SQ Magazine The Threat Index CISA KEV Tracker

CISA KEV Tracker

Every vulnerability CISA has cataloged as exploited in the wild, mirrored weekly from the agency's own feed: what was added when, the remediation deadline CISA set, and how the year's entries distribute across vendors.

255 records updated through 8 Oct 2026 next review by 15 Oct 2026

At a glance

Most recent addition: CVE-2015-3306 8 Oct 2026
Next federal due date: CVE-2026-86950 13 Oct 2026
Most recent ransomware-linked addition: CVE-2026-59310 18 Aug 2026

All records

255 vulnerabilities, newest addition first. Filter or search below.

How to use this tracker

Search & filter
Filter by vendor, ransomware or month, or use the search box to find a specific vulnerability.
Explore the data
Sort by newest first, due date or A to Z.
Inspect records
Select Detail on any row to open its full record, then copy a link that opens that row directly.
Verify sources
Every row links the primary source it came from on cisa.gov.

CVE	Vendor / Product	Added	Due (federal)	Ransomware use	Source
CVE-2015-3306 ProFTPD	ProFTPD	8 Oct 2026	11 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability ProFTPD Improper Access Control Vulnerability CISA description ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2015-3306 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.08 by the deterministic sync.
CVE-2021-3199 ONLYOFFICE	ONLYOFFICE Docs	8 Oct 2026	11 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability ONLYOFFICE Docs Server Path Traversal Vulnerability CISA description ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2021-3199 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.08 by the deterministic sync.
CVE-2023-22894 Strapi	Strapi	8 Oct 2026	11 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Strapi Cleartext Storage of Sensitive Information Vulnerability CISA description Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2023-22894 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.08 by the deterministic sync.
CVE-2016-3081 Apache	Apache Struts	8 Oct 2026	11 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Apache Struts Command Injection Vulnerability CISA description Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2016-3081 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.08 by the deterministic sync.
CVE-2015-5477 ISC	ISC BIND	8 Oct 2026	11 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability ISC BIND Data Processing Errors Vulnerability CISA description ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2015-5477 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.08 by the deterministic sync.
CVE-2026-88779 Citrix	Citrix NetScaler	4 Oct 2026	7 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CISA description Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-88779 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.04 by the deterministic sync.
CVE-2026-102489 Zammad GmbH	Zammad GmbH Zammad	2 Oct 2026	5 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Zammad GmbH Zammad Session Fixation Vulnerability CISA description Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-102489 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.02 by the deterministic sync.
CVE-2026-102490 Zammad GmbH	Zammad GmbH Zammad	2 Oct 2026	5 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Zammad GmbH Zammad Improper Privilege Management Vulnerability CISA description Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-102490 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.02 by the deterministic sync.
CVE-2026-104286 Fortinet	Fortinet FortiMail	1 Oct 2026	4 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Fortinet FortiMail Path Traversal Vulnerability CISA description Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-104286 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.10.01 by the deterministic sync.
CVE-2026-76504 Cisco	Cisco Catalyst SD-WAN Manager	30 Sep 2026	3 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CISA description Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-76504 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.30 by the deterministic sync.
CVE-2026-86950 Apple	Apple Multiple Products	29 Sep 2026	13 Oct 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Apple Multiple Products Out-of-Bounds Write Vulnerability CISA description Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-86950 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change CISA revised due_date in catalog 2026.10.08; mirrored by the deterministic sync.
CVE-2026-88771 Citrix	Citrix NetScaler	27 Sep 2026	30 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Citrix NetScaler Improper Input Validation Vulnerability CISA description Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-88771 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.27 by the deterministic sync.
CVE-2026-88772 Citrix	Citrix NetScaler	27 Sep 2026	30 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CISA description Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-88772 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.27 by the deterministic sync.
CVE-2026-87902 WordPress	WordPress Core	25 Sep 2026	28 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability WordPress Core Remote File Inclusion Vulnerability CISA description WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-87902 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.25 by the deterministic sync.
CVE-2026-65660 Microsoft	Microsoft SharePoint	25 Sep 2026	28 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Microsoft SharePoint Code Injection Vulnerability CISA description Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-65660 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.25 by the deterministic sync.
