Live data
Known Exploited Vulnerabilities watch
Every vulnerability CISA confirms is being exploited in the wild, newest first. Mirrored from the official catalog (version 2026.09.23, 1721 entries). Federal agencies must fix each one by its due date; everyone else should treat the list as a patch-priority queue.
| CVE | Vendor | Product | Added | Fix by | Ransomware use |
|---|---|---|---|---|---|
| CVE-2026-94127 | F5 | BIG-IP APM | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-93952 | Arista | VeloCloud Orchestrator | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-93616 | Check Point | Multiple Products | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-85102 | Check Point | Multiple Products | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-7273 | Zyxel | GS1900 Series Switches | 2026-09-21 | 2026-09-24 | Unknown |
| CVE-2026-53266 | Linux | Kernel | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2025-39964 | Linux | Kernel | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2025-39682 | Linux | Kernel | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2026-87886 | Acronis | Backup | 2026-09-16 | 2026-09-19 | Unknown |
| CVE-2026-76460 | Cisco | Identity Services Engine | 2026-09-16 | 2026-09-19 | Unknown |
| CVE-2026-58704 | Pixel | 2026-09-16 | 2026-09-19 | Unknown | |
| CVE-2026-76461 | Cisco | Secure Email Gateway | 2026-09-14 | 2026-09-17 | Unknown |
| CVE-2026-85706 | GitLab | Community Edition and Enterprise Edition | 2026-09-11 | 2026-09-14 | Unknown |
| CVE-2026-84869 | ConnectWise | ScreenConnect | 2026-09-11 | 2026-09-14 | Unknown |
| CVE-2026-42018 | JFrog | Artifactory | 2026-09-11 | 2026-09-25 | Unknown |
| CVE-2026-42016 | JFrog | Artifactory | 2026-09-11 | 2026-09-25 | Unknown |
| CVE-2026-86060 | MikroTik | RouterOS | 2026-09-10 | 2026-09-13 | Unknown |
| CVE-2026-67277 | MikroTik | RouterOS | 2026-09-10 | 2026-09-13 | Unknown |
| CVE-2026-87491 | Chromium V8 | 2026-09-09 | 2026-09-23 | Unknown | |
| CVE-2026-20079 | Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2026-19490 | Citrix | NetScaler | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2025-25249 | Fortinet | Multiple Products | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2026-86218 | N-able | N-central | 2026-09-08 | 2026-09-11 | Unknown |
| CVE-2026-85880 | Microsoft | Windows | 2026-09-08 | 2026-09-22 | Unknown |
| CVE-2026-81963 | Microsoft | Windows | 2026-09-08 | 2026-09-22 | Unknown |
| CVE-2026-75650 | Adobe | Commerce and Magento | 2026-09-08 | 2026-09-11 | Unknown |
| CVE-2026-85046 | Chromium V8 | 2026-09-04 | 2026-09-18 | Unknown | |
| CVE-2026-9586 | Sangoma | Switchvox | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-83549 | SonicWall | SMA1000 Appliances | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-83548 | SonicWall | SMA1000 Appliances | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-82329 | JFrog | Artifactory | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-59822 | BerriAI | LiteLLM | 2026-09-02 | 2026-09-16 | Unknown |
| CVE-2026-49869 | Kestra | Kestra OSS | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-48710 | Kludex | Starlette | 2026-09-02 | 2026-09-16 | Unknown |
| CVE-2026-82078 | PaperCut | NG/MF | 2026-08-31 | 2026-09-14 | Unknown |
| CVE-2026-81578 | PaperCut | NG/MF | 2026-08-31 | 2026-09-14 | Unknown |
| CVE-2026-66384 | JFrog | Artifactory | 2026-08-27 | 2026-09-10 | Unknown |
