Rising exploitation

Largest rise in EPSS8 Nov 2026 to 9 Nov 2026, in percentage points

1. CVE-2006-6423

   Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and…

   EPSS 70.7% → 81.6%

   +10.9High10.0
2. CVE-2024-48990

   Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the…

   EPSS 21.3% → 29.2% · needrestart · needrestart

   +7.9High7.8
3. CVE-2023-32434

   An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7,…

   EPSS 51.5% → 58.2% · Apple · macOS

   +6.6ExploitedHigh7.8
4. CVE-2020-17103

   Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

   EPSS 23.8% → 29.9% · Microsoft · Windows 10 Version 1809

   +6.0High7.0
5. CVE-2013-3895

   Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka "Parameter…

   EPSS 29.9% → 34.0%

   +4.1Medium6.8
6. CVE-2025-58180

   OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload

   EPSS 22.1% → 26.1% · OctoPrint · OctoPrint

   +4.0High7.5
7. CVE-2005-0560

   Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers…

   EPSS 69.5% → 73.0%

   +3.5High7.5
8. CVE-2025-8356

   Path Traversal leading to RCE

   EPSS 19.4% → 22.7% · Xerox · FreeFlow Core

   +3.3Critical9.8
9. CVE-2025-20297

   Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

   EPSS 31.2% → 34.4% · Splunk · Splunk Enterprise

   +3.3Medium4.3
10. CVE-2025-34176

    Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information Disclosure

    EPSS 17.3% → 20.5% · Netgate · pfSense CE

    +3.2Medium5.3
11. CVE-2013-3188

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,…

    EPSS 27.4% → 30.7%

    +3.2High9.3
12. CVE-2025-34174

    Netgate pfSense CE Status_Traffic_Totals Package v2.3.2_7 Stored Cross-Site Scripting

    EPSS 14.5% → 17.3% · Netgate · pfSense CE

    +2.8Medium5.1
13. CVE-2026-124580

    Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injection

    EPSS 0.00% → 2.8% · Chengdu Feiyuxing Technology · VW2100

    +2.8Critical10.0
14. CVE-2025-34175

    Netgate pfSense CE Suricata package v7.0.8_2 Reflected Cross-Site Scripting

    EPSS 21.3% → 24.0% · Netgate · pfSense CE

    +2.7Medium5.1
15. CVE-2023-47505

    WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)

    EPSS 25.3% → 27.9% · Elementor.com · Elementor

    +2.6Medium6.5
16. CVE-2021-30461

    A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value…

    EPSS 36.6% → 39.1%

    +2.5Critical9.8
17. CVE-2024-21338

    Windows Kernel Elevation of Privilege Vulnerability

    EPSS 59.8% → 62.2% · Microsoft · Windows 10 Version 1809

    +2.4ExploitedHigh7.8
18. CVE-2026-124585

    Chengdu Feiyuxing Technology VW2100/VEC10GP Web Administration webserver add_expmac os command injection

    EPSS 0.00% → 2.2% · Chengdu Feiyuxing Technology · VW2100

    +2.2Critical9.4
19. CVE-2023-41992

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be…

    EPSS 9.5% → 11.6% · Apple · macOS

    +2.1ExploitedHigh7.8
20. CVE-2026-124577

    Intelbras SG 2404 PoE L2+ Web Management EXCU_SHELL improper authentication

    EPSS 0.00% → 2.1% · Intelbras · SG 2404 PoE L2+

    +2.1Critical9.3
21. CVE-2025-5447

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection

    EPSS 30.5% → 32.6% · Linksys · RE6500

    +2.0Medium5.3
22. CVE-2025-54918

    Windows NTLM Elevation of Privilege Vulnerability

    EPSS 25.3% → 27.2% · Microsoft · Windows 10 Version 1507

    +1.9High8.8
23. CVE-2020-9376

    D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE: This vulnerability only affects…