CVE-2026-67279 MikroTik	MikroTik RouterOS	25 Sep 2026	28 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CISA description Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-67279 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.25 by the deterministic sync.
CVE-2026-71362 Adobe	Adobe Commerce and Magento	24 Sep 2026	27 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Adobe Commerce and Magento Incorrect Authorization Vulnerability CISA description Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-71362 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.24 by the deterministic sync.
CVE-2026-5430 WSO2	WSO2 Multiple Products	24 Sep 2026	27 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability WSO2 Multiple Products Path Traversal Vulnerability CISA description WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-5430 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.24 by the deterministic sync.
CVE-2026-85102 Check Point	Check Point Multiple Products	22 Sep 2026	25 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Check Point Multiple Products Improper Certificate Validation Vulnerability CISA description Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-85102 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.22 by the deterministic sync.
CVE-2026-93616 Check Point	Check Point Multiple Products	22 Sep 2026	25 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Check Point Multiple Products Path Traversal Vulnerability CISA description Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-93616 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.22 by the deterministic sync.
CVE-2026-94127 F5	F5 BIG-IP APM	22 Sep 2026	25 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CISA description F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-94127 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.22 by the deterministic sync.
CVE-2026-93952 Arista	Arista VeloCloud Orchestrator	22 Sep 2026	25 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CISA description Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-93952 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.22 by the deterministic sync.
CVE-2026-7273 Zyxel	Zyxel GS1900 Series Switches	21 Sep 2026	24 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CISA description Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-7273 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.21 by the deterministic sync.
CVE-2025-39682 Linux	Linux Kernel	18 Sep 2026	21 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CISA description Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2025-39682 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.18 by the deterministic sync.
CVE-2026-53266 Linux	Linux Kernel	18 Sep 2026	21 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Vulnerability Linux Kernel Out-of-Bounds Write Vulnerability CISA description Linux Kernel contains an out-of-bounds write vulnerability in the ebtables SNAT target which allows an ARP sender hardware address rewrite to write directly into a nonlinear socket-buffer fragment backed by a splice-imported file page. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. CVE record CVE-2026-53266 ↗ Primary source CISA Known Exploited Vulnerabilities Catalog (2026.10.08) ↗ Last confirmed 8 Oct 2026 Recent change Added from CISA catalog 2026.09.18 by the deterministic sync.
CVE-2025-39964 Linux	Linux Kernel	18 Sep 2026	21 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-39964 ↗ · CISA KEV entry ↗
CVE-2026-87886 Acronis	Acronis Backup	16 Sep 2026	19 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-87886 ↗ · CISA KEV entry ↗
CVE-2026-76460 Cisco	Cisco Identity Services Engine	16 Sep 2026	19 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-76460 ↗ · CISA KEV entry ↗
CVE-2026-58704 Google	Google Pixel	16 Sep 2026	19 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-58704 ↗ · CISA KEV entry ↗
CVE-2026-76461 Cisco	Cisco Secure Email Gateway	14 Sep 2026	17 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-76461 ↗ · CISA KEV entry ↗
