Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,773 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.09. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2026-72529 | TrueConf Server Missing Authentication for Critical Function Vulnerability TrueConf / Server | Aug 20, 2026 | Aug 23, 2026 | |
| CVE-2026-72530 | TrueConf Server Code Injection Vulnerability TrueConf / Server | Aug 20, 2026 | Sep 3, 2026 | |
| CVE-2026-64849 | MLflow Server-Side Request Forgery Vulnerability MLflow / MLflow | Aug 19, 2026 | Sep 2, 2026 | |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft / Internet Key Exchange (IKE) Service Extensions | Aug 18, 2026 | Aug 21, 2026 | |
| CVE-2026-55040 | Microsoft SharePoint Weak Authentication Vulnerability Microsoft / SharePoint | Aug 18, 2026 | Aug 21, 2026 | |
| CVE-2026-59310 | Broadcom VMware vCenter Path Traversal Vulnerability Broadcom / VMware vCenter | Aug 18, 2026 | Aug 21, 2026 | Known |
| CVE-2026-65400 | Apple macOS Improper Authentication Vulnerability Apple / macOS | Aug 18, 2026 | Aug 21, 2026 | |
| CVE-2025-62593 | Ray-Project Ray Code Injection Vulnerability Ray-Project / Ray | Aug 17, 2026 | Aug 20, 2026 | |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Aug 11, 2026 | Aug 14, 2026 | |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft / Windows Ancillary Function Driver for WinSock | Aug 11, 2026 | Aug 25, 2026 | |
| CVE-2026-72898 | Metabase SQL Injection Vulnerability Metabase / Metabase | Aug 11, 2026 | Aug 14, 2026 | |
| CVE-2026-8037 | Progress LoadMaster Command Injection Vulnerability Progress / LoadMaster | Aug 7, 2026 | Aug 10, 2026 | |
| CVE-2026-63077 | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability JetBrains / TeamCity | Aug 5, 2026 | Aug 8, 2026 | Known |
| CVE-2026-18556 | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able / N-central | Aug 4, 2026 | Aug 7, 2026 | |
| CVE-2026-34486 | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apache / Tomcat | Aug 4, 2026 | Aug 7, 2026 | |
| CVE-2026-9198 | IBM Langflow Code Injection Vulnerability IBM / Langflow | Aug 4, 2026 | Aug 7, 2026 | |
| CVE-2026-18577 | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able / N-central | Aug 3, 2026 | Aug 6, 2026 | |
| CVE-2026-20316 | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Cisco / Secure Firewall Management Center (FMC) | Jul 29, 2026 | Aug 1, 2026 | Known |
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Fortinet / FortiOS | Jul 27, 2026 | Aug 10, 2026 | |
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista / VeloCloud Orchestrator | Jul 27, 2026 | Jul 30, 2026 | |
| CVE-2026-16232 | Check Point SmartConsole Improper Authentication Vulnerability Check Point / SmartConsole | Jul 22, 2026 | Jul 25, 2026 | |
| CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Jul 22, 2026 | Jul 25, 2026 | |
| CVE-2021-27137 | DD-WRT Stack-Based Buffer Overflow Vulnerability DD-WRT / DD-WRT | Jul 21, 2026 | Jul 24, 2026 | |
| CVE-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Langflow / Langflow | Jul 21, 2026 | Jul 24, 2026 | |
| CVE-2026-60137 | WordPress Core SQL Injection Vulnerability WordPress / Core | Jul 21, 2026 | Aug 4, 2026 | |
| CVE-2026-63030 | WordPress Core Interpretation Conflict Vulnerability WordPress / Core | Jul 21, 2026 | Jul 24, 2026 | |
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet / FortiSandbox | Jul 16, 2026 | Jul 19, 2026 | |
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet / FortiSandbox | Jul 16, 2026 | Jul 19, 2026 | |
| CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Jul 16, 2026 | Jul 19, 2026 | |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability KNX Association / KNX Protocol Connection Authorization Option 1 | Jul 15, 2026 | Jul 29, 2026 | |
| CVE-2026-46817 | Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle / E-Business Suite | Jul 15, 2026 | Jul 18, 2026 | |
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall / SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | Known |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall / SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | Known |
| CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft / Active Directory Federation Services | Jul 14, 2026 | Jul 28, 2026 | |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft / SharePoint Server | Jul 14, 2026 | Jul 17, 2026 | |
| CVE-2008-4128 | Cisco IOS Cross-Site Request Forgery Vulnerability Cisco / IOS | Jul 13, 2026 | Jul 16, 2026 | |
| CVE-2026-48939 | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability iCagenda / iCagenda | Jul 10, 2026 | Jul 13, 2026 | |
| CVE-2026-56291 | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability Balbooa / Forms | Jul 10, 2026 | Jul 13, 2026 | |
| CVE-2026-48282 | Adobe ColdFusion Path Traversal Vulnerability Adobe / ColdFusion | Jul 7, 2026 | Jul 10, 2026 | |
| CVE-2026-48908 | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability JoomShaper / SP Page Builder | Jul 7, 2026 | Jul 10, 2026 | |
| CVE-2026-55255 | Langflow Authorization Bypass Through User-Controlled Key Vulnerability Langflow / Langflow | Jul 7, 2026 | Jul 10, 2026 | |
| CVE-2026-56290 | Joomlack Page Builder Improper Access Control Vulnerability Joomlack / Page Builder | Jul 7, 2026 | Jul 10, 2026 | |
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint Server | Jul 1, 2026 | Jul 4, 2026 | Known |
| CVE-2026-48558 | SimpleHelp Authentication Bypass Vulnerability SimpleHelp / SimpleHelp | Jun 29, 2026 | Jul 2, 2026 | |
| CVE-2026-12569 | PTC Windchill and FlexPLM Improper Input Validation Vulnerability PTC / Windchill and FlexPLM | Jun 25, 2026 | Jun 28, 2026 | Known |
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability Cisco / Unified Communications Manager | Jun 25, 2026 | Jun 28, 2026 | |
| CVE-2025-67038 | Lantronix EDS5000 Code Injection Vulnerability Lantronix / EDS5000 | Jun 23, 2026 | Jun 26, 2026 | |
| CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability Ubiquiti / UniFi OS | Jun 23, 2026 | Jun 26, 2026 | |
| CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability Ubiquiti / UniFi OS | Jun 23, 2026 | Jun 26, 2026 | |
| CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability Ubiquiti / UniFi OS | Jun 23, 2026 | Jun 26, 2026 | |
| CVE-2026-20253 | Splunk Enterprise Missing Authentication for Critical Function Vulnerability Splunk / Enterprise | Jun 18, 2026 | Jun 21, 2026 | |
| CVE-2026-48907 | Widget Factory Joomla Content Editor Improper Access Control Vulnerability Widget Factory / Joomla Content Editor | Jun 16, 2026 | Jun 19, 2026 | |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Cisco / Catalyst SD-WAN Manager | Jun 15, 2026 | Jun 29, 2026 | |
| CVE-2026-54420 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed / cPanel Plugin | Jun 15, 2026 | Jun 18, 2026 | |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle / PeopleSoft Enterprise PeopleTools | Jun 12, 2026 | Jun 15, 2026 | Known |
| CVE-2026-10520 | Ivanti Sentry OS Command Injection Vulnerability Ivanti / Sentry | Jun 11, 2026 | Jun 14, 2026 | |
| CVE-2026-11645 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google / Chromium V8 | Jun 9, 2026 | Jun 23, 2026 | |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco / Catalyst SD-WAN Manager | Jun 9, 2026 | Jun 23, 2026 | |
| CVE-2026-7473 | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista / Extensible Operating System | Jun 9, 2026 | Jun 23, 2026 | |
| CVE-2026-42271 | BerriAI LiteLLM Command Injection Vulnerability BerriAI / LiteLLM | Jun 8, 2026 | Jun 22, 2026 | |
| CVE-2026-50751 | Check Point Security Gateway Improper Authentication Vulnerability Check Point / Security Gateway | Jun 8, 2026 | Jun 11, 2026 | Known |
| CVE-2026-28318 | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds / Serv-U | Jun 5, 2026 | Jun 19, 2026 | |
| CVE-2026-45247 | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Mirasvit / Mirasvit Full Page Cache Warmer | Jun 3, 2026 | Jun 6, 2026 | |
| CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability Linux / Kernel | Jun 2, 2026 | Jun 5, 2026 | |
| CVE-2025-48595 | Android Framework Integer Overflow Vulnerability Android / Framework | Jun 2, 2026 | Jun 5, 2026 | |
| CVE-2024-21182 | Oracle WebLogic Server Unspecified Vulnerability Oracle / WebLogic Server | Jun 1, 2026 | Jun 4, 2026 | |
