Skip to main content
veriom
Menu

Explore Veriom products, resources, and account pages.

Free tool · No sign-in

CVE radar: the latest vulnerabilities, explained.

Every new CVE from NVD, with whether it is exploited in the wild (CISA KEV), how likely it is to be (FIRST EPSS), and what it means for your architecture in plain language.

Updated 13 Nov, 16:14 UTC from NVD, CISA KEV and FIRST EPSSMarkdownRSSJSON Feed

366Critical, last 7 days2,408High, last 7 days38Added to CISA KEV, 30 days1,779Exploited CVEs tracked

Patch first

Exploited in the wild, newest first.

CISA adds a CVE to its Known Exploited Vulnerabilities catalog when attackers are using it. Patch these first, then CVEs with a high EPSS score, then the most severe, starting with anything reachable from the internet.

  1. CVE-2026-124194

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    Medium6.5Exploited, CISA due date 2026-11-24EPSS 1.6%, higher than 76% of scored CVEs

    Microsoft Office and 6 moreCVSS 3.1 · 6.5CWE-356

  2. CVE-2026-125350

    Google Chromium Use-After-Free Vulnerability

    High8.8Exploited, CISA due date 2026-11-24EPSS 0.96%, higher than 62% of scored CVEs

    Google Chromium and 1 moreCVSS 3.1 · 8.8CWE-416

  3. CVE-2026-116606

    Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Critical9.3Exploited, CISA due date 2026-11-13EPSS 11%, higher than 96% of scored CVEs

    Barracuda Email Security Gateway (ESG) and 5 moreCVSS 4.0 · 9.3CWE-288

  4. CVE-2026-111560

    Barracuda Networks Multiple Products OS Command Injection Vulnerability

    High8.6Exploited, CISA due date 2026-11-13EPSS 9.1%, higher than 95% of scored CVEs

    Barracuda Email Security Gateway (ESG) and 9 moreCVSS 4.0 · 8.6CWE-78

  5. CVE-2026-111793

    Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability

    Medium4.3Exploited, CISA due date 2026-11-24EPSS 0.64%, higher than 51% of scored CVEs

    Openwave Messaging Limited Webtop Media Transcoder and 2 moreCVSS 3.1 · 4.3CWE-669

Every exploited CVE

Trends

The last 30 days, by severity.

6,241 CVEs published, 484 of them critical. Many arrive without a score yet: NVD and the reporting organisations add CVSS over the following days.

CriticalHighMediumLowNot scored15 Oct 2026 to 13 Nov 2026
Show the numbers
DayCriticalHighMediumLowNot scored
15 Oct 202612000
16 Oct 202600100
17 Oct 202600000
18 Oct 202600000
19 Oct 202600000
20 Oct 202600000
21 Oct 202620000
22 Oct 202620000
23 Oct 202600000
24 Oct 202600000
25 Oct 202600000
26 Oct 202600000
27 Oct 202600000
28 Oct 202601000
29 Oct 202600000
30 Oct 202600000
31 Oct 202601000
1 Nov 202600000
2 Nov 202611000
3 Nov 202600100
4 Nov 202635158142290
5 Nov 202655213149360
6 Nov 202640148203476
7 Nov 2026541642321113
8 Nov 202623128143260
9 Nov 202631165231421
10 Nov 2026116121660948125
11 Nov 2026512852374447
12 Nov 202628172129236
13 Nov 2026452232344025

Exploit likelihood (EPSS), last 30 days

  1. Under 1%5904
  2. 1% to 10%217
  3. 10% to 50%4
  4. 50% or more4
  5. Not scored yet112

Most affected vendors, last 30 days

  1. Microsoft1095
  2. IBM322
  3. Google249
  4. Apache Software Foundation191
  5. openemr140
  6. FFmpeg121
  7. Red Hat118
  8. Adobe112
  9. Mozilla108
  10. Fortinet98

Matching CVEs

8,000 CVEs match these filters, page 246 of 320.

