Live data
Known Exploited Vulnerabilities watch
Every vulnerability CISA confirms is being exploited in the wild, newest first. Mirrored from the official catalog (version 2026.10.30, 1766 entries). Federal agencies must fix each one by its due date; everyone else should treat the list as a patch-priority queue.
| CVE | Vendor | Product | Added | Fix by | Ransomware use |
|---|---|---|---|---|---|
| CVE-2026-118527 | Ivanti | Connect Secure | 2026-10-30 | 2026-11-13 | Unknown |
| CVE-2026-111357 | Ivanti | Connect Secure | 2026-10-30 | 2026-11-02 | Unknown |
| CVE-2026-97229 | GitLab | Community Edition and Enterprise Edition | 2026-10-29 | 2026-11-01 | Unknown |
| CVE-2026-76418 | Cisco | Secure Firewall ASA Software and Cisco Secure FTD Software | 2026-10-29 | 2026-11-01 | Unknown |
| CVE-2026-46300 | Linux | Kernel | 2026-10-28 | 2026-10-31 | Unknown |
| CVE-2026-41709 | Broadcom | VMware ESX | 2026-10-28 | 2026-11-11 | Unknown |
| CVE-2026-48356 | Adobe | Commerce and Magento | 2026-10-27 | 2026-11-10 | Unknown |
| CVE-2026-111497 | Brotli | 2026-10-27 | 2026-11-10 | Unknown | |
| CVE-2026-109619 | PHP Group | PHP | 2026-10-26 | 2026-10-29 | Unknown |
| CVE-2026-109618 | PHP Group | PHP | 2026-10-26 | 2026-10-29 | Unknown |
| CVE-2026-114625 | Arista | VeloCloud Orchestrator | 2026-10-23 | 2026-10-26 | Unknown |
| CVE-2026-110447 | Collabora | Collabora Online – Built-in CODE Server | 2026-10-23 | 2026-10-26 | Unknown |
| CVE-2026-96656 | Plex | Media Server | 2026-10-20 | 2026-10-23 | Unknown |
| CVE-2026-96655 | Plex | Media Server | 2026-10-20 | 2026-11-03 | Unknown |
| CVE-2026-96654 | Plex | Media Server | 2026-10-20 | 2026-10-23 | Unknown |
| CVE-2026-96652 | Plex | Media Server | 2026-10-20 | 2026-11-03 | Unknown |
| CVE-2026-110936 | Siemens | Software Center | 2026-10-20 | 2026-11-03 | Unknown |
| CVE-2026-106931 | EG Secure Solutions | SiteGuard Server Edition | 2026-10-20 | 2026-10-23 | Unknown |
| CVE-2026-102764 | BeyondTrust | Remote Support | 2026-10-16 | 2026-10-19 | Unknown |
| CVE-2025-61624 | Fortinet | Multiple Products | 2026-10-16 | 2026-10-19 | Unknown |
| CVE-2026-21589 | Atlassian | Multiple Products | 2026-10-15 | 2026-10-18 | Unknown |
| CVE-2026-76519 | Cisco | Secure Email Gateway | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-105134 | Ahsay | AhsayCBS | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-105133 | Ahsay | AhsayCBS | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-0322 | Palo Alto Networks | PAN-OS | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-96951 | Microsoft | Windows | 2026-10-13 | 2026-10-16 | Unknown |
| CVE-2026-104935 | Ivanti | Connect Secure | 2026-10-13 | 2026-10-16 | Unknown |
| CVE-2023-22894 | Strapi | Strapi | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2021-3199 | ONLYOFFICE | Docs | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2016-3081 | Apache | Struts | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2015-5477 | ISC | BIND | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2015-3306 | ProFTPD | ProFTPD | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2026-88779 | Citrix | NetScaler | 2026-10-04 | 2026-10-07 | Unknown |
| CVE-2026-102490 | Zammad GmbH | Zammad | 2026-10-02 | 2026-10-05 | Unknown |
| CVE-2026-102489 | Zammad GmbH | Zammad | 2026-10-02 | 2026-10-05 | Unknown |
| CVE-2026-104286 | Fortinet | FortiMail | 2026-10-01 | 2026-10-04 | Unknown |