CVE-2026-85706 GitLab	GitLab Community Edition and Enterprise Edition	11 Sep 2026	14 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-85706 ↗ · CISA KEV entry ↗
CVE-2026-42018 JFrog	JFrog Artifactory	11 Sep 2026	25 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-42018 ↗ · CISA KEV entry ↗
CVE-2026-42016 JFrog	JFrog Artifactory	11 Sep 2026	25 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-42016 ↗ · CISA KEV entry ↗
CVE-2026-84869 ConnectWise	ConnectWise ScreenConnect	11 Sep 2026	14 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-84869 ↗ · CISA KEV entry ↗
CVE-2026-67277 MikroTik	MikroTik RouterOS	10 Sep 2026	13 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-67277 ↗ · CISA KEV entry ↗
CVE-2026-86060 MikroTik	MikroTik RouterOS	10 Sep 2026	13 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-86060 ↗ · CISA KEV entry ↗
CVE-2026-20079 Cisco	Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewa…	9 Sep 2026	12 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20079 ↗ · CISA KEV entry ↗
CVE-2026-87491 Google	Google Chromium V8	9 Sep 2026	23 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-87491 ↗ · CISA KEV entry ↗
CVE-2025-25249 Fortinet	Fortinet Multiple Products	9 Sep 2026	12 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-25249 ↗ · CISA KEV entry ↗
CVE-2026-19490 Citrix	Citrix NetScaler	9 Sep 2026	12 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-19490 ↗ · CISA KEV entry ↗
CVE-2026-85880 Microsoft	Microsoft Windows	8 Sep 2026	22 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-85880 ↗ · CISA KEV entry ↗
CVE-2026-86218 N-able	N-able N-central	8 Sep 2026	11 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-86218 ↗ · CISA KEV entry ↗
CVE-2026-81963 Microsoft	Microsoft Windows	8 Sep 2026	22 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-81963 ↗ · CISA KEV entry ↗
CVE-2026-75650 Adobe	Adobe Commerce and Magento	8 Sep 2026	11 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-75650 ↗ · CISA KEV entry ↗
CVE-2026-85046 Google	Google Chromium V8	4 Sep 2026	18 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-85046 ↗ · CISA KEV entry ↗
CVE-2026-83549 SonicWall	SonicWall SMA1000 Appliances	2 Sep 2026	5 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-83549 ↗ · CISA KEV entry ↗
CVE-2026-83548 SonicWall	SonicWall SMA1000 Appliances	2 Sep 2026	5 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-83548 ↗ · CISA KEV entry ↗
CVE-2026-9586 Sangoma	Sangoma Switchvox	2 Sep 2026	5 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-9586 ↗ · CISA KEV entry ↗
CVE-2026-82329 JFrog	JFrog Artifactory	2 Sep 2026	5 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-82329 ↗ · CISA KEV entry ↗
CVE-2026-49869 Kestra	Kestra OSS	2 Sep 2026	5 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-49869 ↗ · CISA KEV entry ↗
CVE-2026-48710 Kludex	Kludex Starlette	2 Sep 2026	16 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48710 ↗ · CISA KEV entry ↗
CVE-2026-59822 BerriAI	BerriAI LiteLLM	2 Sep 2026	16 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-59822 ↗ · CISA KEV entry ↗
CVE-2026-81578 PaperCut	PaperCut NG/MF	31 Aug 2026	14 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-81578 ↗ · CISA KEV entry ↗
CVE-2026-82078 PaperCut	PaperCut NG/MF	31 Aug 2026	14 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-82078 ↗ · CISA KEV entry ↗
CVE-2026-66384 JFrog	JFrog Artifactory	27 Aug 2026	10 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-66384 ↗ · CISA KEV entry ↗
CVE-2026-53362 Linux	Linux Kernel	27 Aug 2026	30 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-53362 ↗ · CISA KEV entry ↗
CVE-2023-49105 ownCloud	ownCloud	27 Aug 2026	30 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2023-49105 ↗ · CISA KEV entry ↗
CVE-2019-1068 Microsoft	Microsoft SQL Server	26 Aug 2026	29 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2019-1068 ↗ · CISA KEV entry ↗
CVE-2026-8452 Citrix	Citrix NetScaler ADC and NetScaler Gateway	26 Aug 2026	29 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-8452 ↗ · CISA KEV entry ↗
CVE-2022-0995 Linux	Linux Kernel	26 Aug 2026	29 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2022-0995 ↗ · CISA KEV entry ↗
CVE-2015-5287 Red Hat	Red Hat Automatic Bug Reporting Tool	26 Aug 2026	9 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2015-5287 ↗ · CISA KEV entry ↗
CVE-2015-3246 Red Hat	Red Hat Libuser	26 Aug 2026	9 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2015-3246 ↗ · CISA KEV entry ↗
CVE-2021-23758 Ajax.NET Professional	Ajax.NET Professional	26 Aug 2026	9 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2021-23758 ↗ · CISA KEV entry ↗
CVE-2026-60004 Gitea	Gitea	25 Aug 2026	28 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-60004 ↗ · CISA KEV entry ↗
CVE-2026-21962 Oracle	Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in	24 Aug 2026	27 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21962 ↗ · CISA KEV entry ↗
CVE-2026-73570 Synacor	Synacor Zimbra Collaboration Suite (ZCS)	21 Aug 2026	24 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-73570 ↗ · CISA KEV entry ↗
CVE-2026-72529 TrueConf	TrueConf Server	20 Aug 2026	23 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-72529 ↗ · CISA KEV entry ↗
CVE-2026-72530 TrueConf	TrueConf Server	20 Aug 2026	3 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-72530 ↗ · CISA KEV entry ↗
CVE-2026-64849 MLflow	MLflow	19 Aug 2026	2 Sep 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-64849 ↗ · CISA KEV entry ↗
CVE-2026-65400 Apple	Apple macOS	18 Aug 2026	21 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-65400 ↗ · CISA KEV entry ↗
CVE-2026-55040 Microsoft	Microsoft SharePoint	18 Aug 2026	21 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-55040 ↗ · CISA KEV entry ↗
CVE-2026-59310 Broadcom	Broadcom VMware vCenter	18 Aug 2026	21 Aug 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-59310 ↗ · CISA KEV entry ↗
CVE-2026-33824 Microsoft	Microsoft Internet Key Exchange (IKE) Service Extensions	18 Aug 2026	21 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-33824 ↗ · CISA KEV entry ↗
CVE-2025-62593 Ray-Project	Ray-Project Ray	17 Aug 2026	20 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-62593 ↗ · CISA KEV entry ↗
CVE-2026-72898 Metabase	Metabase	11 Aug 2026	14 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-72898 ↗ · CISA KEV entry ↗
CVE-2026-68820 Microsoft	Microsoft Windows Ancillary Function Driver for WinSock	11 Aug 2026	25 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-68820 ↗ · CISA KEV entry ↗
CVE-2026-20349 Cisco	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat De…	11 Aug 2026	14 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20349 ↗ · CISA KEV entry ↗
CVE-2026-8037 Progress	Progress LoadMaster	7 Aug 2026	10 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-8037 ↗ · CISA KEV entry ↗
CVE-2026-63077 JetBrains	JetBrains TeamCity	5 Aug 2026	8 Aug 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-63077 ↗ · CISA KEV entry ↗
CVE-2026-9198 IBM	IBM Langflow	4 Aug 2026	7 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-9198 ↗ · CISA KEV entry ↗
CVE-2026-34486 Apache	Apache Tomcat	4 Aug 2026	7 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-34486 ↗ · CISA KEV entry ↗
CVE-2026-18556 N-able	N-able N-central	4 Aug 2026	7 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-18556 ↗ · CISA KEV entry ↗
CVE-2026-18577 N-able	N-able N-central	3 Aug 2026	6 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-18577 ↗ · CISA KEV entry ↗
CVE-2026-20316 Cisco	Cisco Secure Firewall Management Center (FMC)	29 Jul 2026	1 Aug 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20316 ↗ · CISA KEV entry ↗
CVE-2026-16812 Arista	Arista VeloCloud Orchestrator	27 Jul 2026	30 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-16812 ↗ · CISA KEV entry ↗
CVE-2025-68686 Fortinet	Fortinet FortiOS	27 Jul 2026	10 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-68686 ↗ · CISA KEV entry ↗
CVE-2026-50522 Microsoft	Microsoft SharePoint	22 Jul 2026	25 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-50522 ↗ · CISA KEV entry ↗
CVE-2026-16232 Check Point	Check Point SmartConsole	22 Jul 2026	25 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-16232 ↗ · CISA KEV entry ↗