  1. CVE-2026-94460

    I.R.I.S S.A. IRISPowerscan incorrect default permissions

    High7.2EPSS 0.18%, higher than 8% of scored CVEs

    I.R.I.S S.A. IRISPowerscanCVSS 4.0 · 7.2CWE-276

    IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.

  2. CVE-2026-94459

    I.R.I.S S.A. IRISPowerscan vulnerability

    High7.2EPSS 0.15%, higher than 4% of scored CVEs

    I.R.I.S S.A. IRISPowerscanCVSS 4.0 · 7.2CWE-1392

    IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially…

  3. CVE-2026-93900

    elliotvs Simple CAPTCHA with Cloudflare Turnstile cross-site scripting

    Medium6.4EPSS 0.33%, higher than 27% of scored CVEs

    elliotvs Simple CAPTCHA with Cloudflare TurnstileCVSS 3.1 · 6.4CWE-79

    The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the [gravity-simple-turnstile] shortcode in versions up to, and including, 1.44.3 This is due to insufficient input sanitization and output…

  4. CVE-2026-120554

    carazo Import and export users and customers incorrect authorization

    High8.8EPSS 0.55%, higher than 47% of scored CVEs

    carazo Import and export users and customersCVSS 3.1 · 8.8CWE-863

    The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.5.11 This is due to a non-atomic multi-option write sequence in the `ACUI_Cron::save_settings()` function, which persists…

  5. CVE-2026-120422

    Sogou Input Method vulnerability

    High8.9EPSS 0.45%, higher than 39% of scored CVEs

    Sogou Input MethodCVSS 4.0 · 8.9

    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The application retrieves configuration data over unencrypted HTTP connections, allowing an attacker capable of manipulating network traffic to replace…

  6. CVE-2026-115498

    wingerspeed Slim Jetpack cross-site scripting

    High7.2EPSS 0.32%, higher than 26% of scored CVEs

    wingerspeed Slim JetpackCVSS 3.1 · 7.2CWE-79

    The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g<PAGE_ID>-website (Website contact-field)' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and output escaping. This makes it possible for…

  7. CVE-2026-111822

    Apache ActiveMQ missing authentication

    High8.1EPSS 0.36%, higher than 30% of scored CVEs

    Apache ActiveMQ and 1 moreCVSS 3.1 · 8.1CWE-306

    Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime configuration plugin removes a principal's write grant on a destination, an authenticated connection opened before the change can keep sending to…

  8. CVE-2026-111821

    Apache ActiveMQ improper input validation

    High7.5EPSS 0.52%, higher than 45% of scored CVEs

    Apache ActiveMQ and 1 moreCVSS 3.1 · 7.5CWE-20

    Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription with a clientId and subscription name that have a combined length > 65,535 (while separately being shorter) on a broker using KahaDB which can cause the…

  9. CVE-2026-111040

    Coupa Total Spend Management Platform cross-site scripting

    Medium5.1EPSS 0.23%, higher than 14% of scored CVEs

    Coupa Total Spend Management PlatformCVSS 4.0 · 5.1CWE-80

    The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attacker with low privileges can inject unsanitised HTML content which is stored in the database and subsequently rendered in other users’ browsers, affecting the display of…

  10. CVE-2026-111038

    Coupa Total Spend Management Platform CSV formula injection

    High7.3EPSS 0.35%, higher than 29% of scored CVEs

    Coupa Total Spend Management PlatformCVSS 4.0 · 7.3CWE-1236

    CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-controlled data, such as event names or templates within the Tenders module, are not properly validated or sanitised before…

  11. CVE-2026-111037

    Coupa Total Spend Management Platform cross-site scripting

    Medium5.1EPSS 0.46%, higher than 41% of scored CVEs

    Coupa Total Spend Management PlatformCVSS 4.0 · 5.1CWE-79

    A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The vulnerability arises because the `list_item_function` parameter is reflected in the server’s response without proper output encoding or sanitisation, and…

