VulnTideExploited vulnerabilities, by vendor. Data as of 28 Oct 2026.

Vulnerabilities added to CISA KEV in 2026

278 entries, newest first.

CVENameVendorAddedRansomware
CVE-2026-41709Broadcom VMWare ESX Insufficient Logging VulnerabilityBroadcom28 Oct 2026Unknown
CVE-2026-46300Linux Kernel Missing Initialization of a Variable VulnerabilityLinux28 Oct 2026Unknown
CVE-2026-111497Google Brotli Unchecked Return Value VulnerabilityGoogle27 Oct 2026Unknown
CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type VulnerabilityAdobe27 Oct 2026Unknown
CVE-2026-109618PHP Memory Corruption VulnerabilityPHP26 Oct 2026Unknown
CVE-2026-109619PHP Stale Internal Request-State VulnerabilityPHP26 Oct 2026Unknown
CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCollabora23 Oct 2026Unknown
CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection VulnerabilityArista23 Oct 2026Unknown
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions20 Oct 2026Unknown
CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens20 Oct 2026Unknown
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex20 Oct 2026Unknown
CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityPlex20 Oct 2026Unknown
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex20 Oct 2026Unknown
CVE-2026-96656Plex Media Server External Control of File Name or Path VulnerabilityPlex20 Oct 2026Unknown
CVE-2025-61624Fortinet Multiple Products Path Traversal VulnerabilityFortinet16 Oct 2026Unknown
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityBeyondTrust16 Oct 2026Unknown
CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityAtlassian15 Oct 2026Unknown
CVE-2026-0322Palo Alto Networks PAN-OS Code Injection VulnerabilityPalo Alto Networks14 Oct 2026Unknown
CVE-2026-105133Ahsay AhsayCBS Improper Authentication VulnerabilityAhsay14 Oct 2026Unknown
CVE-2026-105134Ahsay AhsayCBS Command Injection VulnerabilityAhsay14 Oct 2026Unknown
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCisco14 Oct 2026Unknown
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityIvanti13 Oct 2026Unknown
CVE-2026-96951Microsoft Windows Command Injection VulnerabilityMicrosoft13 Oct 2026Unknown
CVE-2015-3306ProFTPD Improper Access Control VulnerabilityProFTPD8 Oct 2026Unknown
CVE-2015-5477 ISC BIND Data Processing Errors VulnerabilityISC8 Oct 2026Unknown
CVE-2016-3081Apache Struts Command Injection VulnerabilityApache8 Oct 2026Unknown
CVE-2021-3199ONLYOFFICE Docs Server Path Traversal VulnerabilityONLYOFFICE8 Oct 2026Unknown
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information VulnerabilityStrapi8 Oct 2026Unknown
CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix4 Oct 2026Unknown
CVE-2026-102489Zammad GmbH Zammad Session Fixation VulnerabilityZammad2 Oct 2026Unknown
CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management VulnerabilityZammad2 Oct 2026Unknown
CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityFortinet1 Oct 2026Unknown
CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCisco30 Sep 2026Unknown
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityApple29 Sep 2026Unknown
CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityCitrix27 Sep 2026Unknown
CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix27 Sep 2026Unknown
CVE-2026-65660Microsoft SharePoint Code Injection VulnerabilityMicrosoft25 Sep 2026Unknown
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityMikroTik25 Sep 2026Unknown
CVE-2026-87902WordPress Core Remote File Inclusion VulnerabilityWordPress25 Sep 2026Unknown
CVE-2026-5430WSO2 Multiple Products Path Traversal Vulnerability WSO224 Sep 2026Unknown
CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe24 Sep 2026Unknown
CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityCheck Point22 Sep 2026Unknown
CVE-2026-93616Check Point Multiple Products Path Traversal VulnerabilityCheck Point22 Sep 2026Unknown
CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityArista22 Sep 2026Unknown
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityF522 Sep 2026Unknown
CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityZyxel21 Sep 2026Unknown
CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityLinux18 Sep 2026Unknown
