| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2026-12569 Ransomware
PTC Windchill and FlexPLM Improper Input Validation Vulnerability |
PTC · Windchill and FlexPLM | Jun 25, 2026 | Jun 28, 2026 | 46.0% | — |
| CVE-2026-20230
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnera… |
Cisco · Unified Communications Manager | Jun 25, 2026 | Jun 28, 2026 | 88.5% | — |
| CVE-2025-67038
Lantronix EDS5000 Code Injection Vulnerability |
Lantronix · EDS5000 | Jun 23, 2026 | Jun 26, 2026 | 21.1% | — |
| CVE-2026-34908
Ubiquiti UniFi OS Improper Access Control Vulnerability |
Ubiquiti · UniFi OS | Jun 23, 2026 | Jun 26, 2026 | 88.9% | — |
| CVE-2026-34909
Ubiquiti UniFi OS Path Traversal Vulnerability |
Ubiquiti · UniFi OS | Jun 23, 2026 | Jun 26, 2026 | 69.2% | — |
| CVE-2026-34910
Ubiquiti UniFi OS Improper Input Validation Vulnerability |
Ubiquiti · UniFi OS | Jun 23, 2026 | Jun 26, 2026 | 90.0% | — |
| CVE-2026-20253
Splunk Enterprise Missing Authentication for Critical Function Vulnerability |
Splunk · Enterprise | Jun 18, 2026 | Jun 21, 2026 | 96.9% | — |
| CVE-2026-48907
Widget Factory Joomla Content Editor Improper Access Control Vulnerability |
Widget Factory · Joomla Content Editor | Jun 16, 2026 | Jun 19, 2026 | 85.4% | — |
| CVE-2026-20262
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability |
Cisco · Catalyst SD-WAN Manager | Jun 15, 2026 | Jun 29, 2026 | 29.1% | — |
| CVE-2026-54420
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability |
LiteSpeed · cPanel Plugin | Jun 15, 2026 | Jun 18, 2026 | 1.4% | — |
| CVE-2026-35273 Ransomware
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Fu… |
Oracle · PeopleSoft Enterprise PeopleTools | Jun 12, 2026 | Jun 15, 2026 | 96.7% | 1 last Sep 28 |
| CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability |
Ivanti · Sentry | Jun 11, 2026 | Jun 14, 2026 | 99.9% | — |
| CVE-2026-11645
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability |
Google · Chromium V8 | Jun 9, 2026 | Jun 23, 2026 | 2.4% | — |
| CVE-2026-20245
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerabi… |
Cisco · Catalyst SD-WAN Manager | Jun 9, 2026 | Jun 23, 2026 | 25.3% | — |
| CVE-2026-7473
Arista Extensible Operating System Incomplete Comparison with Missing Factors V… |
Arista · Extensible Operating System | Jun 9, 2026 | Jun 23, 2026 | 1.1% | — |
| CVE-2026-42271
BerriAI LiteLLM Command Injection Vulnerability |
BerriAI · LiteLLM | Jun 8, 2026 | Jun 22, 2026 | 91.4% | — |
| CVE-2026-50751 Ransomware
Check Point Security Gateway Improper Authentication Vulnerability |
Check Point · Security Gateway | Jun 8, 2026 | Jun 11, 2026 | 85.3% | — |
| CVE-2026-28318
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability |
SolarWinds · Serv-U | Jun 5, 2026 | Jun 19, 2026 | 48.0% | — |
| CVE-2026-45247
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability |
Mirasvit · Mirasvit Full Page Cache Warmer | Jun 3, 2026 | Jun 6, 2026 | 26.2% | — |
| CVE-2022-0492
Linux Kernel Improper Authentication Vulnerability |
Linux · Kernel | Jun 2, 2026 | Jun 5, 2026 | 5.5% | — |
| CVE-2025-48595
Android Framework Integer Overflow Vulnerability |
Android · Framework | Jun 2, 2026 | Jun 5, 2026 | 1.9% | — |
| CVE-2024-21182
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | Jun 1, 2026 | Jun 4, 2026 | 74.2% | — |
| CVE-2026-0257 Ransomware
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability |
Palo Alto Networks · PAN-OS | May 29, 2026 | Jun 1, 2026 | 95.6% | 1 last Nov 10 |
| CVE-2026-45321 Ransomware
TanStack Unspecified Vulnerability |
TanStack · TanStack | May 27, 2026 | Jun 10, 2026 | 3.3% | — |
| CVE-2026-48027 Ransomware