CVE-2021-27137 DD-WRT	DD-WRT	21 Jul 2026	24 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2021-27137 ↗ · CISA KEV entry ↗
CVE-2026-0770 Langflow	Langflow	21 Jul 2026	24 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-0770 ↗ · CISA KEV entry ↗
CVE-2026-63030 WordPress	WordPress Core	21 Jul 2026	24 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-63030 ↗ · CISA KEV entry ↗
CVE-2026-60137 WordPress	WordPress Core	21 Jul 2026	4 Aug 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-60137 ↗ · CISA KEV entry ↗
CVE-2026-39808 Fortinet	Fortinet FortiSandbox	16 Jul 2026	19 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-39808 ↗ · CISA KEV entry ↗
CVE-2026-25089 Fortinet	Fortinet FortiSandbox	16 Jul 2026	19 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-25089 ↗ · CISA KEV entry ↗
CVE-2026-58644 Microsoft	Microsoft SharePoint	16 Jul 2026	19 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-58644 ↗ · CISA KEV entry ↗
CVE-2023-4346 KNX Association	KNX Association KNX Protocol Connection Authorization Option 1	15 Jul 2026	29 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2023-4346 ↗ · CISA KEV entry ↗
CVE-2026-46817 Oracle	Oracle E-Business Suite	15 Jul 2026	18 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-46817 ↗ · CISA KEV entry ↗
CVE-2026-15410 SonicWall	SonicWall SMA1000 Appliances	14 Jul 2026	17 Jul 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-15410 ↗ · CISA KEV entry ↗
CVE-2026-15409 SonicWall	SonicWall SMA1000 Appliances	14 Jul 2026	17 Jul 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-15409 ↗ · CISA KEV entry ↗
CVE-2026-56164 Microsoft	Microsoft SharePoint Server	14 Jul 2026	17 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-56164 ↗ · CISA KEV entry ↗
CVE-2026-56155 Microsoft	Microsoft Active Directory Federation Services	14 Jul 2026	28 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-56155 ↗ · CISA KEV entry ↗
CVE-2008-4128 Cisco	Cisco IOS	13 Jul 2026	16 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2008-4128 ↗ · CISA KEV entry ↗
CVE-2026-48939 iCagenda	iCagenda	10 Jul 2026	13 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48939 ↗ · CISA KEV entry ↗
CVE-2026-56291 Balbooa	Balbooa Forms	10 Jul 2026	13 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-56291 ↗ · CISA KEV entry ↗
CVE-2026-48282 Adobe	Adobe ColdFusion	7 Jul 2026	10 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48282 ↗ · CISA KEV entry ↗
CVE-2026-56290 Joomlack	Joomlack Page Builder	7 Jul 2026	10 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-56290 ↗ · CISA KEV entry ↗
CVE-2026-55255 Langflow	Langflow	7 Jul 2026	10 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-55255 ↗ · CISA KEV entry ↗
CVE-2026-48908 JoomShaper	JoomShaper SP Page Builder	7 Jul 2026	10 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48908 ↗ · CISA KEV entry ↗
CVE-2026-45659 Microsoft	Microsoft SharePoint Server	1 Jul 2026	4 Jul 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-45659 ↗ · CISA KEV entry ↗
CVE-2026-48558 SimpleHelp	SimpleHelp	29 Jun 2026	2 Jul 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48558 ↗ · CISA KEV entry ↗
CVE-2026-20230 Cisco	Cisco Unified Communications Manager	25 Jun 2026	28 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20230 ↗ · CISA KEV entry ↗
CVE-2026-12569 PTC	PTC Windchill and FlexPLM	25 Jun 2026	28 Jun 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-12569 ↗ · CISA KEV entry ↗
CVE-2026-34908 Ubiquiti	Ubiquiti UniFi OS	23 Jun 2026	26 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-34908 ↗ · CISA KEV entry ↗
CVE-2026-34909 Ubiquiti	Ubiquiti UniFi OS	23 Jun 2026	26 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-34909 ↗ · CISA KEV entry ↗
CVE-2026-34910 Ubiquiti	Ubiquiti UniFi OS	23 Jun 2026	26 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-34910 ↗ · CISA KEV entry ↗
CVE-2025-67038 Lantronix	Lantronix EDS5000	23 Jun 2026	26 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-67038 ↗ · CISA KEV entry ↗
CVE-2026-20253 Splunk	Splunk Enterprise	18 Jun 2026	21 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20253 ↗ · CISA KEV entry ↗