| CVE-2026-0257 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks / PAN-OS | May 29, 2026 | Jun 1, 2026 | Known |
| CVE-2026-45321 | TanStack Unspecified Vulnerability TanStack / TanStack | May 27, 2026 | Jun 10, 2026 | Known |
| CVE-2026-48027 | Nx Console Embedded Malicious Code Vulnerability Nx / Nx Console | May 27, 2026 | Jun 10, 2026 | Known |
| CVE-2026-8398 | Daemon Tools Lite Embedded Malicious Code Vulnerability Daemon / Daemon Tools Lite | May 27, 2026 | May 30, 2026 | |
| CVE-2026-48172 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed / cPanel Plugin | May 26, 2026 | May 29, 2026 | |
| CVE-2026-9082 | Drupal Core SQL Injection Vulnerability Drupal / Core | May 22, 2026 | May 27, 2026 | |
| CVE-2025-34291 | Langflow Origin Validation Error Vulnerability Langflow / Langflow | May 21, 2026 | Jun 4, 2026 | |
| CVE-2026-34926 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Trend Micro / Apex One | May 21, 2026 | Jun 4, 2026 | |
| CVE-2008-4250 | Microsoft Windows Buffer Overflow Vulnerability Microsoft / Windows | May 20, 2026 | Jun 3, 2026 | |
| CVE-2009-1537 | Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft / DirectX | May 20, 2026 | Jun 3, 2026 | |
| CVE-2009-3459 | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe / Acrobat and Reader | May 20, 2026 | Jun 3, 2026 | |
| CVE-2010-0249 | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | May 20, 2026 | Jun 3, 2026 | |
| CVE-2010-0806 | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | May 20, 2026 | Jun 3, 2026 | |
| CVE-2026-41091 | Microsoft Defender Link Following Vulnerability Microsoft / Defender | May 20, 2026 | Jun 3, 2026 | |
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability Microsoft / Defender | May 20, 2026 | Jun 3, 2026 | |
| CVE-2026-42897 | Microsoft Exchange Server Cross-Site Scripting Vulnerability Microsoft / Microsoft | May 15, 2026 | May 29, 2026 | |
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco / Catalyst SD-WAN | May 14, 2026 | May 17, 2026 | |
| CVE-2026-42208 | BerriAI LiteLLM SQL Injection Vulnerability BerriAI / LiteLLM | May 8, 2026 | May 11, 2026 | |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | May 7, 2026 | May 10, 2026 | |
| CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks / PAN-OS | May 6, 2026 | May 9, 2026 | |
| CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux / Kernel | May 1, 2026 | May 15, 2026 | |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros / cPanel & WHM and WP2 (WordPress Squared) | Apr 30, 2026 | May 3, 2026 | Known |
| CVE-2024-1708 | ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise / ScreenConnect | Apr 28, 2026 | May 12, 2026 | Known |
| CVE-2026-32202 | Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft / Windows | Apr 28, 2026 | May 12, 2026 | |
| CVE-2024-57726 | SimpleHelp Missing Authorization Vulnerability SimpleHelp / SimpleHelp | Apr 24, 2026 | May 8, 2026 | Known |
| CVE-2024-57728 | SimpleHelp Path Traversal Vulnerability SimpleHelp / SimpleHelp | Apr 24, 2026 | May 8, 2026 | Known |
| CVE-2024-7399 | Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung / MagicINFO 9 Server | Apr 24, 2026 | May 8, 2026 | |
| CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability D-Link / DIR-823X | Apr 24, 2026 | May 8, 2026 | |
| CVE-2026-39987 | Marimo Remote Code Execution Vulnerability Marimo / Marimo | Apr 23, 2026 | May 7, 2026 | |
| CVE-2026-33825 | Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft / Defender | Apr 22, 2026 | May 6, 2026 | Known |
| CVE-2023-27351 | PaperCut NG/MF Improper Authentication Vulnerability PaperCut / NG/MF | Apr 20, 2026 | May 4, 2026 | Known |
| CVE-2024-27199 | JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains / TeamCity | Apr 20, 2026 | May 4, 2026 | Known |
| CVE-2025-2749 | Kentico Xperience Path Traversal Vulnerability Kentico / Kentico Xperience | Apr 20, 2026 | May 4, 2026 | |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest / KACE Systems Management Appliance (SMA) | Apr 20, 2026 | May 4, 2026 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses