Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,773 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.09. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Apr 20, 2026 | Apr 23, 2026 | |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco / Catalyst SD-WAN Manger | Apr 20, 2026 | Apr 23, 2026 | |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco / Catalyst SD-WAN Manager | Apr 20, 2026 | Apr 23, 2026 | |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco / Catalyst SD-WAN Manager | Apr 20, 2026 | Apr 23, 2026 | |
| CVE-2026-34197 | Apache ActiveMQ Improper Input Validation Vulnerability Apache / ActiveMQ | Apr 16, 2026 | Apr 30, 2026 | |
| CVE-2009-0238 | Microsoft Office Remote Code Execution Microsoft / Office | Apr 14, 2026 | Apr 28, 2026 | |
| CVE-2026-32201 | Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft / SharePoint Server | Apr 14, 2026 | Apr 28, 2026 | |
| CVE-2012-1854 | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft / Visual Basic for Applications (VBA) | Apr 13, 2026 | Apr 27, 2026 | |
| CVE-2020-9715 | Adobe Acrobat Use-After-Free Vulnerability Adobe / Acrobat | Apr 13, 2026 | Apr 27, 2026 | |
| CVE-2023-21529 | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft / Exchange Server | Apr 13, 2026 | Apr 27, 2026 | Known |
| CVE-2023-36424 | Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft / Windows | Apr 13, 2026 | Apr 27, 2026 | |
| CVE-2025-60710 | Microsoft Windows Link Following Vulnerability Microsoft / Windows | Apr 13, 2026 | Apr 27, 2026 | Known |
| CVE-2026-21643 | Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet / FortiClient EMS | Apr 13, 2026 | Apr 16, 2026 | |
| CVE-2026-34621 | Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe / Acrobat and Reader | Apr 13, 2026 | Apr 27, 2026 | |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | Apr 8, 2026 | Apr 11, 2026 | |
| CVE-2026-35616 | Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet / FortiClient EMS | Apr 6, 2026 | Apr 9, 2026 | |
| CVE-2026-3502 | TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf / Client | Apr 2, 2026 | Apr 16, 2026 | |
| CVE-2026-5281 | Google Dawn Use-After-Free Vulnerability Google / Dawn | Apr 1, 2026 | Apr 15, 2026 | |
| CVE-2026-3055 | Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix / NetScaler | Mar 30, 2026 | Apr 2, 2026 | |
| CVE-2025-53521 | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 / BIG-IP | Mar 27, 2026 | Mar 30, 2026 | |
| CVE-2026-33634 | Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity / Trivy | Mar 26, 2026 | Apr 9, 2026 | |
| CVE-2026-33017 | Langflow Code Injection Vulnerability Langflow / Langflow | Mar 25, 2026 | Apr 8, 2026 | |
| CVE-2025-31277 | Apple Multiple Products Buffer Overflow Vulnerability Apple / Multiple Products | Mar 20, 2026 | Apr 3, 2026 | |
| CVE-2025-32432 | Craft CMS Code Injection Vulnerability Craft CMS / Craft CMS | Mar 20, 2026 | Apr 3, 2026 | |
| CVE-2025-43510 | Apple Multiple Products Improper Locking Vulnerability Apple / Multiple Products | Mar 20, 2026 | Apr 3, 2026 | |
| CVE-2025-43520 | Apple Multiple Products Classic Buffer Overflow Vulnerability Apple / Multiple Products | Mar 20, 2026 | Apr 3, 2026 | |
| CVE-2025-54068 | Laravel Livewire Code Injection Vulnerability Laravel / Livewire | Mar 20, 2026 | Apr 3, 2026 | |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco / Secure Firewall Management Center (FMC) | Mar 19, 2026 | Mar 22, 2026 | Known |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Mar 18, 2026 | Apr 1, 2026 | |
| CVE-2026-20963 | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft / SharePoint | Mar 18, 2026 | Mar 21, 2026 | |
| CVE-2025-47813 | Wing FTP Server Information Disclosure Vulnerability Wing FTP Server / Wing FTP Server | Mar 16, 2026 | Mar 30, 2026 | |
| CVE-2026-3909 | Google Skia Out-of-Bounds Write Vulnerability Google / Skia | Mar 13, 2026 | Mar 27, 2026 | |
| CVE-2026-3910 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google / Chromium V8 | Mar 13, 2026 | Mar 27, 2026 | |
