Open Intel60
Vulnerabilities

Every CVE in the news

43 vulnerabilities Intel60 has covered, with CVSS and EPSS scores. 25 are in CISA's Known Exploited Vulnerabilities catalog and are listed first.

  • CVE-2026-116779 CVSS 9.8 EPSS 2% Exploited (CISA KEV)SignalWire FreeSwitch Code Injection Vulnerability
  • CVE-2026-111793 CVSS 4.3 EPSS 0.3% Exploited (CISA KEV)Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
  • CVE-2026-105133 CVSS 7.3 EPSS 84% Exploited (CISA KEV)Ahsay AhsayCBS Improper Authentication Vulnerability
  • CVE-2026-105134 CVSS 10.0 EPSS 82% Exploited (CISA KEV)Ahsay AhsayCBS Command Injection Vulnerability
  • CVE-2026-123218 CVSS 9.8 EPSS 0.7% Exploited (CISA KEV)IBM Aspera Faspex Incorrect Authorization Vulnerability
  • CVE-2026-111560 CVSS 8.6 EPSS 1% Exploited (CISA KEV)Barracuda Networks Multiple Products OS Command Injection Vulnerability
  • CVE-2026-124194 CVSS 6.5 Exploited (CISA KEV)Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
  • CVE-2026-20320 CVSS 7.5 EPSS 0.4% Exploited (CISA KEV)Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
  • CVE-2025-31324 CVSS 9.8 EPSS 99% Exploited (CISA KEV)SAP NetWeaver webshell campaign exploits CVE-2025-31324
  • CVE-2026-102895 CVSS 9.8 EPSS 0.6% Exploited (CISA KEV)GPUStack Improper Authentication Vulnerability
  • CVE-2026-123158 CVSS 8.1 EPSS 17% Exploited (CISA KEV)OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
  • CVE-2026-19868 CVSS 7.5 EPSS 0.5% Exploited (CISA KEV)SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
  • CVE-2026-116606 CVSS 9.3 EPSS 2% Exploited (CISA KEV)Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2024-27834 CVSS 5.5 EPSS 0.6% Exploited (CISA KEV)Apple Multiple Products Improper Authentication Vulnerability
  • CVE-2026-119977 CVSS 8.1 EPSS 0.6% Exploited (CISA KEV)WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
  • CVE-2026-111357 CVSS 7.0 EPSS 0.5% Exploited (CISA KEV)Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
  • CVE-2026-118527 CVSS 4.3 Exploited (CISA KEV)Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
  • CVE-2026-104935 CVSS 8.6 EPSS 89% Exploited (CISA KEV)Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
  • CVE-2026-97229 CVSS 10.0 EPSS 18% Exploited (CISA KEV)GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
  • CVE-2026-76418 CVSS 8.6 Exploited (CISA KEV)Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
  • CVE-2026-46300 CVSS 7.8 EPSS 10% Exploited (CISA KEV)Linux Kernel Missing Initialization of a Variable Vulnerability
  • CVE-2026-109618 CVSS 9.8 EPSS 100% Exploited (CISA KEV)PHP Memory Corruption Vulnerability
  • CVE-2026-109619 CVSS 8.1 EPSS 100% Exploited (CISA KEV)PHP Stale Internal Request-State Vulnerability
  • CVE-2026-41709 CVSS 2.7 EPSS 0.3% Exploited (CISA KEV)Broadcom VMWare ESX Insufficient Logging Vulnerability
  • CVE-2026-35273 CVSS 9.8 EPSS 97% Exploited (CISA KEV)Oracle PeopleSoft critical bug chains three SSRF flaws together
  • CVE-2026-119618 Apache HTTP/2 module critical RCE flaw CVE-2026-119618
  • CVE-2026-113960 EPSS 0.2%Apple patches nine vulnerabilities across iOS, macOS, watchOS
  • CVE-2026-113961 CVSS 7.5 EPSS 0.6%Apple patches nine vulnerabilities across iOS, macOS, watchOS
  • CVE-2026-113963 CVSS 5.5 EPSS 0.1%Apple patches nine vulnerabilities across iOS, macOS, watchOS
  • CVE-2026-113964 CVSS 5.4 EPSS 0.3%Apple patches nine vulnerabilities across iOS, macOS, watchOS
  • CVE-2026-113971 CVSS 3.5 EPSS 0.2%Apple patches nine vulnerabilities across iOS, macOS, watchOS
  • CVE-2026-111760 Git patches integer truncation in recursive clone
  • CVE-2026-83844 CVSS 7.0 EPSS 0.4%Windows Paint RCE fix available via Microsoft Store
  • CVE-2026-58868 CVSS 9.8 EPSS 0.4%Google patches critical Android RCE flaw affecting versions 14-17
  • CVE-2000-0411 EPSS 8%Legacy email scripts targeted by spammers in honeypot scans
  • CVE-2026-58115 CVSS 10.0 EPSS 1.0%Siemens IoT2050 Advanced devices exploited for remote command backdoors
  • CVE-2026-98432 CVSS 9.8 EPSS 0.4%Linux TCP RCE flaw patched by Red Hat, Ubuntu testing
  • CVE-2026-81648 CVSS 10.0 EPSS 0.5%CryptoPayment Gateway WordPress plugin CVSS 10.0 flaw exploited
  • CVE-2026-58882 CVSS 7.5 EPSS 0.2%Android SMS of Death exploit crashes phones remotely
  • CVE-2026-118539 CVSS 6.5 EPSS 0.2%Drupal Commerce Core authorization bypass actively exploited
  • CVE-2026-111585 CVSS 8.8 EPSS 0.3%TeamViewer integer overflow lets hosts hijack technician machines
  • CVE-2026-101767 CVSS 9.8 EPSS 0.6%Hackers probe fresh Oracle EBS SQL injection flaw
  • CVE-2026-104351 CVSS 9.9Adobe Campaign Classic eight critical code execution flaws patched