CVE Watchtower

🔍 Filter Threats
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
Title
SeverityPoCActively ExploitedSourceDate
CVE-2026-123435 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123432 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123431 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123430 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123429 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123427 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123426 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123425 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-123424 UNKNOWN
Rejected reason: This CVE ID has been rejected as a duplicate.
UNKNOWN??????????NVD4 days ago
CVE-2026-120017 CRITICAL
SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations. A...
CRITICAL??????????NVD4 days ago
CVE-2026-120016 MEDIUM
SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data. An unauthenticated attacker co...
MEDIUM??????????NVD4 days ago
CVE-2026-120015 HIGH
SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low privileges could abuse the affected functi...
HIGH??????????NVD4 days ago
CVE-2026-120014 HIGH
SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web...
HIGH??????????NVD4 days ago
CVE-2026-120010 HIGH
SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain HTTP requests. An unauthenticate...
HIGH??????????NVD4 days ago
CVE-2026-120009 HIGH
SAP ABAP Developer Tools (AMDP Data Preview) does not perform sufficient validation and authorization checks within certain affected functionality. An...
HIGH??????????NVD4 days ago
CVE-2026-120008 HIGH
SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests. An unauthenticated user could ...
HIGH??????????NVD4 days ago
CVE-2026-109811 MEDIUM
An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due to insecure default settings. ...
MEDIUM??????????NVD4 days ago
CVE-2026-109810 MEDIUM
SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used to resolve styling resources in...
MEDIUM??????????NVD4 days ago
CVE-2026-109809 MEDIUM
SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain functionality before processing the ...
MEDIUM??????????NVD4 days ago
CVE-2026-109808 LOW
Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an authenticated attacker to invoke th...
LOW??????????NVD4 days ago
🎁14-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.