See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest

Last sync 04:05 UTC 8 of 8 sources healthy

Trending intelligence

871–885 of 2198 matching entries · 3315 total · live data

Entries per page

CVEVulnerabilityCVSSUpdatedProductPoCKEV

CVE-2026-55197hermes-webui vulnerability7.117 Sep 202616:16 UTChermes-webuibefore 0.51.443 (semver)6 sourcesNoneNo CVE-2026-55196hermes-webui vulnerability9.117 Sep 202616:16 UTChermes-webuibefore 0.51.409 (semver)5 sourcesNoneNo CVE-2026-55100hashi-vault-js vulnerability8.710 Sep 202618:30 UTChashi-vault-js< 0.5.24 sourcesNoneNo CVE-2026-55040KEVMicrosoft SharePoint Weak Authentication Vulnerability0.026 Aug 202608:15 UTCSharePointSee original advisory467 sourcesVerifiedYes CVE-2026-55007Microsoft Exchange Server 2019 Cumulative Update 14 vulnerability8.19 Sep 202602:18 UTCMicrosoft Exchange Server 2019 Cumulative Update 1415.02.0.0 through before 15.02.1544.046 (custom); 15.02.0.0 through before 15.02.1748.051 (custom); 15.02.0.0 through before 15.02.2562.049 (custom)1 sourcesNoneNo CVE-2026-54874OpenSSL vulnerability7.511 Sep 202619:16 UTCOpenSSL4.0.0 through before 4.0.2 (semver); 3.6.0 through before 3.6.4 (semver); 3.5.0 through before 3.5.8 (semver); 3.4.0 through before 3.4.7 (semver); 3.0.0 through before 3.0.22 (semver); 1.1.1 through before 1.1.1zi (custom); 1.0.2 through before 1.0.2zr (custom)6 sourcesNoneNo CVE-2026-54737defaults-deep vulnerability7.310 Sep 202618:12 UTCdefaults-deep< 2.0.54 sourcesNoneNo CVE-2026-54729dssrf-js vulnerability8.710 Sep 202618:12 UTCdssrf-js< 1.0.54 sourcesNoneNo CVE-2026-54725vault-secrets-webhook vulnerability9.610 Sep 202618:12 UTCvault-secrets-webhook< 1.23.14 sourcesNoneNo CVE-2026-54722dssrf-js vulnerability8.710 Sep 202618:12 UTCdssrf-js< 1.0.45 sourcesNoneNo CVE-2026-54715goaccess vulnerability7.18 Sep 202618:51 UTCgoaccess>= 1.10.2, < 1.113 sourcesNoneNo CVE-2026-54680logging-operator vulnerability9.910 Sep 202618:12 UTClogging-operator< 6.6.04 sourcesNoneNo CVE-2026-54650openhole vulnerability8.610 Sep 202618:05 UTCopenhole< 0.1.23 sourcesNoneNo CVE-2026-54647CubeCart 6.7.4 - SQL injection0.030 Aug 202622:00 UTCUnknown productSee original advisory110 sourcesVerifiedNo CVE-2026-54646CubeCart 6.7.4 - SQL0.030 Aug 202622:00 UTCUnknown productSee original advisory110 sourcesVerifiedNo

Priority signals

Counts across the current dataset

CISA Known Exploited Vulnerability

CVE-2026-87886

Acronis Backup Incorrect Default Permissions Vulnerability

Updated 15 Sep 2026 Open intelligence

Watched vendors

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

01

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

02

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

03

Verify

Source quality, consistency, and independent references form the confidence score.