| CVE-2026-53362 | Linux | Kernel | 2026-08-27 | 2026-08-30 | Unknown |
| CVE-2023-49105 | ownCloud | ownCloud | 2026-08-27 | 2026-08-30 | Unknown |
| CVE-2026-8452 | Citrix | NetScaler ADC and NetScaler Gateway | 2026-08-26 | 2026-08-29 | Unknown |
| CVE-2022-0995 | Linux | Kernel | 2026-08-26 | 2026-09-09 | Unknown |
| CVE-2021-23758 | Ajax.NET Professional | Ajax.NET Professional | 2026-08-26 | 2026-09-09 | Unknown |
| CVE-2019-1068 | Microsoft | SQL Server | 2026-08-26 | 2026-08-29 | Unknown |
| CVE-2015-5287 | Red Hat | Automatic Bug Reporting Tool | 2026-08-26 | 2026-09-09 | Unknown |
| CVE-2015-3246 | Red Hat | Libuser | 2026-08-26 | 2026-09-09 | Unknown |
| CVE-2026-60004 | Gitea | Gitea | 2026-08-25 | 2026-08-28 | Unknown |
| CVE-2026-21962 | Oracle | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 2026-08-27 | Unknown |
| CVE-2026-73570 | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 2026-08-24 | Unknown |
| CVE-2026-72530 | TrueConf | Server | 2026-08-20 | 2026-09-03 | Unknown |
| CVE-2026-72529 | TrueConf | Server | 2026-08-20 | 2026-08-23 | Unknown |
| CVE-2026-64849 | MLflow | MLflow | 2026-08-19 | 2026-09-02 | Unknown |
| CVE-2026-65400 | Apple | macOS | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2026-59310 | Broadcom | VMware vCenter | 2026-08-18 | 2026-08-21 | Known |
| CVE-2026-55040 | Microsoft | SharePoint | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2026-33824 | Microsoft | Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2025-62593 | Ray-Project | Ray | 2026-08-17 | 2026-08-20 | Unknown |
| CVE-2026-72898 | Metabase | Metabase | 2026-08-11 | 2026-08-14 | Unknown |
| CVE-2026-68820 | Microsoft | Windows Ancillary Function Driver for WinSock | 2026-08-11 | 2026-08-25 | Unknown |
| CVE-2026-20349 | Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 2026-08-14 | Unknown |
| CVE-2026-8037 | Progress | LoadMaster | 2026-08-07 | 2026-08-10 | Unknown |
| CVE-2026-63077 | JetBrains | TeamCity | 2026-08-05 | 2026-08-08 | Known |
| CVE-2026-9198 | IBM | Langflow | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-34486 | Apache | Tomcat | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-18556 | N-able | N-central | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-18577 | N-able | N-central | 2026-08-03 | 2026-08-06 | Unknown |
| CVE-2026-20316 | Cisco | Secure Firewall Management Center (FMC) | 2026-07-29 | 2026-08-01 | Known |
| CVE-2026-16812 | Arista | VeloCloud Orchestrator | 2026-07-27 | 2026-07-30 | Unknown |
| CVE-2025-68686 | Fortinet | FortiOS | 2026-07-27 | 2026-08-10 | Unknown |
| CVE-2026-50522 | Microsoft | SharePoint | 2026-07-22 | 2026-07-25 | Unknown |
| CVE-2026-16232 | Check Point | SmartConsole | 2026-07-22 | 2026-07-25 | Unknown |
| CVE-2026-63030 | WordPress | Core | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2026-60137 | WordPress | Core | 2026-07-21 | 2026-08-04 | Unknown |
| CVE-2026-0770 | Langflow | Langflow | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2021-27137 | DD-WRT | DD-WRT | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2026-58644 | Microsoft | SharePoint | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-39808 | Fortinet | FortiSandbox | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-25089 | Fortinet | FortiSandbox | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-46817 | Oracle | E-Business Suite | 2026-07-15 | 2026-07-18 | Unknown |
| CVE-2023-4346 | KNX Association | KNX Protocol Connection Authorization Option 1 | 2026-07-15 | 2026-07-29 | Unknown |
| CVE-2026-56164 | Microsoft | SharePoint Server | 2026-07-14 | 2026-07-17 | Unknown |
| CVE-2026-56155 | Microsoft | Active Directory Federation Services | 2026-07-14 | 2026-07-28 | Unknown |
| CVE-2026-15410 | SonicWall | SMA1000 Appliances | 2026-07-14 | 2026-07-17 | Known |
| CVE-2026-15409 | SonicWall | SMA1000 Appliances | 2026-07-14 | 2026-07-17 | Known |
| CVE-2008-4128 | Cisco | IOS | 2026-07-13 | 2026-07-16 | Unknown |
| CVE-2026-56291 | Balbooa | Forms | 2026-07-10 | 2026-07-13 | Unknown |
| CVE-2026-48939 | iCagenda | iCagenda | 2026-07-10 | 2026-07-13 | Unknown |
| CVE-2026-56290 | Joomlack | Page Builder | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-55255 | Langflow | Langflow | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-48908 | JoomShaper | SP Page Builder | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-48282 | Adobe | ColdFusion | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-45659 | Microsoft | SharePoint Server | 2026-07-01 | 2026-07-04 | Known |
| CVE-2026-48558 | SimpleHelp | SimpleHelp | 2026-06-29 | 2026-07-02 | Unknown |
| CVE-2026-20230 | Cisco | Unified Communications Manager | 2026-06-25 | 2026-06-28 | Unknown |
| CVE-2026-12569 | PTC | Windchill and FlexPLM | 2026-06-25 | 2026-06-28 | Known |
| CVE-2026-34910 | Ubiquiti | UniFi OS | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-34909 | Ubiquiti | UniFi OS | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-34908 | Ubiquiti | UniFi OS | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2025-67038 | Lantronix | EDS5000 | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-20253 | Splunk | Enterprise | 2026-06-18 | 2026-06-21 | Unknown |
| CVE-2026-48907 | Widget Factory | Joomla Content Editor | 2026-06-16 | 2026-06-19 | Unknown |
| CVE-2026-54420 | LiteSpeed | cPanel Plugin | 2026-06-15 | 2026-06-18 | Unknown |
| CVE-2026-20262 | Cisco | Catalyst SD-WAN Manager | 2026-06-15 | 2026-06-29 | Unknown |
| CVE-2026-35273 | Oracle | PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 | Known |
| CVE-2026-10520 | Ivanti | Sentry | 2026-06-11 | 2026-06-14 | Unknown |
| CVE-2026-7473 | Arista | Extensible Operating System | 2026-06-09 | 2026-06-23 | Unknown |
| CVE-2026-20245 | Cisco | Catalyst SD-WAN Manager | 2026-06-09 | 2026-06-23 | Unknown |
| CVE-2026-11645 | Chromium V8 | 2026-06-09 | 2026-06-23 | Unknown | |
| CVE-2026-50751 | Check Point | Security Gateway | 2026-06-08 | 2026-06-11 | Known |
| CVE-2026-42271 | BerriAI | LiteLLM | 2026-06-08 | 2026-06-22 | Unknown |
| CVE-2026-28318 | SolarWinds | Serv-U | 2026-06-05 | 2026-06-19 | Unknown |
| CVE-2026-45247 | Mirasvit | Mirasvit Full Page Cache Warmer | 2026-06-03 | 2026-06-06 | Unknown |
| CVE-2025-48595 | Android | Framework | 2026-06-02 | 2026-06-05 | Unknown |
| CVE-2022-0492 | Linux | Kernel | 2026-06-02 | 2026-06-05 | Unknown |
| CVE-2024-21182 | Oracle | WebLogic Server | 2026-06-01 | 2026-06-04 | Unknown |
| CVE-2026-0257 | Palo Alto Networks | PAN-OS | 2026-05-29 | 2026-06-01 | Known |
| CVE-2026-8398 | Daemon | Daemon Tools Lite | 2026-05-27 | 2026-05-30 | Unknown |
| CVE-2026-48027 | Nx | Nx Console | 2026-05-27 | 2026-06-10 | Known |
| CVE-2026-45321 | TanStack | TanStack | 2026-05-27 | 2026-06-10 | Known |
| CVE-2026-48172 | LiteSpeed | cPanel Plugin | 2026-05-26 | 2026-05-29 | Unknown |
| CVE-2026-9082 | Drupal | Core | 2026-05-22 | 2026-05-27 | Unknown |
| CVE-2026-34926 | Trend Micro | Apex One | 2026-05-21 | 2026-06-04 | Unknown |
| CVE-2025-34291 | Langflow | Langflow | 2026-05-21 | 2026-06-04 | Unknown |
| CVE-2026-45498 | Microsoft | Defender | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2026-41091 | Microsoft | Defender | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2010-0806 | Microsoft | Internet Explorer | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2010-0249 | Microsoft | Internet Explorer | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2009-3459 | Adobe | Acrobat and Reader | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2009-1537 | Microsoft | DirectX | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2008-4250 | Microsoft | Windows | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2026-42897 | Microsoft | Microsoft | 2026-05-15 | 2026-05-29 | Unknown |
| CVE-2026-20182 | Cisco | Catalyst SD-WAN | 2026-05-14 | 2026-05-17 | Unknown |
| CVE-2026-42208 | BerriAI | LiteLLM | 2026-05-08 | 2026-05-11 | Unknown |
| CVE-2026-6973 | Ivanti | Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2026-05-10 | Unknown |
| CVE-2026-0300 | Palo Alto Networks | PAN-OS | 2026-05-06 | 2026-05-09 | Unknown |
| CVE-2026-31431 | Linux | Kernel | 2026-05-01 | 2026-05-15 | Unknown |
| CVE-2026-41940 | WebPros | cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 2026-05-03 | Known |
| CVE-2026-32202 | Microsoft | Windows | 2026-04-28 | 2026-05-12 | Unknown |
| CVE-2024-1708 | ConnectWise | ScreenConnect | 2026-04-28 | 2026-05-12 | Known |
| CVE-2025-29635 | D-Link | DIR-823X | 2026-04-24 | 2026-05-08 | Unknown |
| CVE-2024-7399 | Samsung | MagicINFO 9 Server | 2026-04-24 | 2026-05-08 | Unknown |
| CVE-2024-57728 | SimpleHelp | SimpleHelp | 2026-04-24 | 2026-05-08 | Known |
| CVE-2024-57726 | SimpleHelp | SimpleHelp | 2026-04-24 | 2026-05-08 | Known |
| CVE-2026-39987 | Marimo | Marimo | 2026-04-23 | 2026-05-07 | Unknown |
| CVE-2026-33825 | Microsoft | Defender | 2026-04-22 | 2026-05-06 | Known |
| CVE-2026-20133 | Cisco | Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2026-20128 | Cisco | Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2026-20122 | Cisco | Catalyst SD-WAN Manger | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2025-48700 | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2025-32975 | Quest | KACE Systems Management Appliance (SMA) | 2026-04-20 | 2026-05-04 | Unknown |
| CVE-2025-2749 | Kentico | Kentico Xperience | 2026-04-20 | 2026-05-04 | Unknown |
| CVE-2024-27199 | JetBrains | TeamCity | 2026-04-20 | 2026-05-04 | Known |
| CVE-2023-27351 | PaperCut | NG/MF | 2026-04-20 | 2026-05-04 | Known |
| CVE-2026-34197 | Apache | ActiveMQ | 2026-04-16 | 2026-04-30 | Unknown |
| CVE-2026-32201 | Microsoft | SharePoint Server | 2026-04-14 | 2026-04-28 | Unknown |
| CVE-2009-0238 | Microsoft | Office | 2026-04-14 | 2026-04-28 | Unknown |
| CVE-2026-34621 | Adobe | Acrobat and Reader | 2026-04-13 | 2026-04-27 | Unknown |
| CVE-2026-21643 | Fortinet | FortiClient EMS | 2026-04-13 | 2026-04-16 | Unknown |
| CVE-2025-60710 | Microsoft | Windows | 2026-04-13 | 2026-04-27 | Known |
| CVE-2023-36424 | Microsoft | Windows | 2026-04-13 | 2026-04-27 | Unknown |
| CVE-2023-21529 | Microsoft | Exchange Server | 2026-04-13 | 2026-04-27 | Known |
| CVE-2020-9715 | Adobe | Acrobat | 2026-04-13 | 2026-04-27 | Unknown |
| CVE-2012-1854 | Microsoft | Visual Basic for Applications (VBA) | 2026-04-13 | 2026-04-27 | Unknown |
| CVE-2026-1340 | Ivanti | Endpoint Manager Mobile (EPMM) | 2026-04-08 | 2026-04-11 | Unknown |
| CVE-2026-35616 | Fortinet | FortiClient EMS | 2026-04-06 | 2026-04-09 | Unknown |
| CVE-2026-3502 | TrueConf | Client | 2026-04-02 | 2026-04-16 | Unknown |
| CVE-2026-5281 | Dawn | 2026-04-01 | 2026-04-15 | Unknown | |
| CVE-2026-3055 | Citrix | NetScaler | 2026-03-30 | 2026-04-02 | Unknown |
| CVE-2025-53521 | F5 | BIG-IP | 2026-03-27 | 2026-03-30 | Unknown |
| CVE-2026-33634 | Aquasecurity | Trivy | 2026-03-26 | 2026-04-09 | Unknown |
| CVE-2026-33017 | Langflow | Langflow | 2026-03-25 | 2026-04-08 | Unknown |
| CVE-2025-54068 | Laravel | Livewire | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2025-43520 | Apple | Multiple Products | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2025-43510 | Apple | Multiple Products | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2025-32432 | Craft CMS | Craft CMS | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2025-31277 | Apple | Multiple Products | 2026-03-20 | 2026-04-03 | Unknown |
| CVE-2026-20131 | Cisco | Secure Firewall Management Center (FMC) | 2026-03-19 | 2026-03-22 | Known |
| CVE-2026-20963 | Microsoft | SharePoint | 2026-03-18 | 2026-03-21 | Unknown |
| CVE-2025-66376 | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 2026-04-01 | Unknown |
| CVE-2025-47813 | Wing FTP Server | Wing FTP Server | 2026-03-16 | 2026-03-30 | Unknown |
| CVE-2026-3910 | Chromium V8 | 2026-03-13 | 2026-03-27 | Unknown | |
| CVE-2026-3909 | Skia | 2026-03-13 | 2026-03-27 | Unknown | |
| CVE-2025-68613 | n8n | n8n | 2026-03-11 | 2026-03-25 | Unknown |
| CVE-2026-1603 | Ivanti | Endpoint Manager (EPM) | 2026-03-09 | 2026-03-23 | Unknown |
| CVE-2025-26399 | SolarWinds | Web Help Desk | 2026-03-09 | 2026-03-12 | Known |
| CVE-2021-22054 | Omnissa | Workspace One UEM | 2026-03-09 | 2026-03-23 | Unknown |
| CVE-2023-43000 | Apple | Multiple Products | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2023-41974 | Apple | iOS and iPadOS | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2021-30952 | Apple | Multiple Products | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2021-22681 | Rockwell | Multiple Products | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2017-7921 | Hikvision | Multiple Products | 2026-03-05 | 2026-03-26 | Unknown |
| CVE-2026-22719 | Broadcom | VMware Aria Operations | 2026-03-03 | 2026-03-24 | Unknown |
| CVE-2026-21385 | Qualcomm | Multiple Chipsets | 2026-03-03 | 2026-03-24 | Unknown |
| CVE-2026-20127 | Cisco | Catalyst SD-WAN Controller and Manager | 2026-02-25 | 2026-02-27 | Unknown |
| CVE-2022-20775 | Cisco | SD-WAN | 2026-02-25 | 2026-02-27 | Unknown |
| CVE-2026-25108 | Soliton Systems K.K | FileZen | 2026-02-24 | 2026-03-17 | Unknown |
| CVE-2025-68461 | Roundcube | Webmail | 2026-02-20 | 2026-03-13 | Unknown |
| CVE-2025-49113 | Roundcube | Webmail | 2026-02-20 | 2026-03-13 | Unknown |
| CVE-2026-22769 | Dell | RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | 2026-02-21 | Unknown |
| CVE-2021-22175 | GitLab | GitLab | 2026-02-18 | 2026-03-11 | Unknown |
| CVE-2026-2441 | Chromium | 2026-02-17 | 2026-03-10 | Unknown |