CVE-2025-39964Linux Kernel Race Condition VulnerabilityLinux18 Sep 2026Unknown
CVE-2026-53266Linux Kernel Out-of-Bounds Write VulnerabilityLinux18 Sep 2026Unknown
CVE-2026-58704Google Pixel Improper Authorization VulnerabilityGoogle16 Sep 2026Unknown
CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCisco16 Sep 2026Unknown
CVE-2026-87886Acronis Backup Incorrect Default Permissions VulnerabilityAcronis16 Sep 2026Unknown
CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCisco14 Sep 2026Unknown
CVE-2026-42016JFrog Artifactory Incorrect Authorization VulnerabilityJFrog11 Sep 2026Unknown
CVE-2026-42018JFrog Artifactory Improper Authentication VulnerabilityJFrog11 Sep 2026Unknown
CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityConnectWise11 Sep 2026Unknown
CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityGitLab11 Sep 2026Unknown
CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityMikroTik10 Sep 2026Unknown
CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityMikroTik10 Sep 2026Unknown
CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityFortinet9 Sep 2026Unknown
CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityCitrix9 Sep 2026Unknown
CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCisco9 Sep 2026Unknown
CVE-2026-87491Google Chromium V8 Out of Bounds Write VulnerabilityGoogle9 Sep 2026Unknown
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityAdobe8 Sep 2026Unknown
CVE-2026-81963Microsoft Windows Link Following VulnerabilityMicrosoft8 Sep 2026Unknown
CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow VulnerabilityMicrosoft8 Sep 2026Unknown
CVE-2026-86218N-able N-central Static Code Injection VulnerabilityN-able8 Sep 2026Unknown
CVE-2026-85046Google Chromium V8 Type Confusion VulnerabilityGoogle4 Sep 2026Unknown
CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling VulnerabilityKludex2 Sep 2026Unknown
CVE-2026-49869Kestra OSS OS Command Injection VulnerabilityKestra2 Sep 2026Unknown
CVE-2026-59822BerriAI LiteLLM Improper Authentication VulnerabilityBerriAI2 Sep 2026Unknown
CVE-2026-82329JFrog Artifactory Improper Authentication VulnerabilityJFrog2 Sep 2026Unknown
CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySonicWall2 Sep 2026Unknown
CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection VulnerabilitySonicWall2 Sep 2026Unknown
CVE-2026-9586Sangoma Switchvox SQL Injection VulnerabilitySangoma2 Sep 2026Unknown
CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPaperCut31 Aug 2026Unknown
CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityPaperCut31 Aug 2026Unknown
CVE-2023-49105ownCloud Improper Authentication VulnerabilityownCloud27 Aug 2026Unknown
CVE-2026-53362Linux Kernel Unspecified VulnerabilityLinux27 Aug 2026Unknown
CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityJFrog27 Aug 2026Unknown
CVE-2015-3246Red Hat Libuser Race Condition VulnerabilityRed Hat26 Aug 2026Unknown
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityRed Hat26 Aug 2026Unknown
CVE-2019-1068Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft26 Aug 2026Unknown
CVE-2021-23758Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityAjax.NET Professional26 Aug 2026Unknown
CVE-2022-0995Linux Kernel Out-of-Bounds Write VulnerabilityLinux26 Aug 2026Unknown
CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix26 Aug 2026Unknown
CVE-2026-60004Gitea Code Injection VulnerabilityGitea25 Aug 2026Unknown
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityOracle24 Aug 2026Unknown
CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilitySynacor21 Aug 2026Unknown
CVE-2026-72529TrueConf Server Missing Authentication for Critical Function VulnerabilityTrueConf20 Aug 2026Unknown
CVE-2026-72530TrueConf Server Code Injection VulnerabilityTrueConf20 Aug 2026Unknown
CVE-2026-64849MLflow Server-Side Request Forgery VulnerabilityMLflow19 Aug 2026Unknown
CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityMicrosoft18 Aug 2026Unknown
CVE-2026-55040Microsoft SharePoint Weak Authentication VulnerabilityMicrosoft18 Aug 2026Unknown
CVE-2026-59310Broadcom VMware vCenter Path Traversal VulnerabilityBroadcom18 Aug 2026Known
CVE-2026-65400Apple macOS Improper Authentication VulnerabilityApple18 Aug 2026Unknown
