Archive

14 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /14 June 2026 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.1

CVE-2026-42897 Exploited Public exploit EPSS 71%

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14

May 14, 2026
KEV May 15, 2026
Critical 10.0

CVE-2026-20182 Exploited Public exploit EPSS 91%

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The secti…

Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices

May 14, 2026
KEV May 14, 2026