773 PoCs | 119 CISA KEV

tag

Scanner

Active Directory — SPN Unicode Collision Detection Scanner (CVE-2026-25177)

CVE-2026-25177 network Patched

CVE-2026-25177networkHIGH 8.8Patched2026-08-11Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote API Access (CVE-2023-35078) KEV RW EPSS 100%

CVE-2023-35078 (Ivanti advisory; CWE-287 per NVD) network Unverified

CVE-2023-35078networkCRITICAL 9.8Unverified2026-08-09CVE-2022-40684 — FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass (vamp-forticheck Scanner) KEV RW EPSS 100%

CVE-2022-40684 network Unverified

CVE-2022-40684networkCRITICAL 9.8Unverified2026-07-31FortiOS/FortiProxy/FortiSwitchManager/FortiWeb FortiCloud SSO Authentication Bypass Detection Tool (CVE-2025-59718) KEV EPSS 69%

CVE-2025-59718 (Fortinet advisory FG-IR-25-647; related: CVE-2025-59719) network Patched

CVE-2025-59718networkCRITICAL 9.8Patched2026-07-06WordPress "List Site Contributors" Plugin Reflected XSS Scanner (CVE-2026-0594)

CVE-2026-0594 web Unverified

CVE-2026-0594webMEDIUMUnverified2026-07-05Langflow Remote Code Execution — CVE-2026-27966 EPSS 34%

CVE-2026-27966 web Patched

CVE-2026-27966webCRITICAL 9.8Patched2026-07-05