Rising exploitation

Largest rise in EPSS1 Nov 2026 to 8 Nov 2026, in percentage points

1. CVE-2026-75650

   Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

   EPSS 3.9% → 99.4% · Adobe · Adobe Commerce

   +95.4ExploitedCritical10.0
2. CVE-2026-59310

   vCenter directory-traversal vulnerability

   EPSS 2.6% → 61.7% · VMware · Cloud Foundation

   +59.1ExploitedCritical9.8
3. CVE-2026-102764

   Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

   EPSS 18.9% → 78.0% · BeyondTrust · Remote Support

   +59.0ExploitedCritical9.3
4. CVE-2026-97229

   Integer Overflow or Wraparound in GitLab

   EPSS 27.3% → 65.2% · GitLab · GitLab

   +37.9ExploitedCritical10.0
5. CVE-2026-102489

   Undisclosed RCE in Zammad v6.3 and higher

   EPSS 22.5% → 49.9% · Zammad GmbH · Zammad

   +27.4ExploitedHigh8.7
6. CVE-2025-23200

   Stored XSS-LibreNMS-Misc Section in librenms

   EPSS 31.6% → 49.3% · librenms · librenms

   +17.7Medium4.6
7. CVE-2026-77690

   Command injection vulnerability

   EPSS 0.00% → 15.6% · Zohocorp · ManageEngine Key Manager Plus

   +15.6High8.8
8. CVE-2026-4480

   Samba: samba: remote code execution in printing subsystem via unescaped job description