| CVE-2026-76504 | Cisco | Catalyst SD-WAN Manager | 2026-09-30 | 2026-10-03 | Unknown |
| CVE-2026-86950 | Apple | Multiple Products | 2026-09-29 | 2026-10-13 | Unknown |
| CVE-2026-88772 | Citrix | NetScaler | 2026-09-27 | 2026-09-30 | Unknown |
| CVE-2026-88771 | Citrix | NetScaler | 2026-09-27 | 2026-09-30 | Unknown |
| CVE-2026-87902 | WordPress | Core | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-67279 | MikroTik | RouterOS | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-65660 | Microsoft | SharePoint | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-71362 | Adobe | Commerce and Magento | 2026-09-24 | 2026-09-27 | Unknown |
| CVE-2026-5430 | WSO2 | Multiple Products | 2026-09-24 | 2026-09-27 | Unknown |
| CVE-2026-94127 | F5 | BIG-IP APM | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-93952 | Arista | VeloCloud Orchestrator | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-93616 | Check Point | Multiple Products | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-85102 | Check Point | Multiple Products | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-7273 | Zyxel | GS1900 Series Switches | 2026-09-21 | 2026-09-24 | Unknown |
| CVE-2026-53266 | Linux | Kernel | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2025-39964 | Linux | Kernel | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2025-39682 | Linux | Kernel | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2026-87886 | Acronis | Backup | 2026-09-16 | 2026-09-19 | Unknown |
| CVE-2026-76460 | Cisco | Identity Services Engine | 2026-09-16 | 2026-09-19 | Unknown |
| CVE-2026-58704 | Pixel | 2026-09-16 | 2026-09-19 | Unknown | |
| CVE-2026-76461 | Cisco | Secure Email Gateway | 2026-09-14 | 2026-09-17 | Unknown |
| CVE-2026-85706 | GitLab | Community Edition and Enterprise Edition | 2026-09-11 | 2026-09-14 | Unknown |
| CVE-2026-84869 | ConnectWise | ScreenConnect | 2026-09-11 | 2026-09-14 | Unknown |
| CVE-2026-42018 | JFrog | Artifactory | 2026-09-11 | 2026-09-25 | Unknown |
| CVE-2026-42016 | JFrog | Artifactory | 2026-09-11 | 2026-09-25 | Unknown |
| CVE-2026-86060 | MikroTik | RouterOS | 2026-09-10 | 2026-09-13 | Unknown |
| CVE-2026-67277 | MikroTik | RouterOS | 2026-09-10 | 2026-09-13 | Unknown |
| CVE-2026-87491 | Chromium V8 | 2026-09-09 | 2026-09-23 | Unknown | |
| CVE-2026-20079 | Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2026-19490 | Citrix | NetScaler | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2025-25249 | Fortinet | Multiple Products | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2026-86218 | N-able | N-central | 2026-09-08 | 2026-09-11 | Unknown |
| CVE-2026-85880 | Microsoft | Windows | 2026-09-08 | 2026-09-22 | Unknown |
| CVE-2026-81963 | Microsoft | Windows | 2026-09-08 | 2026-09-22 | Unknown |
| CVE-2026-75650 | Adobe | Commerce and Magento | 2026-09-08 | 2026-09-11 | Unknown |
| CVE-2026-85046 | Chromium V8 | 2026-09-04 | 2026-09-18 | Unknown | |
| CVE-2026-9586 | Sangoma | Switchvox | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-83549 | SonicWall | SMA1000 Appliances | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-83548 | SonicWall | SMA1000 Appliances | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-82329 | JFrog | Artifactory | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-59822 | BerriAI | LiteLLM | 2026-09-02 | 2026-09-16 | Unknown |
