CubePath
Sign Up

Known Exploited Vulnerabilities

The CISA KEV catalog lists 1,773 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.09. Source: sources and licenses.

CVEVulnerabilityAddedFederal due dateRansomware
CVE-2026-102895GPUStack Improper Authentication VulnerabilityGPUStack / GPUStackNov 9, 2026Nov 12, 2026
CVE-2026-116779SignalWire FreeSwitch Code Injection VulnerabilitySignalWire / FreeSwitchNov 9, 2026Nov 12, 2026
CVE-2026-123158OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityOpenBSD / OpenSSHNov 9, 2026Nov 12, 2026
CVE-2026-123218IBM Aspera Faspex Incorrect Authorization VulnerabilityIBM / Aspera FaspexNov 9, 2026Nov 12, 2026
CVE-2026-19868SonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilitySonicWall / SonicOS SSLVPNNov 6, 2026Nov 20, 2026
CVE-2024-27834Apple Multiple Products Improper Authentication VulnerabilityApple / Multiple ProductsNov 4, 2026Nov 18, 2026
CVE-2026-119977WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityWordPress / WordPress CoreNov 3, 2026Nov 6, 2026
CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityIvanti / Connect SecureOct 30, 2026Nov 2, 2026
CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityIvanti / Connect SecureOct 30, 2026Nov 13, 2026
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCisco / Secure Firewall ASA Software and Cisco Secure FTD SoftwareOct 29, 2026Nov 1, 2026
CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound VulnerabilityGitLab / Community Edition and Enterprise EditionOct 29, 2026Nov 1, 2026
CVE-2026-41709Broadcom VMWare ESX Insufficient Logging VulnerabilityBroadcom / VMware ESXOct 28, 2026Nov 11, 2026
CVE-2026-46300Linux Kernel Missing Initialization of a Variable VulnerabilityLinux / KernelOct 28, 2026Oct 31, 2026
CVE-2026-111497Google Brotli Unchecked Return Value VulnerabilityGoogle / BrotliOct 27, 2026Nov 10, 2026
CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityAdobe / Commerce and MagentoOct 27, 2026Nov 10, 2026
CVE-2026-109618PHP Memory Corruption VulnerabilityPHP Group / PHPOct 26, 2026Oct 29, 2026
CVE-2026-109619PHP Stale Internal Request-State VulnerabilityPHP Group / PHPOct 26, 2026Oct 29, 2026
CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCollabora / Collabora Online – Built-in CODE ServerOct 23, 2026Oct 26, 2026
CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection VulnerabilityArista / VeloCloud OrchestratorOct 23, 2026Oct 26, 2026
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions / SiteGuard Server EditionOct 20, 2026Oct 23, 2026
CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens / Software CenterOct 20, 2026Nov 3, 2026
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex / Media ServerOct 20, 2026Nov 3, 2026
CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityPlex / Media ServerOct 20, 2026Oct 23, 2026
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex / Media ServerOct 20, 2026Nov 3, 2026
CVE-2026-96656Plex Media Server External Control of File Name or Path VulnerabilityPlex / Media ServerOct 20, 2026Oct 23, 2026
CVE-2025-61624Fortinet Multiple Products Path Traversal VulnerabilityFortinet / Multiple ProductsOct 16, 2026Oct 19, 2026
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityBeyondTrust / Remote SupportOct 16, 2026Oct 19, 2026
CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityAtlassian / Multiple ProductsOct 15, 2026Oct 18, 2026
CVE-2026-0322Palo Alto Networks PAN-OS Code Injection VulnerabilityPalo Alto Networks / PAN-OSOct 14, 2026Oct 17, 2026
CVE-2026-105133Ahsay AhsayCBS Improper Authentication VulnerabilityAhsay / AhsayCBSOct 14, 2026Oct 17, 2026
CVE-2026-105134Ahsay AhsayCBS Command Injection VulnerabilityAhsay / AhsayCBSOct 14, 2026Oct 17, 2026