   EPSS 13.9% → 28.7% · Red Hat · Red Hat Enterprise Linux 10

   +14.8Critical9.0
9. CVE-2026-57827

   Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12

   EPSS 2.3% → 16.9% · rsjoomla.com · rsjoomla.com RSFiles extension for Joomla

   +14.5Critical10.0
10. CVE-2026-8451

    Insufficient input validation leading to memory overread

    EPSS 0.50% → 14.2% · NetScaler · ADC

    +13.7High8.8
11. CVE-2023-41425

    Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the…

    EPSS 54.3% → 66.0%

    +11.7Medium6.1
12. CVE-2026-76461

    Cisco Secure Email Gateway SQL Injection Vulnerability

    EPSS 29.5% → 40.2% · Cisco · Cisco Secure Email

    +10.6ExploitedCritical9.8
13. CVE-2026-96652

    Plex Media Server SSRF

    EPSS 1.8% → 11.9% · Plex · Media Server

    +10.1ExploitedMedium5.3
14. CVE-2019-6446

    An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a…

    EPSS 17.5% → 27.3%

    +9.7Critical9.8
15. CVE-2009-1936

    _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to…

    EPSS 42.2% → 51.9%

    +9.7Critical9.8
16. CVE-2026-96655

    Plex Media Server arbitrary-host SSRF

    EPSS 1.6% → 10.7% · Plex · Media Server

    +9.1ExploitedMedium5.3
17. CVE-2015-6420

    Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and…

    EPSS 15.2% → 24.2%

    +9.0Critical9.8
18. CVE-2024-47949

    In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

    EPSS 23.5% → 32.1% · JetBrains · TeamCity

    +8.7Medium4.9
19. CVE-2009-1960

    inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary…

    EPSS 23.2% → 31.7%

    +8.6High9.3
20. CVE-2008-4824

    Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via…

    EPSS 13.3% → 21.1%

    +7.9High9.3
21. CVE-2026-49373

    In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings

    EPSS 24.9% → 32.7% · JetBrains · TeamCity

    +7.8High7.1
22. CVE-2025-41244

    VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

    EPSS 8.6% → 16.4% · VMware · VCF operations

    +7.7ExploitedHigh7.8
23. CVE-2025-54948

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute…

    EPSS 25.4% → 32.9% · Trend Micro, Inc. · Trend Micro Apex One

    +7.5ExploitedCritical9.4
24. CVE-2024-2511

    Unbounded memory growth with session handling in TLSv1.3

    EPSS 52.4% → 59.3% · OpenSSL · OpenSSL

    +6.9Medium5.9
25. CVE-2012-1461

    The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus…

    EPSS 91.7% → 98.2%

    +6.4Medium4.3
26. CVE-2024-52012

    Apache Solr: Configset upload on Windows allows arbitrary path write-access

    EPSS 40.9% → 47.1% · Apache Software Foundation · Apache Solr

    +6.2Medium5.4
27. CVE-2025-58434

    Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

    EPSS 76.4% → 82.6% · FlowiseAI · Flowise

    +6.1Critical9.8
28. CVE-2017-7309

    A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code…

    EPSS 57.3% → 63.3%

    +6.0Medium4.8
29. CVE-2009-4623

    Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the…

    EPSS 9.8% → 15.8%

    +6.0High7.5
30. CVE-2025-54987

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute…

    EPSS 21.5% → 27.3% · Trend Micro, Inc. · Trend Micro Apex One

    +5.8Critical9.4
31. CVE-2026-121943

    Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

    EPSS 0.00% → 5.6% · irontec · sngrep

    +5.6Medium6.3
32. CVE-2026-105133

    Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

    EPSS 79.5% → 84.5% · Ahsay · AhsayCBS

    +5.0ExploitedMedium6.9
33. CVE-2026-73570

    A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP…

    EPSS 71.7% → 76.6% · Zimbra · Collaboration

    +5.0ExploitedHigh8.9
34. CVE-2025-53417

    File Parsing Deserialization of Untrusted Data in DTM Soft

    EPSS 15.4% → 20.3% · Delta Electronics · DIAView

    +4.9Critical9.3
35. CVE-2020-5260

    malicious URLs may cause Git to present stored credentials to the wrong server

    EPSS 10.0% → 14.9% · git · git

    +4.9Critical9.3
36. CVE-2020-5792

    Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and…

    EPSS 58.8% → 63.5% · Nagios XI

    +4.8High7.2
37. CVE-2026-7873

    Code Injection Vulnerability in Code Validation Endpoint

    EPSS 1.6% → 6.2% · IBM · Langflow OSS

    +4.7Critical9.9
38. CVE-2023-20048

    A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute…

    EPSS 16.2% → 20.9% · Cisco · Cisco Firepower Management Center

    +4.6Critical9.9
39. CVE-2023-1718

    Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

    EPSS 24.1% → 28.7% · Bitrix24 · Bitrix24

    +4.6High7.5
40. CVE-2025-24367

    Cacti allows Arbitrary File Creation leading to RCE

    EPSS 54.3% → 58.8% · Cacti · cacti

    +4.6High8.7
41. CVE-2026-43499

    rtmutex: Use waiter::task instead of current in remove_waiter()

    EPSS 0.89% → 5.4% · Linux · Linux

    +4.5High7.8
42. CVE-2026-28318

    SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

    EPSS 43.7% → 48.0% · SolarWinds · Serv-U

    +4.3ExploitedHigh7.5
43. CVE-2015-3224

    request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a…

    EPSS 44.7% → 48.8%

    +4.1Medium4.3
44. CVE-2026-119742

    Nagios XI < 2026R2 OS Command Injection via mibs.php

    EPSS 0.00% → 4.1% · Nagios Enterprises, LLC · Nagios XI

    +4.1High8.6
45. CVE-2026-76519

    Cisco Secure Email Gateway Arbitrary File Write Vulnerability

    EPSS 2.2% → 6.2% · Cisco · Cisco Secure Email

    +4.1ExploitedCritical9.8
46. CVE-2017-9445

    In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server…

    EPSS 54.8% → 58.8%

    +4.0High7.5
47. CVE-2026-1357

    Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

    EPSS 35.1% → 39.0% · wpvividplugins · WPvivid — Backup, Migration & Staging

    +3.9Critical9.8
48. CVE-2015-9406

    Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files…

    EPSS 55.0% → 58.9%

    +3.9High7.5
49. CVE-2017-9735

    Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing…

    EPSS 5.8% → 9.6%

    +3.8High7.5
50. CVE-2026-20133

    A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This…

    EPSS 31.5% → 35.3% · Cisco · Cisco Catalyst SD-WAN Manager

    +3.8ExploitedMedium6.5