L51 GLOBAL CYBER INTELLIGENCE
A consolidated view of exploited vulnerabilities, technical severity, and exploitation probability based on international public sources.
Correlated public intelligence on actively exploited vulnerabilities, technical severity, and exploitation probability.
Last L51 update: —
Loading public intelligence…
L51 GLOBAL CYBER INTELLIGENCE
A consolidated view of exploited vulnerabilities, technical severity, and exploitation probability based on international public sources.
Correlated public intelligence on actively exploited vulnerabilities, technical severity, and exploitation probability.
Last L51 update:
L51 indicators for the KEV universe enriched in this update.
Last L51 update:
KEV processed
100
Critical
55
High
36
High EPSS
22
Ransomware known
3
CISA KEV catalog entries, in L51 correlation order.
CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
9.3CRITICALEPSS 2.8%
Exploited
CVE-2026-105134Ahsay AhsayCBS Command Injection Vulnerability
9.3CRITICALEPSS 3.2%
Exploited
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8CRITICALEPSS 1.7%
Exploited
CVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability
8.6HIGHEPSS 1.1%
Exploited
CVE-2026-105133Ahsay AhsayCBS Improper Authentication Vulnerability
5.5MEDIUMEPSS 0.7%
Exploited
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
8.6HIGHEPSS 26%
Exploited
Critical CVSS from NIST NVD when the metric is published.
CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
9.3CRITICALEPSS 2.8%
Exploited
CVE-2026-105134Ahsay AhsayCBS Command Injection Vulnerability
9.3CRITICALEPSS 3.2%
Exploited
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8CRITICALEPSS 1.7%
Exploited
CVE-2015-3306ProFTPD Improper Access Control Vulnerability
10.0CRITICALEPSS 99.5%
Exploited
CVE-2021-3199ONLYOFFICE Docs Server Path Traversal Vulnerability
9.8CRITICALEPSS 19.4%
Exploited
CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability
9.4CRITICALEPSS 1.3%
Exploited
FIRST EPSS exploitation probability of 50% or higher.
CVE-2015-3306ProFTPD Improper Access Control Vulnerability
10.0CRITICALEPSS 99.5%
Exploited
CVE-2015-5477ISC BIND Data Processing Errors Vulnerability
7.5HIGHEPSS 99.4%
Exploited
CVE-2016-3081Apache Struts Command Injection Vulnerability
8.1HIGHEPSS 96.1%
Exploited
CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability
9.1CRITICALEPSS 87.5%
Exploited
CVE-2026-93616Check Point Multiple Products Path Traversal Vulnerability
9.8CRITICALEPSS 75.9%
Exploited
CVE-2026-85102Check Point Multiple Products Improper Certificate Validation Vulnerability
9.8CRITICALEPSS 50.4%
Exploited
Known ransomware campaign use, according to CISA KEV.
CVE-2026-59310Broadcom VMware vCenter Path Traversal Vulnerability
9.8CRITICALEPSS 2.6%
Exploited
CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
9.8CRITICALEPSS 89.6%
Exploited
CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
5.3MEDIUMEPSS 35.1%
Exploited
Correlated listing. Explore with local search, filters, and sort. Initial order is L51 Priority, then KEV date.