CVE-2026-48907 Widget Factory	Widget Factory Joomla Content Editor	16 Jun 2026	19 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48907 ↗ · CISA KEV entry ↗
CVE-2026-20262 Cisco	Cisco Catalyst SD-WAN Manager	15 Jun 2026	29 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20262 ↗ · CISA KEV entry ↗
CVE-2026-54420 LiteSpeed	LiteSpeed cPanel Plugin	15 Jun 2026	18 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-54420 ↗ · CISA KEV entry ↗
CVE-2026-35273 Oracle	Oracle PeopleSoft Enterprise PeopleTools	12 Jun 2026	15 Jun 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-35273 ↗ · CISA KEV entry ↗
CVE-2026-10520 Ivanti	Ivanti Sentry	11 Jun 2026	14 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-10520 ↗ · CISA KEV entry ↗
CVE-2026-20245 Cisco	Cisco Catalyst SD-WAN Manager	9 Jun 2026	23 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20245 ↗ · CISA KEV entry ↗
CVE-2026-7473 Arista	Arista Extensible Operating System	9 Jun 2026	23 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-7473 ↗ · CISA KEV entry ↗
CVE-2026-11645 Google	Google Chromium V8	9 Jun 2026	23 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-11645 ↗ · CISA KEV entry ↗
CVE-2026-50751 Check Point	Check Point Security Gateway	8 Jun 2026	11 Jun 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-50751 ↗ · CISA KEV entry ↗
CVE-2026-42271 BerriAI	BerriAI LiteLLM	8 Jun 2026	22 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-42271 ↗ · CISA KEV entry ↗
CVE-2026-28318 SolarWinds	SolarWinds Serv-U	5 Jun 2026	19 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-28318 ↗ · CISA KEV entry ↗
CVE-2026-45247 Mirasvit	Mirasvit Full Page Cache Warmer	3 Jun 2026	6 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-45247 ↗ · CISA KEV entry ↗
CVE-2025-48595 Android	Android Framework	2 Jun 2026	5 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-48595 ↗ · CISA KEV entry ↗
CVE-2022-0492 Linux	Linux Kernel	2 Jun 2026	5 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2022-0492 ↗ · CISA KEV entry ↗
CVE-2024-21182 Oracle	Oracle WebLogic Server	1 Jun 2026	4 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-21182 ↗ · CISA KEV entry ↗
CVE-2026-0257 Palo Alto Networks	Palo Alto Networks PAN-OS	29 May 2026	1 Jun 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-0257 ↗ · CISA KEV entry ↗
CVE-2026-8398 Daemon	Daemon Tools Lite	27 May 2026	30 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-8398 ↗ · CISA KEV entry ↗
CVE-2026-45321 TanStack	TanStack	27 May 2026	10 Jun 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-45321 ↗ · CISA KEV entry ↗
CVE-2026-48027 Nx	Nx Console	27 May 2026	10 Jun 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48027 ↗ · CISA KEV entry ↗
CVE-2026-48172 LiteSpeed	LiteSpeed cPanel Plugin	26 May 2026	29 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-48172 ↗ · CISA KEV entry ↗
CVE-2026-9082 Drupal	Drupal Core	22 May 2026	27 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-9082 ↗ · CISA KEV entry ↗
CVE-2026-34926 Trend Micro	Trend Micro Apex One	21 May 2026	4 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-34926 ↗ · CISA KEV entry ↗
CVE-2025-34291 Langflow	Langflow	21 May 2026	4 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-34291 ↗ · CISA KEV entry ↗
CVE-2026-45498 Microsoft	Microsoft Defender	20 May 2026	3 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-45498 ↗ · CISA KEV entry ↗
CVE-2026-41091 Microsoft	Microsoft Defender	20 May 2026	3 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-41091 ↗ · CISA KEV entry ↗
CVE-2010-0806 Microsoft	Microsoft Internet Explorer	20 May 2026	3 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2010-0806 ↗ · CISA KEV entry ↗
CVE-2010-0249 Microsoft	Microsoft Internet Explorer	20 May 2026	3 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2010-0249 ↗ · CISA KEV entry ↗
CVE-2009-3459 Adobe	Adobe Acrobat and Reader	20 May 2026	3 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2009-3459 ↗ · CISA KEV entry ↗
CVE-2009-1537 Microsoft	Microsoft DirectX	20 May 2026	3 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2009-1537 ↗ · CISA KEV entry ↗