CVE-2025-62593Ray-Project Ray Code Injection VulnerabilityRay-Project17 Aug 2026Unknown
CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityCisco11 Aug 2026Unknown
CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityMicrosoft11 Aug 2026Unknown
CVE-2026-72898Metabase SQL Injection VulnerabilityMetabase11 Aug 2026Unknown
CVE-2026-8037Progress LoadMaster Command Injection VulnerabilityProgress7 Aug 2026Unknown
CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityJetBrains5 Aug 2026Known
CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityN-able4 Aug 2026Unknown
CVE-2026-34486Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityApache4 Aug 2026Unknown
CVE-2026-9198IBM Langflow Code Injection VulnerabilityIBM4 Aug 2026Unknown
CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityN-able3 Aug 2026Unknown
CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityCisco29 Jul 2026Known
CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityFortinet27 Jul 2026Unknown
CVE-2026-16812Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityArista27 Jul 2026Unknown
CVE-2026-16232Check Point SmartConsole Improper Authentication VulnerabilityCheck Point22 Jul 2026Unknown
CVE-2026-50522Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft22 Jul 2026Unknown
CVE-2021-27137DD-WRT Stack-Based Buffer Overflow VulnerabilityDD-WRT21 Jul 2026Unknown
CVE-2026-0770Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityLangflow21 Jul 2026Unknown
CVE-2026-60137WordPress Core SQL Injection VulnerabilityWordPress21 Jul 2026Unknown
CVE-2026-63030WordPress Core Interpretation Conflict VulnerabilityWordPress21 Jul 2026Unknown
CVE-2026-25089Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet16 Jul 2026Unknown
CVE-2026-39808Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet16 Jul 2026Unknown
CVE-2026-58644Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityMicrosoft16 Jul 2026Unknown
CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityKNX Association15 Jul 2026Unknown
CVE-2026-46817Oracle E-Business Suite Improper Privilege Management VulnerabilityOracle15 Jul 2026Unknown
CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySonicWall14 Jul 2026Known
CVE-2026-15410SonicWall SMA1000 Appliances Code Injection VulnerabilitySonicWall14 Jul 2026Known
CVE-2026-56155Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft14 Jul 2026Unknown
CVE-2026-56164Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityMicrosoft14 Jul 2026Unknown
CVE-2008-4128Cisco IOS Cross-Site Request Forgery VulnerabilityCisco13 Jul 2026Unknown
CVE-2026-48939iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityiCagenda10 Jul 2026Unknown
CVE-2026-56291Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityBalbooa10 Jul 2026Unknown
CVE-2026-48282Adobe ColdFusion Path Traversal VulnerabilityAdobe7 Jul 2026Unknown
CVE-2026-48908JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityJoomShaper7 Jul 2026Unknown
CVE-2026-55255Langflow Authorization Bypass Through User-Controlled Key VulnerabilityLangflow7 Jul 2026Unknown
CVE-2026-56290Joomlack Page Builder Improper Access Control VulnerabilityJoomlack7 Jul 2026Unknown
CVE-2026-45659Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityMicrosoft1 Jul 2026Known
CVE-2026-48558SimpleHelp Authentication Bypass VulnerabilitySimpleHelp29 Jun 2026Unknown
CVE-2026-12569PTC Windchill and FlexPLM Improper Input Validation VulnerabilityPTC25 Jun 2026Known
CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityCisco25 Jun 2026Unknown
CVE-2025-67038Lantronix EDS5000 Code Injection VulnerabilityLantronix23 Jun 2026Unknown
CVE-2026-34908Ubiquiti UniFi OS Improper Access Control VulnerabilityUbiquiti23 Jun 2026Unknown
CVE-2026-34909Ubiquiti UniFi OS Path Traversal VulnerabilityUbiquiti23 Jun 2026Unknown
CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation VulnerabilityUbiquiti23 Jun 2026Unknown
CVE-2026-20253Splunk Enterprise Missing Authentication for Critical Function VulnerabilitySplunk18 Jun 2026Unknown
CVE-2026-48907Widget Factory Joomla Content Editor Improper Access Control VulnerabilityWidget Factory16 Jun 2026Unknown
CVE-2026-20262Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCisco15 Jun 2026Unknown
CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityLiteSpeed15 Jun 2026Unknown
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityOracle12 Jun 2026Known
CVE-2026-10520Ivanti Sentry OS Command Injection VulnerabilityIvanti11 Jun 2026Unknown
CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityGoogle9 Jun 2026Unknown
CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityCisco9 Jun 2026Unknown
CVE-2026-7473Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityArista9 Jun 2026Unknown
CVE-2026-42271BerriAI LiteLLM Command Injection VulnerabilityBerriAI8 Jun 2026Unknown
CVE-2026-50751Check Point Security Gateway Improper Authentication VulnerabilityCheck Point8 Jun 2026Known
CVE-2026-28318SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilitySolarWinds5 Jun 2026Unknown
CVE-2026-45247Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityMirasvit3 Jun 2026Unknown
CVE-2022-0492Linux Kernel Improper Authentication VulnerabilityLinux2 Jun 2026Unknown
CVE-2025-48595Android Framework Integer Overflow VulnerabilityAndroid2 Jun 2026Unknown
CVE-2024-21182Oracle WebLogic Server Unspecified VulnerabilityOracle1 Jun 2026Unknown
CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPalo Alto Networks29 May 2026Known
CVE-2026-45321TanStack Unspecified VulnerabilityTanStack27 May 2026Known
CVE-2026-48027Nx Console Embedded Malicious Code VulnerabilityNx27 May 2026Known
CVE-2026-8398Daemon Tools Lite Embedded Malicious Code VulnerabilityDaemon27 May 2026Unknown
CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityLiteSpeed26 May 2026Unknown
CVE-2026-9082Drupal Core SQL Injection VulnerabilityDrupal22 May 2026Unknown
CVE-2025-34291Langflow Origin Validation Error VulnerabilityLangflow21 May 2026Unknown
CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityTrend Micro21 May 2026Unknown
CVE-2008-4250Microsoft Windows Buffer Overflow VulnerabilityMicrosoft20 May 2026Unknown
CVE-2009-1537Microsoft DirectX NULL Byte Overwrite VulnerabilityMicrosoft20 May 2026Unknown
CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityAdobe20 May 2026Unknown
CVE-2010-0249Microsoft Internet Explorer Use-After-Free VulnerabilityMicrosoft20 May 2026Unknown
CVE-2010-0806Microsoft Internet Explorer Use-After-Free VulnerabilityMicrosoft20 May 2026Unknown
CVE-2026-41091Microsoft Defender Link Following VulnerabilityMicrosoft20 May 2026Unknown
CVE-2026-45498Microsoft Defender Denial of Service VulnerabilityMicrosoft20 May 2026Unknown
CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting VulnerabilityMicrosoft15 May 2026Unknown
CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco14 May 2026Unknown
CVE-2026-42208BerriAI LiteLLM SQL Injection VulnerabilityBerriAI8 May 2026Unknown
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityIvanti7 May 2026Unknown
CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPalo Alto Networks6 May 2026Unknown
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityLinux1 May 2026Unknown
CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityWebPros30 Apr 2026Known
CVE-2024-1708ConnectWise ScreenConnect Path Traversal VulnerabilityConnectWise28 Apr 2026Known
CVE-2026-32202Microsoft Windows Protection Mechanism Failure VulnerabilityMicrosoft28 Apr 2026Unknown
CVE-2024-57726SimpleHelp Missing Authorization VulnerabilitySimpleHelp24 Apr 2026Known
CVE-2024-57728SimpleHelp Path Traversal VulnerabilitySimpleHelp24 Apr 2026Known
CVE-2024-7399Samsung MagicINFO 9 Server Path Traversal VulnerabilitySamsung24 Apr 2026Unknown
CVE-2025-29635D-Link DIR-823X Command Injection VulnerabilityD-Link24 Apr 2026Unknown
CVE-2026-39987Marimo Remote Code Execution VulnerabilityMarimo23 Apr 2026Unknown
CVE-2026-33825Microsoft Defender Insufficient Granularity of Access Control VulnerabilityMicrosoft22 Apr 2026Known
CVE-2023-27351PaperCut NG/MF Improper Authentication VulnerabilityPaperCut20 Apr 2026Known
CVE-2024-27199JetBrains TeamCity Relative Path Traversal VulnerabilityJetBrains20 Apr 2026Known
CVE-2025-2749Kentico Xperience Path Traversal VulnerabilityKentico20 Apr 2026Unknown
CVE-2025-32975Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityQuest20 Apr 2026Unknown
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilitySynacor20 Apr 2026Unknown
