CVEPULSE.ORG

The Human-in-the-Loop CVE Meter

TRACKED: 1749
RANSOMWARE: 361
LAST INGEST: 3h ago

PINNED

ProFTPD Improper Access Control — exploitable from the network with no login

Anyone running ProFTPD. Federal agencies have until October 11, 2026 to patch it.

CVE-2015-3306

90CRITICAL

PULSE / 100

020406080100

Cancel your weekend.HAND-TUNED

Read the Write-Up

MORE WRITE-UPS

84Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel — exploitable from the network with no loginCVE-2026-20079 · Anyone running Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management. Federal agencies have until September 12, 2026 to patch it.
89Metabase SQL Injection — exploitable from the network with no loginCVE-2026-72898 · Anyone running Metabase. CISA's patch deadline for federal agencies passed on August 14, 2026.
86Ajax.NET Professional Deserialization of Untrusted Data — exploitable from the network with no loginCVE-2021-23758 · Anyone running Ajax.NET Professional. Federal agencies have until September 9, 2026 to patch it.
90Progress LoadMaster Command Injection — exploitable from the network with no loginCVE-2026-8037 · Anyone running Progress LoadMaster. CISA's patch deadline for federal agencies passed on August 10, 2026.

RECENTLY ADDED TO KEV — 70 AND ABOVE

Confirmed exploited in the wild, newest first. Each row opens the vendor's advisory. How the score works →