    EPSS 16.6% → 18.5%

    +1.9High7.5
24. CVE-2023-36874

    Windows Error Reporting Service Elevation of Privilege Vulnerability

    EPSS 42.6% → 44.4% · Microsoft · Windows 10 Version 1809

    +1.9ExploitedHigh7.8
25. CVE-2006-5581

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as…

    EPSS 36.3% → 38.2%

    +1.9High9.3
26. CVE-2024-45409

    The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector

    EPSS 10.7% → 12.5% · SAML-Toolkits · ruby-saml

    +1.8Critical10.0
27. CVE-2025-5438

    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injection

    EPSS 24.5% → 26.2% · Linksys · RE6500

    +1.7Medium5.3
28. CVE-2006-5579

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, which results in…

    EPSS 31.8% → 33.5%

    +1.7High9.3
29. CVE-2025-54897

    Microsoft SharePoint Remote Code Execution Vulnerability

    EPSS 21.7% → 23.4% · Microsoft · Microsoft SharePoint Enterprise Server 2016

    +1.7High8.8
30. CVE-2025-8355

    XXE leading to SSRF

    EPSS 9.1% → 10.7% · Xerox · FreeFlow Core

    +1.6High7.5
31. CVE-2025-38562

    ksmbd: fix null pointer dereference error in generate_encryptionkey

    EPSS 13.0% → 14.6% · Linux · Linux

    +1.6Medium5.5
32. CVE-2020-9402

    Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions…

    EPSS 22.5% → 24.0%

    +1.4High8.8
33. CVE-2019-20933

    InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an…

    EPSS 30.9% → 32.3%

    +1.4Critical9.8
34. CVE-2025-8723

    Cloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook

    EPSS 18.0% → 19.4% · mecanik · Cloudflare Image Resizing – Optimize & Accelerate Your Images

    +1.3Critical9.8
35. CVE-2024-34716

    PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

    EPSS 56.4% → 57.7% · PrestaShop · PrestaShop

    +1.3Critical9.7
36. CVE-2026-71362

    Adobe Commerce | Incorrect Authorization (CWE-863)

    EPSS 90.5% → 91.7% · Adobe · Adobe Commerce

    +1.2ExploitedCritical9.1
37. CVE-2006-5583

    Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to…

    EPSS 53.8% → 54.9%

    +1.2High10.0
38. CVE-2025-34178

    Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

    EPSS 5.5% → 6.6% · Netgate · pfSense CE

    +1.1Medium5.1
39. CVE-2022-38352

    ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability…

    EPSS 21.0% → 22.2%

    +1.1Critical9.8
40. CVE-2024-3393

    PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

    EPSS 29.1% → 30.2% · Palo Alto Networks · Cloud NGFW

    +1.1ExploitedHigh8.7
41. CVE-2023-27997

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and…

    EPSS 85.7% → 86.8% · Fortinet · FortiOS-6K7K

    +1.1ExploitedCritical9.2
42. CVE-2026-113363

    Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through…

    EPSS 0.00% → 1.1% · NEC Corporation · WebSAM WinShare

    +1.1Critical9.3
43. CVE-2025-57738

    Apache Syncope: Remote Code Execution by delegated administrators

    EPSS 23.2% → 24.2% · Apache Software Foundation · Apache Syncope

    +1.1High7.2
44. CVE-2020-9480

    In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret.…

    EPSS 29.2% → 30.2% · Apache Software Foundation · Apache Spark

    +1.0Critical9.8
45. CVE-2025-10169

    UTT 1200GW ConfigWirelessBase buffer overflow

    EPSS 7.4% → 8.3% · UTT · 1200GW

    +1.0High8.7
46. CVE-2022-31181

    Remote code execution in prestashop

    EPSS 6.7% → 7.7% · PrestaShop · PrestaShop

    +1.0Critical9.8
47. CVE-2021-38295

    Privilege escalation vulnerability when using HTML attachments

    EPSS 2.7% → 3.7% · Apache Software Foundation · Apache CouchDB

    +1.0High7.3
48. CVE-2025-54252

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    EPSS 5.6% → 6.5% · Adobe · Adobe Experience Manager

    +0.9Medium5.4
49. CVE-2025-54920

    Apache Spark: Spark History Server Code Execution Vulnerability

    EPSS 5.4% → 6.3% · Apache Software Foundation · Apache Spark

    +0.9High8.8
50. CVE-2026-15266

    Multiple Vulnerabilities in IBM Concert Software

    EPSS 0.00% → 0.88% · IBM · Concert

    +0.9Critical9.8