Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Cybersecurity Vulnerability Intelligence: CVE, KEV, EPSS and PoC Tracking

A focused English hub for security teams tracking high-risk vulnerabilities, known exploited CVEs, exploitation probability, public exploit mappings, proof-of-concept availability, affected products and mitigation references.

Critical RCE vulnerabilities Known exploited vulnerabilities High EPSS exploitation probability Public exploit mappings CVE proof-of-concept database AI-generated PoC analysis Featured AI PoCs Reproduced vulnerabilities RCE CVE tag In-the-wild CVE tag

Vendor Vulnerability Hubs

Microsoft vulnerabilities Cisco vulnerabilities Fortinet vulnerabilities Palo Alto Networks vulnerabilities Ivanti vulnerabilities VMware vulnerabilities Apache Software Foundation vulnerabilities Linux vulnerabilities Oracle Corporation vulnerabilities Adobe vulnerabilities Apple vulnerabilities Google vulnerabilities

Recently Published Critical CVEs

12 CVEs
CVE Title CVSS Vendor Published
CVE-2026-105812 Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import - bedrock-agentcore-starter-toolkit CWE-94 9.0 aws 2026-10-06
CVE-2026-106446 Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) - handlebars.js CWE-94 9.8 handlebars-lang 2026-10-06
CVE-2026-102159 Security Advisory 0190 - CloudVision CUE CWE-306 9.8 Arista Networks 2026-10-06
CVE-2026-106445 Handlebars: JavaScript Injection via Own Property Check Bypass - handlebars.js CWE-184 9.2 handlebars-lang 2026-10-06
CVE-2026-101155 Security Advisory 0189 - CloudVision Portal CWE-22 9.1 Arista Networks 2026-10-06
CVE-2026-79805 Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager - ClearPass Policy Manager (CPPM) 9.8 Hewlett Packard Enterprise (HPE) 2026-10-06
CVE-2026-79801 Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent - ClearPass Policy Manager (CPPM) 9.8 Hewlett Packard Enterprise (HPE) 2026-10-06
CVE-2026-79798 Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface - ClearPass Policy Manager (CPPM) 9.9 Hewlett Packard Enterprise (HPE) 2026-10-06
CVE-2026-79796 Authentication Bypass Vulnerabilities in ClearPass Policy Manager - ClearPass Policy Manager (CPPM) 9.8 Hewlett Packard Enterprise (HPE) 2026-10-06
CVE-2026-76754 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager - ClearPass Policy Manager (CPPM) 9.8 Hewlett Packard Enterprise (HPE) 2026-10-06
CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface - ClearPass Policy Manager (CPPM) 9.1 Hewlett Packard Enterprise (HPE) 2026-10-06
CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager - ClearPass Policy Manager (CPPM) 9.8 Hewlett Packard Enterprise (HPE) 2026-10-06

Live Vulnerability Queues

CISA KEV Known exploited vulnerabilities prioritized by date added.
High EPSS Risk CVEs with elevated exploitation probability.
Public Exploits ExploitDB, Metasploit and Nuclei mappings.
AI PoC Analysis AI-generated proof-of-concept analysis and triage notes.

How to use this vulnerability intelligence hub

Start with KEV and EPSS when prioritizing emergency patching. Use public exploit mappings and PoC pages to understand exploit availability, then open the CVE detail page for CVSS vectors, affected versions, CWE classification, references, AI deep analysis and mitigation context.