CVE
What each publisher says about a vulnerability, whether working code exists for it, and what is written about it afterwards.
Only one source knows: Exploit-DB 23133 · GitHub advisories 35 · CISA Known Exploited Vulnerabilities 1004 · Metasploit exploit modules 679 · NVD 12677 · Red Hat 19828 · Write-ups 5
Covers. Every CVE in CISA KEV. Red Hat since 2025-01-01, NVD since 2026-08-01, GitHub since 2026-09-01. Every Exploit-DB entry and Metasploit exploit module naming a CVE. Excludes. Vulnerabilities with no CVE number. Ubuntu, whose list endpoint answers 20 records in thirty seconds and cannot be paged at a useful rate.
Compared · what is held against what, and from which column of each source
| Property | CISA Known Exploited Vulnerabilities | Red Hat | NVD | GitHub advisories | Metasploit exploit modules | Exploit-DB | Write-ups |
|---|---|---|---|---|---|---|---|
| Cvss | not said | cvss3_score | cve.metrics.cvssMetricV31[].cvssData.baseScore | cvss.score | not said | not said | not said |
| Exploited | const:yes | not said | not said | not said | not said | not said | not said |
| Severity | not said | severity | not said | severity | not said | not said | not said |
Everything else the sources say is shown side by side, and not compared.
Found
1–25 of 1,733| Thing | Kind | Severity | Cvss | Date |
|---|---|---|---|---|
| Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102489 · CISA Known Exploited Vulnerabilities, NVD, GitHub advisories | vulnerability 3 | critical | 9.8 | 2026-09-30 |
| Zammad GmbH Zammad Improper Privilege Management Vulnerability CVE-2026-102490 · CISA Known Exploited Vulnerabilities, NVD, GitHub advisories | vulnerability 3 | critical | 9.8 | 2026-09-30 |
| Fortinet FortiMail Path Traversal Vulnerability CVE-2026-104286 · CISA Known Exploited Vulnerabilities, NVD, GitHub advisories | vulnerability 3 | critical | 9.8 | 2026-10-01 |
| Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CVE-2026-76504 · CISA Known Exploited Vulnerabilities, NVD, GitHub advisories | vulnerability 3 | critical | 9.8 | 2026-09-30 |
| Apple Multiple Products Out-of-Bounds Write Vulnerability CVE-2026-86950 · CISA Known Exploited Vulnerabilities, NVD, GitHub advisories | vulnerability 3 | high | 8.8 | 2026-09-28 |
| Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88771 · CISA Known Exploited Vulnerabilities, NVD, GitHub advisories | vulnerability 3 | critical | 9.8 | 2026-09-27 |
| Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88772 · CISA Known Exploited Vulnerabilities, NVD, GitHub advisories | vulnerability 3 | critical | 8.1 | 2026-09-27 |
| Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CVE-2026-67279 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 6.5 | 2026-09-05 |
| Microsoft SharePoint Code Injection Vulnerability CVE-2026-65660 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 8.8 | 2026-08-11 |
| WordPress Core Remote File Inclusion Vulnerability CVE-2026-87902 · CISA Known Exploited Vulnerabilities, NVD, Exploit-DB | vulnerability 2 exploit 1 | — | 8.1 | 2026-09-22 |
| WSO2 Multiple Products Path Traversal Vulnerability CVE-2026-5430 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 10 | 2026-08-06 |
| Adobe Commerce and Magento Incorrect Authorization Vulnerability CVE-2026-71362 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 9.1 | 2026-08-11 |
| Check Point Multiple Products Path Traversal Vulnerability CVE-2026-93616 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 9.8 | 2026-09-22 |
| F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 9.8 | 2026-09-22 |
| Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CVE-2026-93952 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 10 | 2026-09-22 |
| Check Point Multiple Products Improper Certificate Validation Vulnerability CVE-2026-85102 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 9.8 | 2026-09-09 |
| Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CVE-2026-7273 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 8.8 | 2026-06-16 |
| Linux Kernel Race Condition Vulnerability CVE-2025-39964 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | medium | 7.3 / 7.8 | 2025-10-13 |
| Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CVE-2025-39682 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | medium | 7 / 9.8 | 2025-09-05 |
| Linux Kernel Out-of-Bounds Write Vulnerability CVE-2026-53266 · CISA Known Exploited Vulnerabilities, Red Hat, NVD | vulnerability 3 | high | 7.5 / 8.8 | 2026-06-01 |
| Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CVE-2026-76460 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 10 | 2026-09-16 |
| Acronis Backup Incorrect Default Permissions Vulnerability CVE-2026-87886 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | — | 2026-09-16 |
| Google Pixel Improper Authorization Vulnerability CVE-2026-58704 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 8.8 | 2026-09-15 |
| Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 9.8 | 2026-09-14 |
| ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability CVE-2026-84869 · CISA Known Exploited Vulnerabilities, NVD | vulnerability 2 | — | 9.9 | 2026-09-08 |
Facets
Source 99745 of 99745 claims
zetlyn/cve-exploitdb46698
zetlyn/cve-redhat22765
zetlyn/cve-nvd19666
zetlyn/cve-ghsa6175
zetlyn/cve-kev1733
Exploited 1733 of 99745 claims
yes1733
Sources
CISA Known Exploited Vulnerabilities primary
The only source that says a vulnerability is being exploited right now.
vulnerability · current1733
Red Hat high
Its own severity, and the packages it tracks a vulnerability in.
vulnerability · current22765
NVD high
The CVSS baseline, and an anchor for CVEs the other members never reach.
vulnerability · current19666
GitHub advisories high
The ecosystem packages no distribution ships.
vulnerability · failing6175
Metasploit exploit modules normal
Whether a module exists for the tool an attacker actually runs.
exploit · current2698
Exploit-DB normal
Whether working code exists at all, which is a different question from how severe it is.
exploit · current46698
Write-ups normal
The prose that explains a vulnerability after the advisories have stopped.
article · current10