Vulnerability Intelligence.
Look up any CVE and see what matters for patching: severity, exploit likelihood, and whether attackers are already using it.
Active CVEs and advisories
Listed in a known-exploited catalog
US federal must-patch list
With an exploit-likelihood forecast
Trending Now
Vulnerabilities with the fastest-rising public discussion
- CVE-2026-99999CriticalPublic exploit
ipv4: validate checksum_start before completing checksum
- CVSS
- EPSS
- 9.3
- 0.2%
- CVE-2026-102764CriticalExploitedPublic exploit
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
- CVSS
- EPSS
- 9.3
- 1.2%
- CVE-2026-76519CriticalExploitedPublic exploit
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
- CVSS
- EPSS
- 9.8
- 1.6%
- CVE-2026-96951HighExploitedPublic exploit
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- CVSS
- EPSS
- 8.8
- 1.5%
- CVE-2026-104935HighExploitedPublic exploit
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.
- CVSS
- EPSS
- 8.6
- 26%
- CVE-2026-97229CriticalPublic exploit
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code o
- CVSS
- EPSS
- 10.0
- 0.5%
- CVE-2026-0322HighExploitedPublic exploit
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
- CVSS
- EPSS
- 8.5
- 1.2%
- CVE-2026-110447CriticalExploitedPublic exploit
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208.
- CVSS
- EPSS
- 9.2
- 1.2%
- CVE-2025-61624MediumExploitedPublic exploit
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 a
- CVSS
- EPSS
- 6.5
- 1.1%
- CVE-2026-85097CriticalExploitedPublic exploit
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
- CVSS
- EPSS
- 9.8
- 0.3%
Exploited In The Wild
Newest 10 of 20 published in the last 30 days
- CVE-2026-102764CriticalExploited
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
- CVSS
- Published
- 9.3
- Oct 15, 2026
- CVE-2026-0322HighExploited
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
- CVSS
- Published
- 8.6
- Oct 14, 2026
- CVE-2026-76519CriticalExploited
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
- CVSS
- Published
- 9.8
- Oct 14, 2026
- CVE-2026-96951HighExploited
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- CVSS
- Published
- 8.8
- Oct 13, 2026
- CVE-2026-104935HighExploited
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.
- CVSS
- Published
- 8.6
- Oct 13, 2026
- CVE-2026-21589CriticalExploited
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.
- CVSS
- Published
- 9.3
- Oct 5, 2026
- CVE-2026-105134CriticalExploited
Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
- CVSS
- Published
- 10.0
- Oct 4, 2026
- CVE-2026-105133MediumExploited
Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
- CVSS
- Published
- 6.9
- Oct 4, 2026
- CVE-2026-88779HighExploited
Vulnerability in NetScaler ADC and NetScaler Gateway.
- CVSS
- Published
- 8.7
- Oct 4, 2026
- CVE-2026-104286CriticalExploited
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow
- CVSS
- Published
- 9.8
- Oct 1, 2026
Know The Moment A New CVE Hits Your Stack.
Brandefense matches every new and exploited vulnerability against your internet-facing assets and alerts you before attackers move.
Why Vulnerability Prioritisation Matters.
Too many CVEs to patch them all
Tens of thousands of new vulnerabilities are published every year. No team patches every one, so the real skill is knowing which handful deserve this week's maintenance window.
Exploitation is what turns a bug into a breach
Only a small share of published CVEs are ever used by attackers. Those listed as exploited in the wild are the ones behind real intrusions, and they belong at the top of the queue.
Severity alone is a poor guide
A CVSS 9.8 nobody can reach may matter less than a 7.5 with public exploit code and a high EPSS forecast. Reading severity, likelihood, and exploitation together gives a far better order.
The window keeps shrinking
Popular flaws now see working exploits within days of disclosure. Watching what is trending is often the earliest warning that a vulnerability is about to be used at scale.
How The Lookup Works: 3 Steps.
- 01
Search a CVE or a product
Paste an exact id such as CVE-2024-3400, a GHSA or EUVD id, or type a product name to browse matching vulnerabilities.
- 02
Read the risk signals
See CVSS severity, the EPSS exploit forecast, known-exploited catalog listings, and whether public exploit code exists, side by side.
- 03
Find the fix
Check the affected products and versions, the patched releases, and the vendor advisories, then plan the update with confidence.
FAQ
Common Questions.
A CVE (Common Vulnerabilities and Exposures) identifier is the public name for a specific security flaw, such as CVE-2024-3400. It lets vendors, scanners, and security teams talk about the same bug without ambiguity.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days, as a probability. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
It means the flaw appears in at least one known-exploited vulnerabilities catalog, such as the CISA KEV list, because attackers have been seen using it against real targets. These are the vulnerabilities to patch first.
Trending ranks vulnerabilities by how fast public discussion about them is rising across security sources. A sudden spike is often the first sign that exploit code is circulating or that a mass-scanning campaign has started.
It shows which products and versions are affected and where fixes exist. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
From The CVE Feed To Your Own Attack Surface.
This tool explains one vulnerability at a time. The Brandefense platform matches every new and exploited CVE against the technologies running on your internet-facing assets and tells you where to patch first.
Request A Demo