores differ.
What is CISA KEV?
The Known Exploited Vulnerabilities catalog is CISA's list of CVEs with reliable evidence of exploitation in the wild. US federal agencies must fix each one by its due date, and it is the strongest signal of what to patch first.
What is EPSS?
FIRST's Exploit Prediction Scoring System estimates the probability that a CVE will see exploitation activity in the next 30 days, recomputed daily. Most CVEs score well under 1%, so the radar also shows the percentile: how a CVE ranks against every scored CVE.
How should I prioritise?
Patch what CISA lists as exploited first. Then CVEs with a high EPSS score, then the most severe by CVSS. Within each group, start with whatever is reachable from the internet without an account.
Where do the explanations come from?
Veriom writes them from fixed templates over each record: the weakness class says what went wrong and where in an architecture it lives, the CVSS vector says how it is reached and what it affects, and KEV, EPSS and CISA's assessment say whether it is exploited. Nobody reviews each CVE by hand, so read the description and the references before acting.
How fresh is the data?
New and changed CVEs arrive from NVD every hour, the KEV catalog every six hours and EPSS scores once a day. Each page shows when the data was last updated.
Know where a vulnerable component would sit in your systems.
A CVE names a product. Whether it matters depends on where that product sits in your systems: what reaches it, which trust boundary it guards and what it can reach once compromised. Veriom maps your components, their relationships and your trust boundaries from your code, cloud and delivery evidence, so you can see where a component like this sits. The radar itself does not look at your systems.
Sources
- CVE records and CVSS scores from the NVD CVE API. This product uses the NVD API but is not endorsed or certified by the NVD.
- Exploitation status from CISA’s Known Exploited Vulnerabilities catalog.
- Exploit likelihood from FIRST’s Exploit Prediction Scoring System (EPSS), refreshed daily.
- Explanations are written by Veriom from fixed templates over each record’s data, not by a person reviewing each CVE. Descriptions are quoted from the records as published. The radar covers CVEs published since 4 Nov 2026, plus every CVE in the KEV catalog.