| CVE-2026-49869 | Kestra | Kestra OSS | 2026-09-02 | 2026-09-05 | Unknown |
| CVE-2026-48710 | Kludex | Starlette | 2026-09-02 | 2026-09-16 | Unknown |
| CVE-2026-82078 | PaperCut | NG/MF | 2026-08-31 | 2026-09-14 | Unknown |
| CVE-2026-81578 | PaperCut | NG/MF | 2026-08-31 | 2026-09-14 | Unknown |
| CVE-2026-66384 | JFrog | Artifactory | 2026-08-27 | 2026-09-10 | Unknown |
| CVE-2026-53362 | Linux | Kernel | 2026-08-27 | 2026-08-30 | Unknown |
| CVE-2023-49105 | ownCloud | ownCloud | 2026-08-27 | 2026-08-30 | Unknown |
| CVE-2026-8452 | Citrix | NetScaler ADC and NetScaler Gateway | 2026-08-26 | 2026-08-29 | Unknown |
| CVE-2022-0995 | Linux | Kernel | 2026-08-26 | 2026-08-29 | Unknown |
| CVE-2021-23758 | Ajax.NET Professional | Ajax.NET Professional | 2026-08-26 | 2026-09-09 | Unknown |
| CVE-2019-1068 | Microsoft | SQL Server | 2026-08-26 | 2026-08-29 | Unknown |
| CVE-2015-5287 | Red Hat | Automatic Bug Reporting Tool | 2026-08-26 | 2026-09-09 | Unknown |
| CVE-2015-3246 | Red Hat | Libuser | 2026-08-26 | 2026-09-09 | Unknown |
| CVE-2026-60004 | Gitea | Gitea | 2026-08-25 | 2026-08-28 | Unknown |
| CVE-2026-21962 | Oracle | HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 2026-08-27 | Unknown |
| CVE-2026-73570 | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 2026-08-24 | Unknown |
| CVE-2026-72530 | TrueConf | Server | 2026-08-20 | 2026-09-03 | Unknown |
| CVE-2026-72529 | TrueConf | Server | 2026-08-20 | 2026-08-23 | Unknown |
| CVE-2026-64849 | MLflow | MLflow | 2026-08-19 | 2026-09-02 | Unknown |
| CVE-2026-65400 | Apple | macOS | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2026-59310 | Broadcom | VMware vCenter | 2026-08-18 | 2026-08-21 | Known |
| CVE-2026-55040 | Microsoft | SharePoint | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2026-33824 | Microsoft | Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2025-62593 | Ray-Project | Ray | 2026-08-17 | 2026-08-20 | Unknown |
| CVE-2026-72898 | Metabase | Metabase | 2026-08-11 | 2026-08-14 | Unknown |
| CVE-2026-68820 | Microsoft | Windows Ancillary Function Driver for WinSock | 2026-08-11 | 2026-08-25 | Unknown |
| CVE-2026-20349 | Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 2026-08-14 | Unknown |
| CVE-2026-8037 | Progress | LoadMaster | 2026-08-07 | 2026-08-10 | Unknown |
| CVE-2026-63077 | JetBrains | TeamCity | 2026-08-05 | 2026-08-08 | Known |
| CVE-2026-9198 | IBM | Langflow | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-34486 | Apache | Tomcat | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-18556 | N-able | N-central | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-18577 | N-able | N-central | 2026-08-03 | 2026-08-06 | Unknown |
| CVE-2026-20316 | Cisco | Secure Firewall Management Center (FMC) | 2026-07-29 | 2026-08-01 | Known |
| CVE-2026-16812 | Arista | VeloCloud Orchestrator | 2026-07-27 | 2026-07-30 | Unknown |
| CVE-2025-68686 | Fortinet | FortiOS | 2026-07-27 | 2026-08-10 | Unknown |
| CVE-2026-50522 | Microsoft | SharePoint | 2026-07-22 | 2026-07-25 | Unknown |
| CVE-2026-16232 | Check Point | SmartConsole | 2026-07-22 | 2026-07-25 | Unknown |
| CVE-2026-63030 | WordPress | Core | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2026-60137 | WordPress | Core | 2026-07-21 | 2026-08-04 | Unknown |
