See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest

Last sync 22:05 UTC 8 of 8 sources healthy

Trending intelligence

1201–1215 of 2149 matching entries · 3248 total · live data

Entries per page

CVEVulnerabilityCVSSUpdatedProductPoCKEV

CVE-2026-25639axios vulnerability7.510 Sep 202611:17 UTCaxios>= 1.0.0, < 1.13.5; < 0.30.381 sourcesVerifiedNo CVE-2026-25574Linux kernel netfilter use-after-free7.81 Sep 202608:47 UTCLinux kernel5.10–6.8.968 sourcesCandidateNo CVE-2026-25550BarTender 2010 vulnerability9.316 Sep 202614:17 UTCBarTender 20100 through 10.1 R4 (custom); 0 through R9 (custom); 0 through R10 (custom)4 sourcesNoneNo CVE-2026-25544Payload CMS 3.72.0 - Blind SQL Injection0.031 Aug 202622:00 UTCUnknown productSee original advisory108 sourcesVerifiedNo CVE-2026-25470ACPT (Pro) - Custom Post Types Plugin for WordPress vulnerability10.014 Sep 202613:17 UTCACPT (Pro) - Custom Post Types Plugin for WordPressn/a through before 2.0.52 (custom)1 sourcesNoneNo CVE-2026-25253Exploit for Gideon CVE-2024-218879.15 Sep 202609:04 UTCUnknown productSee original advisory39 sourcesCandidateNo CVE-2026-25157Exploit for Gideon CVE-2024-218879.15 Sep 202609:04 UTCUnknown productSee original advisory39 sourcesCandidateNo CVE-2026-24842node-tar vulnerability8.27 Sep 202611:18 UTCnode-tar< 7.5.751 sourcesVerifiedNo CVE-2026-24763Exploit for Gideon CVE-2024-218879.15 Sep 202609:04 UTCUnknown productSee original advisory39 sourcesCandidateNo CVE-2026-24708Nova vulnerability8.211 Sep 202611:17 UTCNovabefore 30.2.2 (semver); 31.0.0 through before 31.2.1 (semver); 32.0.0 through before 32.1.1 (semver)9 sourcesNoneNo CVE-2026-24291Exploit for Improper Authorization in Microsoft CVE-2026-20805 CVE-2026-24291 CVE-2026-41089 CVE-2026-41096 CV10.011 Sep 202622:10 UTCUnknown productSee original advisory132 sourcesVerifiedNo CVE-2026-24110KEVWindows print service boundary error7.81 Sep 202608:31 UTCWindows Print ServiceServer 2022–20258 sourcesNoneYes CVE-2026-24061KEVGNU InetUtils Argument Injection Vulnerability9.826 Aug 202610:23 UTCInetUtilsSee original advisory2196 sourcesVerifiedYes CVE-2026-24049wheel vulnerability7.110 Sep 202611:17 UTCwheel>= 0.40.0, < 0.46.281 sourcesVerifiedNo CVE-2026-23980Exploit for CVE-2026-23980 — Authenticated error-based SQL injection in Apache Superset < 6.0.0 via sqlExpression bypass0.012 Sep 202622:00 UTCUnknown productSee original advisory39 sourcesCandidateNo

Priority signals

Counts across the current dataset

CISA Known Exploited Vulnerability

CVE-2026-87886

Acronis Backup Incorrect Default Permissions Vulnerability

Updated 15 Sep 2026 Open intelligence

Watched vendors

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

Verify

Source quality, consistency, and independent references form the confidence score.

See what became exploitable.