| CVE-2025-68613 | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability n8n / n8n | Mar 11, 2026 | Mar 25, 2026 | |
| CVE-2021-22054 | Omnissa Workspace ONE Server-Side Request Forgery Omnissa / Workspace One UEM | Mar 9, 2026 | Mar 23, 2026 | |
| CVE-2025-26399 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds / Web Help Desk | Mar 9, 2026 | Mar 12, 2026 | Known |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti / Endpoint Manager (EPM) | Mar 9, 2026 | Mar 23, 2026 | |
| CVE-2017-7921 | Hikvision Multiple Products Improper Authentication Vulnerability Hikvision / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | |
| CVE-2021-22681 | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwell / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | |
| CVE-2021-30952 | Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | |
| CVE-2023-41974 | Apple iOS and iPadOS Use-After-Free Vulnerability Apple / iOS and iPadOS | Mar 5, 2026 | Mar 26, 2026 | |
| CVE-2023-43000 | Apple Multiple products Use-After-Free Vulnerability Apple / Multiple Products | Mar 5, 2026 | Mar 26, 2026 | |
| CVE-2026-21385 | Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm / Multiple Chipsets | Mar 3, 2026 | Mar 24, 2026 | |
| CVE-2026-22719 | Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom / VMware Aria Operations | Mar 3, 2026 | Mar 24, 2026 | |
| CVE-2022-20775 | Cisco SD-WAN Path Traversal Vulnerability Cisco / SD-WAN | Feb 25, 2026 | Feb 27, 2026 | |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco / Catalyst SD-WAN Controller and Manager | Feb 25, 2026 | Feb 27, 2026 | |
| CVE-2026-25108 | Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K / FileZen | Feb 24, 2026 | Mar 17, 2026 | |
| CVE-2025-49113 | RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube / Webmail | Feb 20, 2026 | Mar 13, 2026 | |
| CVE-2025-68461 | RoundCube Webmail Cross-site Scripting Vulnerability Roundcube / Webmail | Feb 20, 2026 | Mar 13, 2026 | |
| CVE-2021-22175 | GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab / GitLab | Feb 18, 2026 | Mar 11, 2026 | |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell / RecoverPoint for Virtual Machines (RP4VMs) | Feb 18, 2026 | Feb 21, 2026 | |
| CVE-2008-0015 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft / Windows | Feb 17, 2026 | Mar 10, 2026 | |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Synacor / Zimbra Collaboration Suite | Feb 17, 2026 | Mar 10, 2026 | |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 / ThreatSonar Anti-Ransomware | Feb 17, 2026 | Mar 10, 2026 | |
| CVE-2026-2441 | Google Chromium CSS Use-After-Free Vulnerability Google / Chromium | Feb 17, 2026 | Mar 10, 2026 | |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust / Remote Support (RS) and Privileged Remote Access (PRA) | Feb 13, 2026 | Feb 16, 2026 | Known |
| CVE-2024-43468 | Microsoft Configuration Manager SQL Injection Vulnerability Microsoft / Configuration Manager | Feb 12, 2026 | Mar 5, 2026 | |
| CVE-2025-15556 | Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ / Notepad++ | Feb 12, 2026 | Mar 5, 2026 | |
| CVE-2025-40536 | SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds / Web Help Desk | Feb 12, 2026 | Feb 15, 2026 | |
| CVE-2026-20700 | Apple Multiple Buffer Overflow Vulnerability Apple / Multiple Products | Feb 12, 2026 | Mar 5, 2026 | |
| CVE-2026-21510 | Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | |
| CVE-2026-21513 | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | |
| CVE-2026-21514 | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft / Office | Feb 10, 2026 | Mar 3, 2026 | |
| CVE-2026-21519 | Microsoft Windows Type Confusion Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | |
| CVE-2026-21525 | Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | |
| CVE-2026-21533 | Microsoft Windows Improper Privilege Management Vulnerability Microsoft / Windows | Feb 10, 2026 | Mar 3, 2026 | |
| CVE-2025-11953 | React Native Community CLI OS Command Injection Vulnerability React Native Community / CLI | Feb 5, 2026 | Feb 26, 2026 | |