  12. CVE-2026-111036

    Coupa Total Spend Management Platform server-side request forgery

    High8.4EPSS 0.41%, higher than 36% of scored CVEs

    Coupa Total Spend Management PlatformCVSS 4.0 · 8.4CWE-918

    Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available in the ‘Contracts > Templates’ section. The vulnerability is due to insufficient validation of references to external…

  13. CVE-2026-110935

    Phoenix Contact PLCnext Engineer path traversal

    High8.6EPSS 0.19%, higher than 9% of scored CVEs

    Phoenix Contact PLCnext EngineerCVSS 4.0 · 8.6CWE-22

    The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local plugin repository. Archive entries containing relative path segments such as '..' are not rejected, allowing an unauthenticated local attacker to write…

  14. CVE-2026-110022

    Phoenix Contact PLCnext Engineer download without integrity check

    High8.6EPSS 0.11%, higher than 1% of scored CVEs

    Phoenix Contact PLCnext EngineerCVSS 4.0 · 8.6CWE-494

    The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into the local plugin repository and loads them via reflection, but the deployment routine processes archive entries that were never covered by the signature verification. An…

  15. CVE-2026-110021

    Phoenix Contact PLCnext Engineer improper signature verification

    Medium6.9EPSS 0.06%, higher than 0% of scored CVEs

    Phoenix Contact PLCnext EngineerCVSS 4.0 · 6.9CWE-347

    PLCnext Engineer checks GSDX manifest reference digests but does not cryptographically verify the XML `SignatureValue` over canonicalized `SignedInfo`. An unauthenticated local attacker can modify signed GSDML content, update its manifest digest, retain the public certificate…

  16. CVE-2026-108949

    Apache ActiveMQ memory leak

    Medium6.5EPSS 0.47%, higher than 41% of scored CVEs

    Apache ActiveMQ and 1 moreCVSS 3.1 · 6.5CWE-401

    Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker. An authenticated OpenWire client that sends a ConsumerInfo for a temporary queue/topic owned by another connection is rejected with InvalidDestinationException, but the rejected Subscription is left…

  17. CVE-2026-19731

    TÜBİTAK BİLGEM Software Technologies Research Institute İmzager path traversal

    Low3.3EPSS 0.13%, higher than 2% of scored CVEs

    TÜBİTAK BİLGEM Software Technologies Research Institute İmzagerCVSS 3.1 · 3.3CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Path Traversal. This issue affects İmzager: from 2.10.5 before 2.10.7.

  18. CVE-2026-19721

    TÜBİTAK BİLGEM Software Technologies Research Institute İmzager XML external entity

    Low3.3EPSS 0.11%, higher than 1% of scored CVEs

    TÜBİTAK BİLGEM Software Technologies Research Institute İmzagerCVSS 3.1 · 3.3CWE-611

    Improper restriction of XML external entity reference vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute İmzager allows Serialized Data External Linking. This issue affects İmzager: from 2.10.5 before 2.10.7.

  19. CVE-2026-114426

    SEPPmail Secure Email Gateway (SEG) uncontrolled resource consumption

    High8.7EPSS 0.32%, higher than 26% of scored CVEs

    SEPPmail Secure Email Gateway (SEG)CVSS 4.0 · 8.7CWE-400

    SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or…

  20. CVE-2026-114425

    SEPPmail Secure Email Gateway (SEG) external control of a file name

    Critical9.2EPSS 0.33%, higher than 26% of scored CVEs

    SEPPmail Secure Email Gateway (SEG)CVSS 4.0 · 9.2CWE-73

    SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is…

  21. CVE-2026-114424

    SEPPmail Secure Email Gateway (SEG) eval injection

    Critical9.2EPSS 0.26%, higher than 18% of scored CVEs

    SEPPmail Secure Email Gateway (SEG)CVSS 4.0 · 9.2CWE-95

    SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule…

  22. CVE-2026-114421

    SEPPmail Secure Email Gateway (SEG) weak password recovery

    High8.3EPSS 0.30%, higher than 23% of scored CVEs

    SEPPmail Secure Email Gateway (SEG)CVSS 4.0 · 8.3CWE-640

    SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who identifies such an account can set a new password,…

  23. CVE-2026-114420

    SEPPmail Secure Email Gateway (SEG) LDAP injection

    Medium6.9EPSS 0.36%, higher than 30% of scored CVEs

    SEPPmail Secure Email Gateway (SEG)CVSS 4.0 · 6.9CWE-90

    SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses.

  24. CVE-2026-62126

    miniOrange SAML SP Single Sign On allocation without limits

    High7.5EPSS 0.26%, higher than 18% of scored CVEs

    miniOrange SAML SP Single Sign OnCVSS 3.1 · 7.5CWE-770

    Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0.

  25. CVE-2026-62007

    Unlimited Elements For Elementor (Free Widgets, Addons, Templates) cross-site scripting

    High7.1EPSS 0.15%, higher than 4% of scored CVEs

    Unlimited Elements For Elementor (Free Widgets, Addons, Templates)CVSS 3.1 · 7.1CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited…

Reading the radar

CVSS, KEV and EPSS, briefly.

What is a CVE?

A CVE is a public identifier for one vulnerability in one product, such as CVE-2026-59310. The CVE program assigns it; NVD, run by the US National Institute of Standards and Technology, adds scores, weakness classes and affected product lists.

What does the CVSS score tell me?

CVSS rates how severe a vulnerability is on its own, from 0 to 10, and its vector says how it is reached: over the network or locally, with or without an account, with or without someone clicking. It says nothing about whether anyone is exploiting it. The radar shows the newest CVSS version scored and names it, because version 4.0 and 3.1 scores differ.

What is CISA KEV?

The Known Exploited Vulnerabilities catalog is CISA's list of CVEs with reliable evidence of exploitation in the wild. US federal agencies must fix each one by its due date, and it is the strongest signal of what to patch first.

What is EPSS?

FIRST's Exploit Prediction Scoring System estimates the probability that a CVE will see exploitation activity in the next 30 days, recomputed daily. Most CVEs score well under 1%, so the radar also shows the percentile: how a CVE ranks against every scored CVE.

How should I prioritise?

Patch what CISA lists as exploited first. Then CVEs with a high EPSS score, then the most severe by CVSS. Within each group, start with whatever is reachable from the internet without an account.

Where do the explanations come from?

Veriom writes them from fixed templates over each record: the weakness class says what went wrong and where in an architecture it lives, the CVSS vector says how it is reached and what it affects, and KEV, EPSS and CISA's assessment say whether it is exploited. Nobody reviews each CVE by hand, so read the description and the references before acting.

How fresh is the data?

New and changed CVEs arrive from NVD every hour, the KEV catalog every six hours and EPSS scores once a day. Each page shows when the data was last updated.

Know where a vulnerable component would sit in your systems.

A CVE names a product. Whether it matters depends on where that product sits in your systems: what reaches it, which trust boundary it guards and what it can reach once compromised. Veriom maps your components, their relationships and your trust boundaries from your code, cloud and delivery evidence, so you can see where a component like this sits. The radar itself does not look at your systems.

See how Veriom maps an architectureTake the interactive tour

Sources

  • CVE records and CVSS scores from the NVD CVE API. This product uses the NVD API but is not endorsed or certified by the NVD.
  • Exploitation status from CISA’s Known Exploited Vulnerabilities catalog.
  • Exploit likelihood from FIRST’s Exploit Prediction Scoring System (EPSS), refreshed daily.
  • Explanations are written by Veriom from fixed templates over each record’s data, not by a person reviewing each CVE. Descriptions are quoted from the records as published. The radar covers CVEs published since 4 Nov 2026, plus every CVE in the KEV catalog.