| CVE-2026-0770 | Langflow | Langflow | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2021-27137 | DD-WRT | DD-WRT | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2026-58644 | Microsoft | SharePoint | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-39808 | Fortinet | FortiSandbox | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-25089 | Fortinet | FortiSandbox | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-46817 | Oracle | E-Business Suite | 2026-07-15 | 2026-07-18 | Unknown |
| CVE-2023-4346 | KNX Association | KNX Protocol Connection Authorization Option 1 | 2026-07-15 | 2026-07-29 | Unknown |
| CVE-2026-56164 | Microsoft | SharePoint Server | 2026-07-14 | 2026-07-17 | Unknown |
| CVE-2026-56155 | Microsoft | Active Directory Federation Services | 2026-07-14 | 2026-07-28 | Unknown |
| CVE-2026-15410 | SonicWall | SMA1000 Appliances | 2026-07-14 | 2026-07-17 | Known |
| CVE-2026-15409 | SonicWall | SMA1000 Appliances | 2026-07-14 | 2026-07-17 | Known |
| CVE-2008-4128 | Cisco | IOS | 2026-07-13 | 2026-07-16 | Unknown |
| CVE-2026-56291 | Balbooa | Forms | 2026-07-10 | 2026-07-13 | Unknown |
| CVE-2026-48939 | iCagenda | iCagenda | 2026-07-10 | 2026-07-13 | Unknown |
| CVE-2026-56290 | Joomlack | Page Builder | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-55255 | Langflow | Langflow | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-48908 | JoomShaper | SP Page Builder | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-48282 | Adobe | ColdFusion | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-45659 | Microsoft | SharePoint Server | 2026-07-01 | 2026-07-04 | Known |
| CVE-2026-48558 | SimpleHelp | SimpleHelp | 2026-06-29 | 2026-07-02 | Unknown |
| CVE-2026-20230 | Cisco | Unified Communications Manager | 2026-06-25 | 2026-06-28 | Unknown |
| CVE-2026-12569 | PTC | Windchill and FlexPLM | 2026-06-25 | 2026-06-28 | Known |
| CVE-2026-34910 | Ubiquiti | UniFi OS | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-34909 | Ubiquiti | UniFi OS | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-34908 | Ubiquiti | UniFi OS | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2025-67038 | Lantronix | EDS5000 | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-20253 | Splunk | Enterprise | 2026-06-18 | 2026-06-21 | Unknown |
| CVE-2026-48907 | Widget Factory | Joomla Content Editor | 2026-06-16 | 2026-06-19 | Unknown |
| CVE-2026-54420 | LiteSpeed | cPanel Plugin | 2026-06-15 | 2026-06-18 | Unknown |
| CVE-2026-20262 | Cisco | Catalyst SD-WAN Manager | 2026-06-15 | 2026-06-29 | Unknown |
| CVE-2026-35273 | Oracle | PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 | Known |
| CVE-2026-10520 | Ivanti | Sentry | 2026-06-11 | 2026-06-14 | Unknown |
| CVE-2026-7473 | Arista | Extensible Operating System | 2026-06-09 | 2026-06-23 | Unknown |
| CVE-2026-20245 | Cisco | Catalyst SD-WAN Manager | 2026-06-09 | 2026-06-23 | Unknown |
| CVE-2026-11645 | Chromium V8 | 2026-06-09 | 2026-06-23 | Unknown | |
| CVE-2026-50751 | Check Point | Security Gateway | 2026-06-08 | 2026-06-11 | Known |
| CVE-2026-42271 | BerriAI | LiteLLM | 2026-06-08 | 2026-06-22 | Unknown |
| CVE-2026-28318 | SolarWinds | Serv-U | 2026-06-05 | 2026-06-19 | Unknown |
| CVE-2026-45247 | Mirasvit | Mirasvit Full Page Cache Warmer | 2026-06-03 | 2026-06-06 | Unknown |
| CVE-2025-48595 | Android | Framework | 2026-06-02 | 2026-06-05 | Unknown |
| CVE-2022-0492 | Linux | Kernel | 2026-06-02 | 2026-06-05 | Unknown |
| CVE-2024-21182 | Oracle | WebLogic Server | 2026-06-01 | 2026-06-04 | Unknown |
