See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest

Last sync 04:05 UTC 8 of 8 sources healthy

Trending intelligence

1111–1125 of 2198 matching entries · 3315 total · live data

Entries per page

CVEVulnerabilityCVSSUpdatedProductPoCKEV

CVE-2026-42044axios vulnerability6.510 Sep 202611:20 UTCaxios>= 1.0.0, < 1.15.275 sourcesVerifiedNo CVE-2026-42043axios vulnerability7.210 Sep 202611:20 UTCaxios>= 1.0.0, < 1.15.1; < 0.31.174 sourcesVerifiedNo CVE-2026-42041axios vulnerability4.810 Sep 202611:20 UTCaxios>= 1.0.0, < 1.15.1; < 0.31.174 sourcesVerifiedNo CVE-2026-42039axios vulnerability6.910 Sep 202611:20 UTCaxios>= 1.0.0, < 1.15.1; < 0.31.176 sourcesVerifiedNo CVE-2026-42033axios vulnerability7.410 Sep 202611:20 UTCaxios>= 1.0.0, < 1.15.1; < 0.31.174 sourcesVerifiedNo CVE-2026-42018KEVartifactory vulnerability7.512 Sep 202602:16 UTCartifactorybefore 7.111.20 (custom); 7.117.0 through before 7.117.27 (custom); 7.125.0 through before 7.125.19 (custom); 7.133.0 through before 7.133.28 (custom); 7.146.0 through before 7.146.8 (custom)29 sourcesNoneYes CVE-2026-42016KEVartifactory vulnerability8.112 Sep 202602:16 UTCartifactorybefore 7.133.11 (custom)29 sourcesNoneYes CVE-2026-42010Red Hat Enterprise Linux 10 vulnerability7.118 Sep 202611:18 UTCRed Hat Enterprise Linux 10060 sourcesNoneNo CVE-2026-42009Red Hat Enterprise Linux 10 vulnerability7.518 Sep 202611:18 UTCRed Hat Enterprise Linux 10064 sourcesNoneNo CVE-2026-41940KEVWebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability9.826 Aug 202610:03 UTCcPanel & WHM and WP2 (WordPress Squared)See original advisory1580 sourcesVerifiedYes CVE-2026-41674xmldom vulnerability8.710 Sep 202611:20 UTCxmldomxmldom <= 0.6.0; @xmldom/xmldom >= 0.9.0, < 0.9.10; @xmldom/xmldom < 0.8.1312 sourcesNoneNo CVE-2026-41605Apache Thrift vulnerability7.37 Sep 202611:19 UTCApache Thriftbefore 0.23.0 (semver)12 sourcesNoneNo CVE-2026-41604Apache Thrift vulnerability8.27 Sep 202611:19 UTCApache Thriftbefore 0.23.0 (semver)12 sourcesNoneNo CVE-2026-41602Apache Thrift vulnerability7.57 Sep 202611:19 UTCApache Thriftbefore 0.23.0 (semver)15 sourcesNoneNo CVE-2026-41456Bludit CMS 3.20.0 - Reflected Cross-Site Scripting0.01 Sep 202622:00 UTCUnknown productSee original advisory112 sourcesVerifiedNo

Priority signals

Counts across the current dataset

CISA Known Exploited Vulnerability

CVE-2026-87886

Acronis Backup Incorrect Default Permissions Vulnerability

Updated 15 Sep 2026 Open intelligence

Watched vendors

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

Verify

Source quality, consistency, and independent references form the confidence score.

See what became exploitable.