Showing 100 of 100 vulnerabilities
| CVE | Vendor | Product | CVSS | EPSS | KEV | Ransomware | KEV date | Sources |
|---|---|---|---|---|---|---|---|---|
CVE-2026-21589 | Atlassian | Multiple Products | 9.3CRITICAL | 2.8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-105134 | Ahsay | AhsayCBS | 9.3CRITICAL | 3.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-76519 | Cisco | Secure Email Gateway | 9.8CRITICAL | 1.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-0322 | Palo Alto Networks | PAN-OS | 8.6HIGH | 1.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-105133 | Ahsay | AhsayCBS | 5.5MEDIUM | 0.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-104935 | Ivanti | Connect Secure | 8.6HIGH | 26% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-96951 | Microsoft | Windows | 8.8HIGH | 1.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2015-3306 | ProFTPD | ProFTPD | 10.0CRITICAL | 99.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2015-5477 | ISC | BIND | 7.5HIGH | 99.4% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2016-3081 | Apache | Struts | 8.1HIGH | 96.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2021-3199 | ONLYOFFICE | Docs | 9.8CRITICAL | 19.4% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2023-22894 | Strapi | Strapi | 4.9MEDIUM | 3.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-88779 | Citrix | NetScaler | 8.7HIGH | 0.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-102489 | Zammad GmbH | Zammad | 9.4CRITICAL | 1.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-102490 | Zammad GmbH | Zammad | 9.4CRITICAL | 0.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-104286 | Fortinet | FortiMail | 9.8CRITICAL | 2.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-76504 | Cisco | Catalyst SD-WAN Manager | 9.8CRITICAL | 1.8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-86950 | Apple | Multiple Products | 8.8HIGH | 1.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-88772 | Citrix | NetScaler | 9.5CRITICAL | 1.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-88771 | Citrix | NetScaler | 9.5CRITICAL | 1.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-87902 | WordPress | Core | 8.1HIGH | 40% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-65660 | Microsoft | SharePoint | 8.8HIGH | 2.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-67279 | MikroTik | RouterOS | 6.9MEDIUM | 1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-71362 | Adobe | Commerce and Magento | 9.1CRITICAL | 87.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-5430 | WSO2 | Multiple Products | 10.0CRITICAL | 0.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-93616 | Check Point | Multiple Products | 9.8CRITICAL | 75.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-85102 | Check Point | Multiple Products | 9.8CRITICAL | 50.4% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-94127 | F5 | BIG-IP APM | 9.3CRITICAL | 2.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-93952 | Arista | VeloCloud Orchestrator | 9.5CRITICAL | 1.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-7273 | Zyxel | GS1900 Series Switches | 8.8HIGH | 2.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2025-39682 | Linux | Kernel | 9.8CRITICAL | 2.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2025-39964 | Linux | Kernel | 5.5MEDIUM | 1.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-53266 | Linux | Kernel | 8.8HIGH | 0.8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-76460 | Cisco | Identity Services Engine | 10.0CRITICAL | 14% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-58704 | Pixel | 8.8HIGH | 0.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | ||
CVE-2026-87886 | Acronis | Backup | 7.8HIGH | 0.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-76461 | Cisco | Secure Email Gateway | 9.8CRITICAL | 29.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-85706 | GitLab | Community Edition and Enterprise Edition | 10.0CRITICAL | 93% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-42018 | JFrog | Artifactory | 7.5HIGH | 9.8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-42016 | JFrog | Artifactory | 8.8HIGH | 8.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-84869 | ConnectWise | ScreenConnect | 9.9CRITICAL | 0.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-86060 | MikroTik | RouterOS | 9.2CRITICAL | 6.4% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-67277 | MikroTik | RouterOS | 8.8HIGH | 1.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-20079 | Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 10.0CRITICAL | 88.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-19490 | Citrix | NetScaler | 9.3CRITICAL | 23.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2025-25249 | Fortinet | Multiple Products | 9.8CRITICAL | 3.8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-87491 | Chromium V8 | 8.8HIGH | 3.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | ||
CVE-2026-86218 | N-able | N-central | 10.0CRITICAL | 13.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-75650 | Adobe | Commerce and Magento | 10.0CRITICAL | 3.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-85880 | Microsoft | Windows | 7.8HIGH | 3.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-81963 | Microsoft | Windows | 7.8HIGH | 0.4% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-85046 | Chromium V8 | 8.8HIGH | 48.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | ||
