Vulnerabilities
20
Total Vulns
2
Critical
6
High
9
Open
4
In Progress
14
Patched (30d)
9days
Avg Remediation
4
Known Exploits
Last scan: 2026-10-10 10:00
Next scan: 2026-10-12 11:00
20 vulnerabilities found
| CVE | Vulnerability | Scope | Severity | CVSS | Affected Asset | Hosts | Status | Exploitability | Discovered | Last Scan |
|---|---|---|---|---|---|---|---|---|---|---|
CVE-2025-44891 |
Apache Log4j Deserialization RCE | External | Critical | 10 | Application Server | 6 | Open | Known | 2026-08-17 | 2026-10-09 |
CVE-2026-21413 |
Microsoft Exchange Server Remote Code Execution | External | Critical | 9.8 | Exchange Server | 6 | Patched | Known | 2026-09-27 | 2026-10-10 |
CVE-2026-0217 |
OpenSSL Buffer Overflow in TLS Handshake | External | Critical | 9.1 | Web Server | 2 | Open | Known | 2026-09-03 | 2026-10-11 |
CVE-2026-1052 |
Windows Print Spooler Privilege Escalation | Internal | High | 8.4 | Windows Workstations | 5 | In Progress | Theoretical | 2026-09-14 | 2026-10-11 |
CVE-2025-38221 |
Cisco ASA VPN Authentication Bypass | External | High | 8.1 | VPN Gateway | 1 | Open | Known | 2026-08-30 | 2026-10-11 |
CVE-2026-0089 |
SMB Relay Attack (NTLM) | Internal | High | 7.8 | Domain Controller | 5 | In Progress | Known | 2026-09-01 | 2026-10-09 |
CVE-2025-52103 |
WordPress Plugin SQL Injection | External | High | 7.5 | Web Server | 3 | Patched | Known | 2026-09-08 | 2026-10-10 |
CVE-2026-3301 |
Microsoft Office Macro RCE | Internal | Medium | 6.8 | Workstations | 5 | In Progress | Theoretical | 2026-08-28 | 2026-10-10 |
CVE-2026-1187 |
Windows Credential Guard Bypass | Internal | Medium | 6.5 | Domain Controller | 3 | Open | Theoretical | 2026-08-13 | 2026-10-11 |
CVE-2025-49007 |
jQuery XSS in Selector Parsing | External | Medium | 6.1 | Web Application | 2 | In Progress | Theoretical | 2026-08-23 | 2026-10-11 |
CVE-2026-2215 |
SSH Weak Key Exchange Algorithm | External | Medium | 5.9 | Linux Servers | 4 | Patched | Theoretical | 2026-09-19 | 2026-10-09 |
CVE-2026-0671 |
IIS HTTP/2 Rapid Reset DoS | External | Medium | 5.9 | Web Server | 6 | In Progress | Known | 2026-09-02 | 2026-10-10 |
CVE-2026-0443 |
TLS 1.0/1.1 Deprecated Protocol | External | Medium | 5.3 | Mail Server | 6 | In Progress | Known | 2026-09-25 | 2026-10-09 |
CVE-2025-61028 |
DNS Zone Transfer Allowed | External | Medium | 5.3 | DNS Server | 3 | Patched | Known | 2026-09-09 | 2026-10-11 |
CVE-2025-55014 |
SNMP Community String Exposure | Internal | Low | 4.3 | Network Switches | 2 | In Progress | Theoretical | 2026-08-24 | 2026-10-11 |
CVE-2025-70021 |
Default SNMP v2c Community String | Internal | Low | 4.3 | Network Devices | 4 | Patched | Theoretical | 2026-09-28 | 2026-10-11 |
CVE-2026-1550 |
Outdated PHP Version (8.1) | External | Low | 4 | Web Server | 2 | Patched | Known | 2026-08-26 | 2026-10-10 |
CVE-2026-0102 |
SSL Certificate Expiry Warning | External | Low | 3.7 | Load Balancer | 3 | In Progress | Known | 2026-08-15 | 2026-10-11 |
CVE-2025-48332 |
HTTP TRACE Method Enabled | External | Low | 3.1 | Web Server | 5 | In Progress | Theoretical | 2026-08-24 | 2026-10-09 |
CVE-2026-0890 |
Missing X-Frame-Options Header | External | Low | 3 | Web Application | 3 | In Progress | Theoretical | 2026-09-01 | 2026-10-11 |