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCisco20 Apr 2026Unknown
CVE-2026-20128Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCisco20 Apr 2026Unknown
CVE-2026-20133Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCisco20 Apr 2026Unknown
CVE-2026-34197Apache ActiveMQ Improper Input Validation VulnerabilityApache16 Apr 2026Unknown
CVE-2009-0238Microsoft Office Remote Code ExecutionMicrosoft14 Apr 2026Unknown
CVE-2026-32201Microsoft SharePoint Server Improper Input Validation VulnerabilityMicrosoft14 Apr 2026Unknown
CVE-2012-1854Microsoft Visual Basic for Applications Insecure Library Loading VulnerabilityMicrosoft13 Apr 2026Unknown
CVE-2020-9715Adobe Acrobat Use-After-Free VulnerabilityAdobe13 Apr 2026Unknown
CVE-2023-21529Microsoft Exchange Server Deserialization of Untrusted Data VulnerabilityMicrosoft13 Apr 2026Known
CVE-2023-36424Microsoft Windows Out-of-Bounds Read VulnerabilityMicrosoft13 Apr 2026Unknown
CVE-2025-60710Microsoft Windows Link Following VulnerabilityMicrosoft13 Apr 2026Known
CVE-2026-21643Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet13 Apr 2026Unknown
CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution VulnerabilityAdobe13 Apr 2026Unknown
CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityIvanti8 Apr 2026Unknown
CVE-2026-35616Fortinet FortiClient EMS Improper Access Control VulnerabilityFortinet6 Apr 2026Unknown
CVE-2026-3502TrueConf Client Download of Code Without Integrity Check VulnerabilityTrueConf2 Apr 2026Unknown
CVE-2026-5281Google Dawn Use-After-Free VulnerabilityGoogle1 Apr 2026Unknown
CVE-2026-3055Citrix NetScaler Out-of-Bounds Read VulnerabilityCitrix30 Mar 2026Unknown
CVE-2025-53521F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityF527 Mar 2026Unknown
CVE-2026-33634Aquasecurity Trivy Embedded Malicious Code VulnerabilityAquasecurity26 Mar 2026Unknown
CVE-2026-33017Langflow Code Injection VulnerabilityLangflow25 Mar 2026Unknown
CVE-2025-31277Apple Multiple Products Buffer Overflow VulnerabilityApple20 Mar 2026Unknown
CVE-2025-32432Craft CMS Code Injection VulnerabilityCraft CMS20 Mar 2026Unknown
CVE-2025-43510Apple Multiple Products Improper Locking VulnerabilityApple20 Mar 2026Unknown
CVE-2025-43520Apple Multiple Products Classic Buffer Overflow VulnerabilityApple20 Mar 2026Unknown
CVE-2025-54068Laravel Livewire Code Injection VulnerabilityLaravel20 Mar 2026Unknown
CVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityCisco19 Mar 2026Known
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilitySynacor18 Mar 2026Unknown
CVE-2026-20963Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityMicrosoft18 Mar 2026Unknown
CVE-2025-47813Wing FTP Server Information Disclosure VulnerabilityWing FTP Server16 Mar 2026Unknown
CVE-2026-3909Google Skia Out-of-Bounds Write VulnerabilityGoogle13 Mar 2026Unknown
CVE-2026-3910Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityGoogle13 Mar 2026Unknown
CVE-2025-68613n8n Improper Control of Dynamically-Managed Code Resources Vulnerabilityn8n11 Mar 2026Unknown
CVE-2021-22054Omnissa Workspace ONE Server-Side Request ForgeryOmnissa9 Mar 2026Unknown
CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilitySolarWinds9 Mar 2026Known
CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityIvanti9 Mar 2026Unknown
CVE-2017-7921Hikvision Multiple Products Improper Authentication VulnerabilityHikvision5 Mar 2026Unknown
CVE-2021-22681Rockwell Multiple Products Insufficient Protected Credentials VulnerabilityRockwell Automation5 Mar 2026Unknown
CVE-2021-30952Apple Multiple Products Integer Overflow or Wraparound VulnerabilityApple5 Mar 2026Unknown
CVE-2023-41974Apple iOS and iPadOS Use-After-Free VulnerabilityApple5 Mar 2026Unknown
CVE-2023-43000Apple Multiple products Use-After-Free VulnerabilityApple5 Mar 2026Unknown
CVE-2026-21385Qualcomm Multiple Chipsets Memory Corruption VulnerabilityQualcomm3 Mar 2026Unknown
CVE-2026-22719Broadcom VMware Aria Operations Command Injection VulnerabilityBroadcom3 Mar 2026Unknown
CVE-2022-20775Cisco SD-WAN Path Traversal VulnerabilityCisco25 Feb 2026Unknown
CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCisco25 Feb 2026Unknown
