CVE Watch
Every new High and Critical vulnerability, updated automatically from NVD, FIRST EPSS and CISA’s Known Exploited Vulnerabilities list, with whether public exploit code exists. Critical CVEs and exploited Highs are also posted to X and Bluesky as they appear.
-
High CVSS 8.7 KEV EPSS 0.6%
CVE-2026-88779: Citrix NetScaler (High, CVSS 8.7)
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
-
Critical CVSS 9.5 KEV Public exploit EPSS 1.1%
CVE-2026-88771: Citrix NetScaler (Critical, CVSS 9.5)
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37…
-
High CVSS 8.6 KEV Public exploit EPSS 0.8%
CVE-2026-96656: Plex Media Server (High, CVSS 8.6)
Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode.…
-
Medium CVSS 5.3 KEV EPSS 0.5%
CVE-2026-96655: Plex Media Server (Medium, CVSS 5.3)
Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.
-
Medium CVSS 6.9 KEV EPSS 0.5%
CVE-2026-96654: Plex Media Server (Medium, CVSS 6.9)
Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters.
-
Medium CVSS 5.3 KEV Public exploit EPSS 0.5%
CVE-2026-96652: Plex Media Server (Medium, CVSS 5.3)
Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to…
-
Critical CVSS 9.4 KEV Public exploit EPSS 63.5%
CVE-2026-82078: PaperCut NG/MF (Critical, CVSS 9.4)
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against…
-
High CVSS 8.8 KEV Public exploit EPSS 85.6%
CVE-2026-81578: PaperCut NG/MF (High, CVSS 8.8)
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to…
-
High CVSS 7.8 KEV Public exploit EPSS 96.9%
CVE-2026-0257: Palo Alto Networks PAN-OS (High, CVSS 7.8)
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW…
-
Critical CVSS 10 KEV Public exploit EPSS 99.8%
CVE-2025-55182: Meta React Server Components (Critical, CVSS 10)
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from…
-
Critical CVSS 9.8 KEV Public exploit EPSS 90.4%
CVE-2024-40711: Veeam Backup & Replication (Critical, CVSS 9.8)
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).
-
Critical CVSS 9.8 KEV EPSS 18.4%
CVE-2024-40766: SonicWall SonicOS (Critical, CVSS 9.8)
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects…
-
Critical CVSS 9.1 KEV EPSS 25.5%
CVE-2023-20269: Cisco Adaptive Security Appliance and Firepower Threat Defense (Critical, CVSS 9.1)
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute…
-
High CVSS 7.5 KEV Public exploit EPSS 80.6%
CVE-2023-27532: Veeam Backup & Replication (High, CVSS 7.5)
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
-
High CVSS 7.8 KEV Public exploit EPSS 94.9%
CVE-2021-4034: Red Hat Polkit (High, CVSS 7.8)
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies.…
-
Critical CVSS 10 KEV Public exploit EPSS 100%
CVE-2021-44228: Apache Log4j2 (Critical, CVSS 10)
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related…
-
High CVSS 7.5 KEV EPSS 71.5%
CVE-2020-3259: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) (High, CVSS 7.5)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on…