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCisco / Secure Email GatewayOct 14, 2026Oct 17, 2026
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityIvanti / Connect SecureOct 13, 2026Oct 16, 2026
CVE-2026-96951Microsoft Windows Command Injection VulnerabilityMicrosoft / WindowsOct 13, 2026Oct 16, 2026
CVE-2015-3306ProFTPD Improper Access Control VulnerabilityProFTPD / ProFTPDOct 8, 2026Oct 11, 2026
CVE-2015-5477 ISC BIND Data Processing Errors VulnerabilityISC / BINDOct 8, 2026Oct 11, 2026
CVE-2016-3081Apache Struts Command Injection VulnerabilityApache / StrutsOct 8, 2026Oct 11, 2026
CVE-2021-3199ONLYOFFICE Docs Server Path Traversal VulnerabilityONLYOFFICE / DocsOct 8, 2026Oct 11, 2026
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information VulnerabilityStrapi / StrapiOct 8, 2026Oct 11, 2026
CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix / NetScalerOct 4, 2026Oct 7, 2026
CVE-2026-102489Zammad GmbH Zammad Session Fixation VulnerabilityZammad GmbH / ZammadOct 2, 2026Oct 5, 2026
CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management VulnerabilityZammad GmbH / ZammadOct 2, 2026Oct 5, 2026
CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityFortinet / FortiMailOct 1, 2026Oct 4, 2026
CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCisco / Catalyst SD-WAN ManagerSep 30, 2026Oct 3, 2026
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityApple / Multiple ProductsSep 29, 2026Oct 13, 2026
CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityCitrix / NetScalerSep 27, 2026Sep 30, 2026
CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix / NetScalerSep 27, 2026Sep 30, 2026
CVE-2026-65660Microsoft SharePoint Code Injection VulnerabilityMicrosoft / SharePointSep 25, 2026Sep 28, 2026
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityMikroTik / RouterOSSep 25, 2026Sep 28, 2026
CVE-2026-87902WordPress Core Remote File Inclusion VulnerabilityWordPress / CoreSep 25, 2026Sep 28, 2026
CVE-2026-5430WSO2 Multiple Products Path Traversal Vulnerability WSO2 / Multiple ProductsSep 24, 2026Sep 27, 2026
CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe / Commerce and Magento Sep 24, 2026Sep 27, 2026
CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityCheck Point / Multiple ProductsSep 22, 2026Sep 25, 2026
CVE-2026-93616Check Point Multiple Products Path Traversal VulnerabilityCheck Point / Multiple ProductsSep 22, 2026Sep 25, 2026
CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityArista / VeloCloud OrchestratorSep 22, 2026Sep 25, 2026
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityF5 / BIG-IP APMSep 22, 2026Sep 25, 2026
CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityZyxel / GS1900 Series SwitchesSep 21, 2026Sep 24, 2026
CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityLinux / KernelSep 18, 2026Sep 21, 2026
CVE-2025-39964Linux Kernel Race Condition VulnerabilityLinux / KernelSep 18, 2026Sep 21, 2026
CVE-2026-53266Linux Kernel Out-of-Bounds Write VulnerabilityLinux / KernelSep 18, 2026Sep 21, 2026
CVE-2026-58704Google Pixel Improper Authorization VulnerabilityGoogle / PixelSep 16, 2026Sep 19, 2026
CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCisco / Identity Services EngineSep 16, 2026Sep 19, 2026
CVE-2026-87886Acronis Backup Incorrect Default Permissions VulnerabilityAcronis / BackupSep 16, 2026Sep 19, 2026
CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCisco / Secure Email GatewaySep 14, 2026Sep 17, 2026
CVE-2026-42016JFrog Artifactory Incorrect Authorization VulnerabilityJFrog / ArtifactorySep 11, 2026Sep 25, 2026
CVE-2026-42018JFrog Artifactory Improper Authentication VulnerabilityJFrog / ArtifactorySep 11, 2026Sep 25, 2026
CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityConnectWise / ScreenConnectSep 11, 2026Sep 14, 2026
CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityGitLab / Community Edition and Enterprise EditionSep 11, 2026Sep 14, 2026
CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityMikroTik / RouterOSSep 10, 2026Sep 13, 2026
CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityMikroTik / RouterOSSep 10, 2026Sep 13, 2026
CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityFortinet / Multiple ProductsSep 9, 2026Sep 12, 2026
CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityCitrix / NetScalerSep 9, 2026Sep 12, 2026
CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementSep 9, 2026Sep 12, 2026
CVE-2026-87491Google Chromium V8 Out of Bounds Write VulnerabilityGoogle / Chromium V8Sep 9, 2026Sep 23, 2026
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityAdobe / Commerce and MagentoSep 8, 2026Sep 11, 2026
CVE-2026-81963Microsoft Windows Link Following VulnerabilityMicrosoft / WindowsSep 8, 2026Sep 22, 2026
CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow VulnerabilityMicrosoft / WindowsSep 8, 2026Sep 22, 2026
CVE-2026-86218N-able N-central Static Code Injection VulnerabilityN-able / N-centralSep 8, 2026Sep 11, 2026
CVE-2026-85046Google Chromium V8 Type Confusion VulnerabilityGoogle / Chromium V8Sep 4, 2026Sep 18, 2026
CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling VulnerabilityKludex / StarletteSep 2, 2026Sep 16, 2026
CVE-2026-49869Kestra OSS OS Command Injection VulnerabilityKestra / Kestra OSSSep 2, 2026Sep 5, 2026
CVE-2026-59822BerriAI LiteLLM Improper Authentication VulnerabilityBerriAI / LiteLLMSep 2, 2026Sep 16, 2026
CVE-2026-82329JFrog Artifactory Improper Authentication VulnerabilityJFrog / ArtifactorySep 2, 2026Sep 5, 2026
CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySonicWall / SMA1000 AppliancesSep 2, 2026Sep 5, 2026
CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection VulnerabilitySonicWall / SMA1000 AppliancesSep 2, 2026Sep 5, 2026
CVE-2026-9586Sangoma Switchvox SQL Injection VulnerabilitySangoma / SwitchvoxSep 2, 2026Sep 5, 2026
CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPaperCut / NG/MFAug 31, 2026Sep 14, 2026
CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityPaperCut / NG/MFAug 31, 2026Sep 14, 2026
CVE-2023-49105ownCloud Improper Authentication VulnerabilityownCloud / ownCloudAug 27, 2026Aug 30, 2026
CVE-2026-53362Linux Kernel Unspecified VulnerabilityLinux / KernelAug 27, 2026Aug 30, 2026
CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityJFrog / ArtifactoryAug 27, 2026Sep 10, 2026
CVE-2015-3246Red Hat Libuser Race Condition VulnerabilityRed Hat / LibuserAug 26, 2026Sep 9, 2026
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityRed Hat / Automatic Bug Reporting ToolAug 26, 2026Sep 9, 2026
CVE-2019-1068Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft / SQL ServerAug 26, 2026Aug 29, 2026
CVE-2021-23758Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityAjax.NET Professional / Ajax.NET ProfessionalAug 26, 2026Sep 9, 2026
CVE-2022-0995Linux Kernel Out-of-Bounds Write VulnerabilityLinux / KernelAug 26, 2026Aug 29, 2026
CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix / NetScaler ADC and NetScaler GatewayAug 26, 2026Aug 29, 2026
CVE-2026-60004Gitea Code Injection VulnerabilityGitea / GiteaAug 25, 2026Aug 28, 2026
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityOracle / HTTP Server and Oracle Weblogic Server Proxy Plug-inAug 24, 2026Aug 27, 2026
CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilitySynacor / Zimbra Collaboration Suite (ZCS)Aug 21, 2026Aug 24, 2026