CVE-2026-25108Soliton Systems K.K FileZen OS Command Injection VulnerabilitySoliton Systems K.K24 Feb 2026Unknown
CVE-2025-49113RoundCube Webmail Deserialization of Untrusted Data VulnerabilityRoundcube20 Feb 2026Unknown
CVE-2025-68461RoundCube Webmail Cross-site Scripting VulnerabilityRoundcube20 Feb 2026Unknown
CVE-2021-22175GitLab Server-Side Request Forgery (SSRF) VulnerabilityGitLab18 Feb 2026Unknown
CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityDell18 Feb 2026Unknown
CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution VulnerabilityMicrosoft17 Feb 2026Unknown
CVE-2020-7796Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery VulnerabilitySynacor17 Feb 2026Unknown
CVE-2024-7694TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type VulnerabilityTeamT517 Feb 2026Unknown
CVE-2026-2441Google Chromium CSS Use-After-Free VulnerabilityGoogle17 Feb 2026Unknown
CVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityBeyondTrust13 Feb 2026Known
CVE-2024-43468Microsoft Configuration Manager SQL Injection VulnerabilityMicrosoft12 Feb 2026Unknown
CVE-2025-15556Notepad++ Download of Code Without Integrity Check VulnerabilityNotepad++12 Feb 2026Unknown
CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass VulnerabilitySolarWinds12 Feb 2026Unknown
CVE-2026-20700Apple Multiple Buffer Overflow VulnerabilityApple12 Feb 2026Unknown
CVE-2026-21510Microsoft Windows Shell Protection Mechanism Failure VulnerabilityMicrosoft10 Feb 2026Unknown
CVE-2026-21513Microsoft MSHTML Framework Protection Mechanism Failure VulnerabilityMicrosoft10 Feb 2026Unknown
CVE-2026-21514Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision VulnerabilityMicrosoft10 Feb 2026Unknown
CVE-2026-21519Microsoft Windows Type Confusion VulnerabilityMicrosoft10 Feb 2026Unknown
CVE-2026-21525Microsoft Windows NULL Pointer Dereference VulnerabilityMicrosoft10 Feb 2026Unknown
CVE-2026-21533Microsoft Windows Improper Privilege Management VulnerabilityMicrosoft10 Feb 2026Unknown
CVE-2025-11953React Native Community CLI OS Command Injection VulnerabilityReact Native Community5 Feb 2026Unknown
CVE-2026-24423SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilitySmarterTools5 Feb 2026Known
CVE-2019-19006 Sangoma FreePBX Improper Authentication VulnerabilitySangoma3 Feb 2026Unknown
CVE-2021-39935GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityGitLab3 Feb 2026Unknown
CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilitySolarWinds3 Feb 2026Unknown
CVE-2025-64328Sangoma FreePBX OS Command Injection VulnerabilitySangoma3 Feb 2026Unknown
CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityIvanti29 Jan 2026Unknown
CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityFortinet27 Jan 2026Unknown
CVE-2018-14634Linux Kernel Integer Overflow VulnerabilityLinux26 Jan 2026Unknown
CVE-2025-52691SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilitySmarterTools26 Jan 2026Known
CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityMicrosoft26 Jan 2026Unknown
CVE-2026-23760SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilitySmarterTools26 Jan 2026Known
CVE-2026-24061GNU InetUtils Argument Injection VulnerabilityGNU26 Jan 2026Unknown
CVE-2024-37079Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityBroadcom23 Jan 2026Unknown
CVE-2025-31125Vite Vitejs Improper Access Control VulnerabilityVite22 Jan 2026Unknown
CVE-2025-34026Versa Concerto Improper Authentication VulnerabilityVersa22 Jan 2026Unknown
CVE-2025-54313Prettier eslint-config-prettier Embedded Malicious Code VulnerabilityPrettier22 Jan 2026Unknown
CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilitySynacor22 Jan 2026Unknown
CVE-2026-20045Cisco Unified Communications Products Code Injection VulnerabilityCisco21 Jan 2026Unknown
CVE-2026-20805Microsoft Windows Information Disclosure VulnerabilityMicrosoft13 Jan 2026Unknown
CVE-2025-8110Gogs Path Traversal VulnerabilityGogs12 Jan 2026Unknown
CVE-2009-0556Microsoft Office PowerPoint Code Injection VulnerabilityMicrosoft7 Jan 2026Unknown
CVE-2025-37164Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityHewlett Packard Enterprise7 Jan 2026Unknown

Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.28, as of 28 Oct 2026. About the data.

All years