Evidence,
with context.
Explore known-exploited vulnerability records. Understand the source, the date and what the data does—and does not—tell you.
Source updated: Sep 27, 2026, 9:30 PM UTC
Successfully checked: Sep 27, 2026, 11:50 PM UTC
This snapshot is more than 36 hours old. Verify current publisher information before acting.
Open the upstream catalog ↗ · Download this snapshot (JSON) ↓
A useful signal.
Not a complete risk model.
The snapshot contains 1,728 source records. CISA catalog addition dates are not discovery, publication or first-exploitation dates. These are not Secureline discoveries or a live view of your systems.
EPSS enrichment: FIRST EPSS covers 1726 of 1728 CISA source records; score date 2026-09-27T12:00:21Z; model v2026.06.15. Missing scores are null. A forecast is distinct from vulnerability severity and your organisation's risk.
Patch availability is
not patch deployment.
The published WinRAR analysis describes exploitation before and after a patch became available. Use the source record alongside the publisher's investigation.
Explore the catalog.
Most recently added firstCitrix NetScaler Improper Input Validation Vulnerability
Citrix / NetScaler
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix / NetScaler
Microsoft SharePoint Code Injection Vulnerability
Microsoft / SharePoint
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
MikroTik / RouterOS
WordPress Core Remote File Inclusion Vulnerability
WordPress / Core
WSO2 Multiple Products Path Traversal Vulnerability
WSO2 / Multiple Products
Adobe Commerce and Magento Incorrect Authorization Vulnerability
Adobe / Commerce and Magento
Check Point Multiple Products Improper Certificate Validation Vulnerability
Check Point / Multiple Products
Check Point Multiple Products Path Traversal Vulnerability
Check Point / Multiple Products
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista / VeloCloud Orchestrator
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 / BIG-IP APM
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel / GS1900 Series Switches
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Linux / Kernel
Linux Kernel Race Condition Vulnerability
Linux / Kernel
Linux Kernel Out-of-Bounds Write Vulnerability
Linux / Kernel
Google Pixel Improper Authorization Vulnerability
Google / Pixel
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco / Identity Services Engine
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis / Backup
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco / Secure Email Gateway
JFrog Artifactory Incorrect Authorization Vulnerability
JFrog / Artifactory
JFrog Artifactory Improper Authentication Vulnerability
JFrog / Artifactory
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise / ScreenConnect
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab / Community Edition and Enterprise Edition
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik / RouterOS
Four questions.
Different evidence.
Explore vulnerability management ↗Severity: CVSS describes technical severity; no CVSS score is invented when it is absent from this snapshot.
Exploitation: KEV inclusion records CISA's evidence of exploitation. Absence from this catalog is not proof of safety.
Forecast: EPSS is a dated exploitation-probability estimate, not a guarantee or an asset-specific risk score.
Your context: Exposure, deployment, permissions and business impact still need to be assessed.
Source references: CISA KEV · FIRST EPSS