Nx Console Embedded Malicious Code Vulnerability |
Nx · Nx Console | May 27, 2026 | Jun 10, 2026 | 1.8% | — |
| CVE-2026-8398
Daemon Tools Lite Embedded Malicious Code Vulnerability |
Daemon · Daemon Tools Lite | May 27, 2026 | May 30, 2026 | 1.5% | — |
| CVE-2026-48172
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability |
LiteSpeed · cPanel Plugin | May 26, 2026 | May 29, 2026 | 17.9% | — |
| CVE-2026-9082
Drupal Core SQL Injection Vulnerability |
Drupal · Core | May 22, 2026 | May 27, 2026 | 89.4% | — |
| CVE-2025-34291
Langflow Origin Validation Error Vulnerability |
Langflow · Langflow | May 21, 2026 | Jun 4, 2026 | 93.2% | — |
| CVE-2026-34926
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability |
Trend Micro · Apex One | May 21, 2026 | Jun 4, 2026 | 13.4% | — |
| CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability |
Microsoft · Windows | May 20, 2026 | Jun 3, 2026 | 98.8% | — |
| CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability |
Microsoft · DirectX | May 20, 2026 | Jun 3, 2026 | 51.1% | — |
| CVE-2009-3459
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability |
Adobe · Acrobat and Reader | May 20, 2026 | Jun 3, 2026 | 86.5% | — |
| CVE-2010-0249
Microsoft Internet Explorer Use-After-Free Vulnerability |
Microsoft · Internet Explorer | May 20, 2026 | Jun 3, 2026 | 91.9% | — |
| CVE-2010-0806
Microsoft Internet Explorer Use-After-Free Vulnerability |
Microsoft · Internet Explorer | May 20, 2026 | Jun 3, 2026 | 82.1% | — |
| CVE-2026-41091
Microsoft Defender Link Following Vulnerability |
Microsoft · Defender | May 20, 2026 | Jun 3, 2026 | 8.2% | — |
| CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability |
Microsoft · Defender | May 20, 2026 | Jun 3, 2026 | 63.1% | — |
| CVE-2026-42897
Microsoft Exchange Server Cross-Site Scripting Vulnerability |
Microsoft · Microsoft | May 15, 2026 | May 29, 2026 | 70.7% | — |
| CVE-2026-20182
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
Cisco · Catalyst SD-WAN | May 14, 2026 | May 17, 2026 | 91.1% | — |
| CVE-2026-42208
BerriAI LiteLLM SQL Injection Vulnerability |
BerriAI · LiteLLM | May 8, 2026 | May 11, 2026 | 89.4% | — |
| CVE-2026-6973
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | May 7, 2026 | May 10, 2026 | 34.5% | — |
| CVE-2026-0300
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability |
Palo Alto Networks · PAN-OS | May 6, 2026 | May 9, 2026 | 41.7% | — |
| CVE-2026-31431
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability |
Linux · Kernel | May 1, 2026 | May 15, 2026 | 98.1% | — |
| CVE-2026-41940 Ransomware
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Cri… |
WebPros · cPanel & WHM and WP2 (WordPress Squared) | Apr 30, 2026 | May 3, 2026 | 98.5% | — |
| CVE-2024-1708 Ransomware
ConnectWise ScreenConnect Path Traversal Vulnerability |
ConnectWise · ScreenConnect | Apr 28, 2026 | May 12, 2026 | 95.4% | — |
| CVE-2026-32202
Microsoft Windows Protection Mechanism Failure Vulnerability |
Microsoft · Windows | Apr 28, 2026 | May 12, 2026 | 71.3% | — |
| CVE-2024-57726 Ransomware
SimpleHelp Missing Authorization Vulnerability |
SimpleHelp · SimpleHelp | Apr 24, 2026 | May 8, 2026 | 66.4% | — |
| CVE-2024-57728 Ransomware
SimpleHelp Path Traversal Vulnerability |
SimpleHelp · SimpleHelp | Apr 24, 2026 | May 8, 2026 | 64.5% | — |
| CVE-2024-7399
Samsung MagicINFO 9 Server Path Traversal Vulnerability |
Samsung · MagicINFO 9 Server | Apr 24, 2026 | May 8, 2026 | 91.9% | — |
| CVE-2025-29635
D-Link DIR-823X Command Injection Vulnerability |
D-Link · DIR-823X | Apr 24, 2026 | May 8, 2026 | 87.9% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.