Cybersecurity Vulnerability Intelligence: CVE, KEV, EPSS and PoC Tracking

A focused English hub for security teams tracking high-risk vulnerabilities, known exploited CVEs, exploitation probability, public exploit mappings, proof-of-concept availability, affected products and mitigation references.

Critical RCE vulnerabilities Known exploited vulnerabilities High EPSS exploitation probability Public exploit mappings CVE proof-of-concept database AI-generated PoC analysis Featured AI PoCs Reproduced vulnerabilities RCE CVE tag In-the-wild CVE tag

Vendor Vulnerability Hubs

Microsoft vulnerabilities Cisco vulnerabilities Fortinet vulnerabilities Palo Alto Networks vulnerabilities Ivanti vulnerabilities VMware vulnerabilities Apache Software Foundation vulnerabilities Linux vulnerabilities Oracle Corporation vulnerabilities Adobe vulnerabilities Apple vulnerabilities Google vulnerabilities

Recently Published Critical CVEs

12 CVEs

CVE	Title	CVSS	Vendor	Published
CVE-2025-12999	CVE-2025-12999 - Eclipse Open VSX	9.1	Eclipse Foundation	2026-09-21
CVE-2026-94101	Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow - NBR200V2 CWE-120	9.9	Netcore	2026-09-21
CVE-2026-94100	Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow - NBR200V2 CWE-120	9.9	Netcore	2026-09-21
CVE-2026-94099	Netcore NBR200V2 Backup Restore restore.cgi command injection - NBR200V2 CWE-77	9.9	Netcore	2026-09-21
CVE-2026-94098	Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection - NBR200V2 CWE-77	9.1	Netcore	2026-09-21
CVE-2026-94097	Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection - NBR200V2 CWE-77	10.0	Netcore	2026-09-20
CVE-2026-94096	Netcore NBR200V2 LAN IP Configuration network_tools command injection - NBR200V2 CWE-77	9.9	Netcore	2026-09-20
CVE-2026-94095	Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection - NBR200V2 CWE-77	9.9	Netcore	2026-09-20
CVE-2026-94089	D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow - DIR-868L CWE-121	10.0	D-Link	2026-09-20
CVE-2026-88857	Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - OrdaSoft Joomla Gallery free extension for Joomla CWE-434	9.4	OrdaSoft.com	2026-09-20
CVE-2026-88854	Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - OrdaSoft Joomla Gallery free extension for Joomla CWE-89	9.3	OrdaSoft.com	2026-09-20
CVE-2026-88856	Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - OrdaSoft Joomla Gallery free extension for Joomla CWE-94	9.4	OrdaSoft.com	2026-09-20

Live Vulnerability Queues

CISA KEV Known exploited vulnerabilities prioritized by date added.

High EPSS Risk CVEs with elevated exploitation probability.

Public Exploits ExploitDB, Metasploit and Nuclei mappings.

AI PoC Analysis AI-generated proof-of-concept analysis and triage notes.

How to use this vulnerability intelligence hub

Start with KEV and EPSS when prioritizing emergency patching. Use public exploit mappings and PoC pages to understand exploit availability, then open the CVE detail page for CVSS vectors, affected versions, CWE classification, references, AI deep analysis and mitigation context.