CVE-2026-9586 | Sangoma | Switchvox | 9.3CRITICAL | 19% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-82329 | JFrog | Artifactory | 9.8CRITICAL | 14.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-83549 | SonicWall | SMA1000 Appliances | 7.8HIGH | 9.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-83548 | SonicWall | SMA1000 Appliances | 10.0CRITICAL | 8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-48710 | Kludex | Starlette | 6.5MEDIUM | 7.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-49869 | Kestra | Kestra OSS | 10.0CRITICAL | 2.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-59822 | BerriAI | LiteLLM | 8.8HIGH | 0.8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-81578 | PaperCut | NG/MF | 8.8HIGH | 85.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-82078 | PaperCut | NG/MF | 9.4CRITICAL | 63.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2023-49105 | ownCloud | ownCloud | 9.8CRITICAL | 42.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-53362 | Linux | Kernel | 7.8HIGH | 0.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-66384 | JFrog | Artifactory | 5.3MEDIUM | 0.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2021-23758 | Ajax.NET Professional | Ajax.NET Professional | 9.8CRITICAL | 82.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2019-1068 | Microsoft | SQL Server | 8.8HIGH | 57.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2022-0995 | Linux | Kernel | 7.8HIGH | 8.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2015-3246 | Red Hat | Libuser | 7.4HIGH | 8.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2015-5287 | Red Hat | Automatic Bug Reporting Tool | 7.8HIGH | 5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-8452 | Citrix | NetScaler ADC and NetScaler Gateway | 8.8HIGH | 1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-60004 | Gitea | Gitea | 9.8CRITICAL | 24% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-21962 | Oracle | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 10.0CRITICAL | 73.2% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-73570 | Synacor | Zimbra Collaboration Suite (ZCS) | 8.9HIGH | 71.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-72530 | TrueConf | Server | 9.5CRITICAL | 1.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-72529 | TrueConf | Server | 9.3CRITICAL | 1.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-64849 | MLflow | MLflow | 9.3CRITICAL | 9.8% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-55040 | Microsoft | SharePoint | 9.1CRITICAL | 69.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-59310 | Broadcom | VMware vCenter | 9.8CRITICAL | 2.6% | Exploited | Known | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-65400 | Apple | macOS | 9.8CRITICAL | 1.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-33824 | Microsoft | Internet Key Exchange (IKE) Service Extensions | 9.8CRITICAL | 1.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2025-62593 | Ray-Project | Ray | 9.4CRITICAL | 62.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-72898 | Metabase | Metabase | 10.0CRITICAL | 97.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-20349 | Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 8.6HIGH | 1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-68820 | Microsoft | Windows Ancillary Function Driver for WinSock | 7.0HIGH | 0.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-8037 | Progress | LoadMaster | 9.8CRITICAL | 77.4% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-63077 | JetBrains | TeamCity | 9.8CRITICAL | 89.6% | Exploited | Known | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-9198 | IBM | Langflow | 9.8CRITICAL | 28.7% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-18556 | N-able | N-central | 8.2HIGH | 7.9% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-34486 | Apache | Tomcat | 7.5HIGH | 6.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-18577 | N-able | N-central | 8.2HIGH | 14.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-20316 | Cisco | Secure Firewall Management Center (FMC) | 5.3MEDIUM | 35.1% | Exploited | Known | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2025-68686 | Fortinet | FortiOS | 5.9MEDIUM | 29.5% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-16812 | Arista | VeloCloud Orchestrator | 10.0CRITICAL | 1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-16232 | Check Point | SmartConsole | 9.3CRITICAL | 78% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-50522CERT-EU | Microsoft | SharePoint | 9.8CRITICAL | 3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-0770 | Langflow | Langflow | 9.8CRITICAL | 63% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-63030 | WordPress | Core | 9.8CRITICAL | 10.6% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-60137 | WordPress | Core | 5.9MEDIUM | 5.3% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2021-27137 | DD-WRT | DD-WRT | 8.1HIGH | 4% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS | |
CVE-2026-25089 | Fortinet | FortiSandbox | 9.8CRITICAL | 76.1% | Exploited | — | CISA KEV · NIST NVD · FIRST EPSS |
Status of each origin in this L51 update.
L51 correlates these sources to support analysis. The data retain their original origin and meaning.