| CVE-2026-24423 | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools / SmarterMail | Feb 5, 2026 | Feb 26, 2026 | Known |
| CVE-2019-19006 | Sangoma FreePBX Improper Authentication Vulnerability Sangoma / FreePBX | Feb 3, 2026 | Feb 24, 2026 | |
| CVE-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab / Community and Enterprise Editions | Feb 3, 2026 | Feb 24, 2026 | |
| CVE-2025-40551 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds / Web Help Desk | Feb 3, 2026 | Feb 6, 2026 | |
| CVE-2025-64328 | Sangoma FreePBX OS Command Injection Vulnerability Sangoma / FreePBX | Feb 3, 2026 | Feb 24, 2026 | |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti / Endpoint Manager Mobile (EPMM) | Jan 29, 2026 | Feb 1, 2026 | |
| CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet / Multiple Products | Jan 27, 2026 | Jan 30, 2026 | |
| CVE-2018-14634 | Linux Kernel Integer Overflow Vulnerability Linux / Kernel | Jan 26, 2026 | Feb 16, 2026 | |
| CVE-2025-52691 | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools / SmarterMail | Jan 26, 2026 | Feb 16, 2026 | Known |
| CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability Microsoft / Office | Jan 26, 2026 | Feb 16, 2026 | |
| CVE-2026-23760 | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools / SmarterMail | Jan 26, 2026 | Feb 16, 2026 | Known |
| CVE-2026-24061 | GNU InetUtils Argument Injection Vulnerability GNU / InetUtils | Jan 26, 2026 | Feb 16, 2026 | |
| CVE-2024-37079 | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom / VMware vCenter Server | Jan 23, 2026 | Feb 13, 2026 | |
| CVE-2025-31125 | Vite Vitejs Improper Access Control Vulnerability Vite / Vitejs | Jan 22, 2026 | Feb 12, 2026 | |
| CVE-2025-34026 | Versa Concerto Improper Authentication Vulnerability Versa / Concerto | Jan 22, 2026 | Feb 12, 2026 | |
| CVE-2025-54313 | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier / eslint-config-prettier | Jan 22, 2026 | Feb 12, 2026 | |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Jan 22, 2026 | Feb 12, 2026 | |
| CVE-2026-20045 | Cisco Unified Communications Products Code Injection Vulnerability Cisco / Unified Communications Manager | Jan 21, 2026 | Feb 11, 2026 | |
| CVE-2026-20805 | Microsoft Windows Information Disclosure Vulnerability Microsoft / Windows | Jan 13, 2026 | Feb 3, 2026 | |
| CVE-2025-8110 | Gogs Path Traversal Vulnerability Gogs / Gogs | Jan 12, 2026 | Feb 2, 2026 | |
| CVE-2009-0556 | Microsoft Office PowerPoint Code Injection Vulnerability Microsoft / Office | Jan 7, 2026 | Jan 28, 2026 | |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) / OneView | Jan 7, 2026 | Jan 28, 2026 | |
| CVE-2025-14847 | MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB / MongoDB and MongoDB Server | Dec 29, 2025 | Jan 19, 2026 | |
| CVE-2023-52163 | Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever / DS-2105 Pro | Dec 22, 2025 | Jan 12, 2026 | |
| CVE-2025-14733 | WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard / Firebox | Dec 19, 2025 | Dec 26, 2025 | Known |
| CVE-2025-20393 | Cisco Multiple Products Improper Input Validation Vulnerability Cisco / Multiple Products | Dec 17, 2025 | Dec 24, 2025 | |
| CVE-2025-40602 | SonicWall SMA1000 Missing Authorization Vulnerability SonicWall / SMA1000 appliance | Dec 17, 2025 | Dec 24, 2025 | |
| CVE-2025-59374 | ASUS Live Update Embedded Malicious Code Vulnerability ASUS / Live Update | Dec 17, 2025 | Jan 7, 2026 | |
| CVE-2025-59718 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet / Multiple Products | Dec 16, 2025 | Dec 23, 2025 | |
| CVE-2025-14611 | Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet / CentreStack and Triofox | Dec 15, 2025 | Jan 5, 2026 | |
| CVE-2025-43529 | Apple Multiple Products Use-After-Free WebKit Vulnerability Apple / Multiple Products | Dec 15, 2025 | Jan 5, 2026 | |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability Sierra Wireless / AirLink ALEOS | Dec 12, 2025 | Jan 2, 2026 | |
| CVE-2025-14174 | Google Chromium Out of Bounds Memory Access Vulnerability Google / Chromium | Dec 12, 2025 | Jan 2, 2026 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses