Tue, Oct 20, 2026KEV catalog 2026.09.23
Live data

Known Exploited Vulnerabilities watch

Every vulnerability CISA confirms is being exploited in the wild, newest first. Mirrored from the official catalog (version 2026.09.23, 1721 entries). Federal agencies must fix each one by its due date; everyone else should treat the list as a patch-priority queue.

CVEVendorProductAddedFix byRansomware use
CVE-2026-94127F5BIG-IP APM2026-09-222026-09-25Unknown
CVE-2026-93952AristaVeloCloud Orchestrator2026-09-222026-09-25Unknown
CVE-2026-93616Check PointMultiple Products2026-09-222026-09-25Unknown
CVE-2026-85102Check PointMultiple Products2026-09-222026-09-25Unknown
CVE-2026-7273ZyxelGS1900 Series Switches2026-09-212026-09-24Unknown
CVE-2026-53266LinuxKernel2026-09-182026-09-21Unknown
CVE-2025-39964LinuxKernel2026-09-182026-09-21Unknown
CVE-2025-39682LinuxKernel2026-09-182026-09-21Unknown
CVE-2026-87886AcronisBackup2026-09-162026-09-19Unknown
CVE-2026-76460CiscoIdentity Services Engine2026-09-162026-09-19Unknown
CVE-2026-58704GooglePixel2026-09-162026-09-19Unknown
CVE-2026-76461CiscoSecure Email Gateway2026-09-142026-09-17Unknown
CVE-2026-85706GitLabCommunity Edition and Enterprise Edition2026-09-112026-09-14Unknown
CVE-2026-84869ConnectWiseScreenConnect2026-09-112026-09-14Unknown
CVE-2026-42018JFrogArtifactory2026-09-112026-09-25Unknown
CVE-2026-42016JFrogArtifactory2026-09-112026-09-25Unknown
CVE-2026-86060MikroTikRouterOS2026-09-102026-09-13Unknown
CVE-2026-67277MikroTikRouterOS2026-09-102026-09-13Unknown
CVE-2026-87491GoogleChromium V82026-09-092026-09-23Unknown
CVE-2026-20079CiscoSecure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management2026-09-092026-09-12Unknown
CVE-2026-19490CitrixNetScaler2026-09-092026-09-12Unknown
CVE-2025-25249FortinetMultiple Products2026-09-092026-09-12Unknown
CVE-2026-86218N-ableN-central2026-09-082026-09-11Unknown
CVE-2026-85880MicrosoftWindows2026-09-082026-09-22Unknown
CVE-2026-81963MicrosoftWindows2026-09-082026-09-22Unknown
CVE-2026-75650AdobeCommerce and Magento2026-09-082026-09-11Unknown
CVE-2026-85046GoogleChromium V82026-09-042026-09-18Unknown
CVE-2026-9586SangomaSwitchvox2026-09-022026-09-05Unknown
CVE-2026-83549SonicWallSMA1000 Appliances2026-09-022026-09-05Unknown
CVE-2026-83548SonicWallSMA1000 Appliances2026-09-022026-09-05Unknown
CVE-2026-82329JFrogArtifactory2026-09-022026-09-05Unknown
CVE-2026-59822BerriAILiteLLM2026-09-022026-09-16Unknown
CVE-2026-49869KestraKestra OSS2026-09-022026-09-05Unknown
CVE-2026-48710KludexStarlette2026-09-022026-09-16Unknown
CVE-2026-82078PaperCutNG/MF2026-08-312026-09-14Unknown
CVE-2026-81578PaperCutNG/MF2026-08-312026-09-14Unknown
CVE-2026-66384JFrogArtifactory2026-08-272026-09-10Unknown
CVE-2026-53362LinuxKernel2026-08-272026-08-30Unknown
CVE-2023-49105ownCloudownCloud2026-08-272026-08-30Unknown
CVE-2026-8452CitrixNetScaler ADC and NetScaler Gateway2026-08-262026-08-29Unknown
CVE-2022-0995LinuxKernel2026-08-262026-09-09Unknown
CVE-2021-23758Ajax.NET ProfessionalAjax.NET Professional2026-08-262026-09-09Unknown
CVE-2019-1068MicrosoftSQL Server2026-08-262026-08-29Unknown
CVE-2015-5287Red HatAutomatic Bug Reporting Tool2026-08-262026-09-09Unknown
CVE-2015-3246Red HatLibuser2026-08-262026-09-09Unknown
CVE-2026-60004GiteaGitea2026-08-252026-08-28Unknown
CVE-2026-21962OracleHTTP Server and Oracle Weblogic Server Proxy Plug-in2026-08-242026-08-27Unknown
CVE-2026-73570SynacorZimbra Collaboration Suite (ZCS)2026-08-212026-08-24Unknown
CVE-2026-72530TrueConfServer2026-08-202026-09-03Unknown
CVE-2026-72529TrueConfServer2026-08-202026-08-23Unknown
CVE-2026-64849MLflowMLflow2026-08-192026-09-02Unknown
CVE-2026-65400ApplemacOS2026-08-182026-08-21Unknown
CVE-2026-59310BroadcomVMware vCenter2026-08-182026-08-21Known
CVE-2026-55040MicrosoftSharePoint2026-08-182026-08-21Unknown
CVE-2026-33824MicrosoftInternet Key Exchange (IKE) Service Extensions2026-08-182026-08-21Unknown
CVE-2025-62593Ray-ProjectRay2026-08-172026-08-20Unknown
CVE-2026-72898MetabaseMetabase2026-08-112026-08-14Unknown
CVE-2026-68820MicrosoftWindows Ancillary Function Driver for WinSock 2026-08-112026-08-25Unknown
CVE-2026-20349CiscoSecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) 2026-08-112026-08-14Unknown
CVE-2026-8037ProgressLoadMaster2026-08-072026-08-10Unknown
CVE-2026-63077JetBrainsTeamCity2026-08-052026-08-08Known
CVE-2026-9198IBMLangflow2026-08-042026-08-07Unknown
CVE-2026-34486ApacheTomcat2026-08-042026-08-07Unknown
CVE-2026-18556N-ableN-central2026-08-042026-08-07Unknown
CVE-2026-18577N-ableN-central2026-08-032026-08-06Unknown
CVE-2026-20316CiscoSecure Firewall Management Center (FMC)2026-07-292026-08-01Known
CVE-2026-16812AristaVeloCloud Orchestrator2026-07-272026-07-30Unknown
CVE-2025-68686FortinetFortiOS2026-07-272026-08-10Unknown
CVE-2026-50522MicrosoftSharePoint2026-07-222026-07-25Unknown
CVE-2026-16232Check PointSmartConsole2026-07-222026-07-25Unknown
CVE-2026-63030WordPressCore2026-07-212026-07-24Unknown
CVE-2026-60137WordPressCore2026-07-212026-08-04Unknown
CVE-2026-0770LangflowLangflow2026-07-212026-07-24Unknown
CVE-2021-27137DD-WRTDD-WRT2026-07-212026-07-24Unknown
CVE-2026-58644MicrosoftSharePoint2026-07-162026-07-19Unknown
CVE-2026-39808FortinetFortiSandbox2026-07-162026-07-19Unknown
CVE-2026-25089FortinetFortiSandbox2026-07-162026-07-19Unknown
CVE-2026-46817OracleE-Business Suite2026-07-152026-07-18Unknown
CVE-2023-4346KNX AssociationKNX Protocol Connection Authorization Option 12026-07-152026-07-29Unknown
CVE-2026-56164MicrosoftSharePoint Server2026-07-142026-07-17Unknown
CVE-2026-56155MicrosoftActive Directory Federation Services2026-07-142026-07-28Unknown
CVE-2026-15410SonicWallSMA1000 Appliances2026-07-142026-07-17Known
CVE-2026-15409SonicWallSMA1000 Appliances2026-07-142026-07-17Known
CVE-2008-4128CiscoIOS2026-07-132026-07-16Unknown
CVE-2026-56291BalbooaForms2026-07-102026-07-13Unknown
CVE-2026-48939iCagendaiCagenda2026-07-102026-07-13Unknown
CVE-2026-56290JoomlackPage Builder2026-07-072026-07-10Unknown
CVE-2026-55255LangflowLangflow2026-07-072026-07-10Unknown
CVE-2026-48908JoomShaperSP Page Builder2026-07-072026-07-10Unknown
CVE-2026-48282AdobeColdFusion2026-07-072026-07-10Unknown
CVE-2026-45659MicrosoftSharePoint Server2026-07-012026-07-04Known
CVE-2026-48558SimpleHelp SimpleHelp2026-06-292026-07-02Unknown
CVE-2026-20230CiscoUnified Communications Manager2026-06-252026-06-28Unknown
CVE-2026-12569PTCWindchill and FlexPLM2026-06-252026-06-28Known
CVE-2026-34910UbiquitiUniFi OS2026-06-232026-06-26Unknown
CVE-2026-34909UbiquitiUniFi OS2026-06-232026-06-26Unknown
CVE-2026-34908UbiquitiUniFi OS2026-06-232026-06-26Unknown
CVE-2025-67038LantronixEDS50002026-06-232026-06-26Unknown
CVE-2026-20253SplunkEnterprise2026-06-182026-06-21Unknown
CVE-2026-48907Widget FactoryJoomla Content Editor 2026-06-162026-06-19Unknown
CVE-2026-54420LiteSpeedcPanel Plugin2026-06-152026-06-18Unknown
CVE-2026-20262CiscoCatalyst SD-WAN Manager2026-06-152026-06-29Unknown
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools2026-06-122026-06-15Known
CVE-2026-10520IvantiSentry2026-06-112026-06-14Unknown
CVE-2026-7473AristaExtensible Operating System2026-06-092026-06-23Unknown
CVE-2026-20245CiscoCatalyst SD-WAN Manager2026-06-092026-06-23Unknown
CVE-2026-11645GoogleChromium V82026-06-092026-06-23Unknown
CVE-2026-50751Check PointSecurity Gateway2026-06-082026-06-11Known
CVE-2026-42271BerriAILiteLLM2026-06-082026-06-22Unknown
CVE-2026-28318SolarWindsServ-U2026-06-052026-06-19Unknown
CVE-2026-45247MirasvitMirasvit Full Page Cache Warmer2026-06-032026-06-06Unknown
CVE-2025-48595AndroidFramework2026-06-022026-06-05Unknown
CVE-2022-0492LinuxKernel2026-06-022026-06-05Unknown
CVE-2024-21182OracleWebLogic Server2026-06-012026-06-04Unknown
CVE-2026-0257Palo Alto NetworksPAN-OS2026-05-292026-06-01Known
CVE-2026-8398DaemonDaemon Tools Lite2026-05-272026-05-30Unknown
CVE-2026-48027NxNx Console2026-05-272026-06-10Known
CVE-2026-45321TanStackTanStack2026-05-272026-06-10Known
CVE-2026-48172LiteSpeedcPanel Plugin2026-05-262026-05-29Unknown
CVE-2026-9082DrupalCore2026-05-222026-05-27Unknown
CVE-2026-34926Trend MicroApex One2026-05-212026-06-04Unknown
CVE-2025-34291LangflowLangflow2026-05-212026-06-04Unknown
CVE-2026-45498MicrosoftDefender2026-05-202026-06-03Unknown
CVE-2026-41091MicrosoftDefender2026-05-202026-06-03Unknown
CVE-2010-0806MicrosoftInternet Explorer2026-05-202026-06-03Unknown
CVE-2010-0249MicrosoftInternet Explorer2026-05-202026-06-03Unknown
CVE-2009-3459AdobeAcrobat and Reader2026-05-202026-06-03Unknown
CVE-2009-1537MicrosoftDirectX2026-05-202026-06-03Unknown
CVE-2008-4250MicrosoftWindows2026-05-202026-06-03Unknown
CVE-2026-42897MicrosoftMicrosoft2026-05-152026-05-29Unknown
CVE-2026-20182CiscoCatalyst SD-WAN2026-05-142026-05-17Unknown
CVE-2026-42208BerriAILiteLLM2026-05-082026-05-11Unknown
CVE-2026-6973IvantiEndpoint Manager Mobile (EPMM)2026-05-072026-05-10Unknown
CVE-2026-0300Palo Alto NetworksPAN-OS2026-05-062026-05-09Unknown
CVE-2026-31431LinuxKernel2026-05-012026-05-15Unknown
CVE-2026-41940WebProscPanel & WHM and WP2 (WordPress Squared)2026-04-302026-05-03Known
CVE-2026-32202MicrosoftWindows2026-04-282026-05-12Unknown
CVE-2024-1708ConnectWiseScreenConnect2026-04-282026-05-12Known
CVE-2025-29635D-LinkDIR-823X2026-04-242026-05-08Unknown
CVE-2024-7399SamsungMagicINFO 9 Server2026-04-242026-05-08Unknown
CVE-2024-57728SimpleHelp SimpleHelp2026-04-242026-05-08Known
CVE-2024-57726SimpleHelp SimpleHelp2026-04-242026-05-08Known
CVE-2026-39987MarimoMarimo2026-04-232026-05-07Unknown
CVE-2026-33825MicrosoftDefender2026-04-222026-05-06Known
CVE-2026-20133CiscoCatalyst SD-WAN Manager2026-04-202026-04-23Unknown
CVE-2026-20128CiscoCatalyst SD-WAN Manager2026-04-202026-04-23Unknown
CVE-2026-20122CiscoCatalyst SD-WAN Manger2026-04-202026-04-23Unknown
CVE-2025-48700SynacorZimbra Collaboration Suite (ZCS)2026-04-202026-04-23Unknown
CVE-2025-32975QuestKACE Systems Management Appliance (SMA)2026-04-202026-05-04Unknown
CVE-2025-2749KenticoKentico Xperience2026-04-202026-05-04Unknown
CVE-2024-27199JetBrainsTeamCity2026-04-202026-05-04Known
CVE-2023-27351PaperCutNG/MF2026-04-202026-05-04Known
CVE-2026-34197ApacheActiveMQ2026-04-162026-04-30Unknown
CVE-2026-32201MicrosoftSharePoint Server2026-04-142026-04-28Unknown
CVE-2009-0238MicrosoftOffice2026-04-142026-04-28Unknown
CVE-2026-34621AdobeAcrobat and Reader2026-04-132026-04-27Unknown
CVE-2026-21643FortinetFortiClient EMS2026-04-132026-04-16Unknown
CVE-2025-60710MicrosoftWindows2026-04-132026-04-27Known
CVE-2023-36424MicrosoftWindows2026-04-132026-04-27Unknown
CVE-2023-21529MicrosoftExchange Server2026-04-132026-04-27Known
CVE-2020-9715AdobeAcrobat2026-04-132026-04-27Unknown
CVE-2012-1854MicrosoftVisual Basic for Applications (VBA)2026-04-132026-04-27Unknown
CVE-2026-1340IvantiEndpoint Manager Mobile (EPMM)2026-04-082026-04-11Unknown
CVE-2026-35616FortinetFortiClient EMS2026-04-062026-04-09Unknown
CVE-2026-3502TrueConfClient2026-04-022026-04-16Unknown
CVE-2026-5281GoogleDawn2026-04-012026-04-15Unknown
CVE-2026-3055CitrixNetScaler2026-03-302026-04-02Unknown
CVE-2025-53521F5BIG-IP2026-03-272026-03-30Unknown
CVE-2026-33634AquasecurityTrivy2026-03-262026-04-09Unknown
CVE-2026-33017LangflowLangflow2026-03-252026-04-08Unknown
CVE-2025-54068LaravelLivewire2026-03-202026-04-03Unknown
CVE-2025-43520AppleMultiple Products2026-03-202026-04-03Unknown
CVE-2025-43510AppleMultiple Products2026-03-202026-04-03Unknown
CVE-2025-32432Craft CMSCraft CMS2026-03-202026-04-03Unknown
CVE-2025-31277AppleMultiple Products2026-03-202026-04-03Unknown
CVE-2026-20131CiscoSecure Firewall Management Center (FMC)2026-03-192026-03-22Known
CVE-2026-20963MicrosoftSharePoint2026-03-182026-03-21Unknown
CVE-2025-66376SynacorZimbra Collaboration Suite (ZCS)2026-03-182026-04-01Unknown
CVE-2025-47813Wing FTP ServerWing FTP Server2026-03-162026-03-30Unknown
CVE-2026-3910GoogleChromium V82026-03-132026-03-27Unknown
CVE-2026-3909GoogleSkia2026-03-132026-03-27Unknown
CVE-2025-68613n8nn8n2026-03-112026-03-25Unknown
CVE-2026-1603Ivanti Endpoint Manager (EPM)2026-03-092026-03-23Unknown
CVE-2025-26399SolarWindsWeb Help Desk2026-03-092026-03-12Known
CVE-2021-22054OmnissaWorkspace One UEM2026-03-092026-03-23Unknown
CVE-2023-43000AppleMultiple Products2026-03-052026-03-26Unknown
CVE-2023-41974AppleiOS and iPadOS2026-03-052026-03-26Unknown
CVE-2021-30952AppleMultiple Products2026-03-052026-03-26Unknown
CVE-2021-22681RockwellMultiple Products2026-03-052026-03-26Unknown
CVE-2017-7921HikvisionMultiple Products2026-03-052026-03-26Unknown
CVE-2026-22719BroadcomVMware Aria Operations2026-03-032026-03-24Unknown
CVE-2026-21385QualcommMultiple Chipsets2026-03-032026-03-24Unknown
CVE-2026-20127CiscoCatalyst SD-WAN Controller and Manager2026-02-252026-02-27Unknown
CVE-2022-20775CiscoSD-WAN2026-02-252026-02-27Unknown
CVE-2026-25108Soliton Systems K.KFileZen2026-02-242026-03-17Unknown
CVE-2025-68461RoundcubeWebmail2026-02-202026-03-13Unknown
CVE-2025-49113RoundcubeWebmail2026-02-202026-03-13Unknown
CVE-2026-22769DellRecoverPoint for Virtual Machines (RP4VMs)2026-02-182026-02-21Unknown
CVE-2021-22175GitLabGitLab2026-02-182026-03-11Unknown
CVE-2026-2441GoogleChromium2026-02-172026-03-10Unknown

Showing the latest 200 entries. Source: CISA Known Exploited Vulnerabilities catalog.