| CVE-2026-0257 | Palo Alto Networks | PAN-OS | 2026-05-29 | 2026-06-01 | Known |
| CVE-2026-8398 | Daemon | Daemon Tools Lite | 2026-05-27 | 2026-05-30 | Unknown |
| CVE-2026-48027 | Nx | Nx Console | 2026-05-27 | 2026-06-10 | Known |
| CVE-2026-45321 | TanStack | TanStack | 2026-05-27 | 2026-06-10 | Known |
| CVE-2026-48172 | LiteSpeed | cPanel Plugin | 2026-05-26 | 2026-05-29 | Unknown |
| CVE-2026-9082 | Drupal | Core | 2026-05-22 | 2026-05-27 | Unknown |
| CVE-2026-34926 | Trend Micro | Apex One | 2026-05-21 | 2026-06-04 | Unknown |
| CVE-2025-34291 | Langflow | Langflow | 2026-05-21 | 2026-06-04 | Unknown |
| CVE-2026-45498 | Microsoft | Defender | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2026-41091 | Microsoft | Defender | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2010-0806 | Microsoft | Internet Explorer | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2010-0249 | Microsoft | Internet Explorer | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2009-3459 | Adobe | Acrobat and Reader | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2009-1537 | Microsoft | DirectX | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2008-4250 | Microsoft | Windows | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2026-42897 | Microsoft | Microsoft | 2026-05-15 | 2026-05-29 | Unknown |
| CVE-2026-20182 | Cisco | Catalyst SD-WAN | 2026-05-14 | 2026-05-17 | Unknown |
| CVE-2026-42208 | BerriAI | LiteLLM | 2026-05-08 | 2026-05-11 | Unknown |
| CVE-2026-6973 | Ivanti | Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2026-05-10 | Unknown |
| CVE-2026-0300 | Palo Alto Networks | PAN-OS | 2026-05-06 | 2026-05-09 | Unknown |
| CVE-2026-31431 | Linux | Kernel | 2026-05-01 | 2026-05-15 | Unknown |
| CVE-2026-41940 | WebPros | cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 2026-05-03 | Known |
| CVE-2026-32202 | Microsoft | Windows | 2026-04-28 | 2026-05-12 | Unknown |
| CVE-2024-1708 | ConnectWise | ScreenConnect | 2026-04-28 | 2026-05-12 | Known |
| CVE-2025-29635 | D-Link | DIR-823X | 2026-04-24 | 2026-05-08 | Unknown |
| CVE-2024-7399 | Samsung | MagicINFO 9 Server | 2026-04-24 | 2026-05-08 | Unknown |
| CVE-2024-57728 | SimpleHelp | SimpleHelp | 2026-04-24 | 2026-05-08 | Known |
| CVE-2024-57726 | SimpleHelp | SimpleHelp | 2026-04-24 | 2026-05-08 | Known |
| CVE-2026-39987 | Marimo | Marimo | 2026-04-23 | 2026-05-07 | Unknown |
| CVE-2026-33825 | Microsoft | Defender | 2026-04-22 | 2026-05-06 | Known |
| CVE-2026-20133 | Cisco | Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2026-20128 | Cisco | Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2026-20122 | Cisco | Catalyst SD-WAN Manger | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2025-48700 | Synacor | Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2025-32975 | Quest | KACE Systems Management Appliance (SMA) | 2026-04-20 | 2026-05-04 | Unknown |
| CVE-2025-2749 | Kentico | Kentico Xperience | 2026-04-20 | 2026-05-04 | Unknown |
| CVE-2024-27199 | JetBrains | TeamCity | 2026-04-20 | 2026-05-04 | Known |
| CVE-2023-27351 | PaperCut | NG/MF | 2026-04-20 | 2026-05-04 | Known |
| CVE-2026-34197 | Apache | ActiveMQ | 2026-04-16 | 2026-04-30 | Unknown |
| CVE-2026-32201 | Microsoft | SharePoint Server | 2026-04-14 | 2026-04-28 | Unknown |
| CVE-2009-0238 | Microsoft | Office | 2026-04-14 | 2026-04-28 | Unknown |