CVE-2008-4250 Microsoft	Microsoft Windows	20 May 2026	3 Jun 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2008-4250 ↗ · CISA KEV entry ↗
CVE-2026-42897 Microsoft	Microsoft	15 May 2026	29 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-42897 ↗ · CISA KEV entry ↗
CVE-2026-20182 Cisco	Cisco Catalyst SD-WAN	14 May 2026	17 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20182 ↗ · CISA KEV entry ↗
CVE-2026-42208 BerriAI	BerriAI LiteLLM	8 May 2026	11 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-42208 ↗ · CISA KEV entry ↗
CVE-2026-6973 Ivanti	Ivanti Endpoint Manager Mobile (EPMM)	7 May 2026	10 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-6973 ↗ · CISA KEV entry ↗
CVE-2026-0300 Palo Alto Networks	Palo Alto Networks PAN-OS	6 May 2026	9 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-0300 ↗ · CISA KEV entry ↗
CVE-2026-31431 Linux	Linux Kernel	1 May 2026	15 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-31431 ↗ · CISA KEV entry ↗
CVE-2026-41940 WebPros	WebPros cPanel & WHM and WP2 (WordPress Squared)	30 Apr 2026	3 May 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-41940 ↗ · CISA KEV entry ↗
CVE-2026-32202 Microsoft	Microsoft Windows	28 Apr 2026	12 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-32202 ↗ · CISA KEV entry ↗
CVE-2024-1708 ConnectWise	ConnectWise ScreenConnect	28 Apr 2026	12 May 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-1708 ↗ · CISA KEV entry ↗
CVE-2024-57726 SimpleHelp	SimpleHelp	24 Apr 2026	8 May 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-57726 ↗ · CISA KEV entry ↗
CVE-2024-57728 SimpleHelp	SimpleHelp	24 Apr 2026	8 May 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-57728 ↗ · CISA KEV entry ↗
CVE-2024-7399 Samsung	Samsung MagicINFO 9 Server	24 Apr 2026	8 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-7399 ↗ · CISA KEV entry ↗
CVE-2025-29635 D-Link	D-Link DIR-823X	24 Apr 2026	8 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-29635 ↗ · CISA KEV entry ↗
CVE-2026-39987 Marimo	Marimo	23 Apr 2026	7 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-39987 ↗ · CISA KEV entry ↗
CVE-2026-33825 Microsoft	Microsoft Defender	22 Apr 2026	6 May 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-33825 ↗ · CISA KEV entry ↗
CVE-2024-27199 JetBrains	JetBrains TeamCity	20 Apr 2026	4 May 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-27199 ↗ · CISA KEV entry ↗
CVE-2025-32975 Quest	Quest KACE Systems Management Appliance (SMA)	20 Apr 2026	4 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-32975 ↗ · CISA KEV entry ↗
CVE-2026-20128 Cisco	Cisco Catalyst SD-WAN Manager	20 Apr 2026	23 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20128 ↗ · CISA KEV entry ↗
CVE-2025-48700 Synacor	Synacor Zimbra Collaboration Suite (ZCS)	20 Apr 2026	23 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-48700 ↗ · CISA KEV entry ↗
CVE-2023-27351 PaperCut	PaperCut NG/MF	20 Apr 2026	4 May 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2023-27351 ↗ · CISA KEV entry ↗
CVE-2025-2749 Kentico	Kentico Xperience	20 Apr 2026	4 May 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-2749 ↗ · CISA KEV entry ↗
CVE-2026-20133 Cisco	Cisco Catalyst SD-WAN Manager	20 Apr 2026	23 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20133 ↗ · CISA KEV entry ↗
CVE-2026-20122 Cisco	Cisco Catalyst SD-WAN Manger	20 Apr 2026	23 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20122 ↗ · CISA KEV entry ↗
CVE-2026-34197 Apache	Apache ActiveMQ	16 Apr 2026	30 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-34197 ↗ · CISA KEV entry ↗
CVE-2026-32201 Microsoft	Microsoft SharePoint Server	14 Apr 2026	28 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-32201 ↗ · CISA KEV entry ↗
CVE-2009-0238 Microsoft	Microsoft Office	14 Apr 2026	28 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2009-0238 ↗ · CISA KEV entry ↗
CVE-2026-34621 Adobe	Adobe Acrobat and Reader	13 Apr 2026	27 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-34621 ↗ · CISA KEV entry ↗
CVE-2026-21643 Fortinet	Fortinet FortiClient EMS	13 Apr 2026	16 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21643 ↗ · CISA KEV entry ↗
CVE-2020-9715 Adobe	Adobe Acrobat	13 Apr 2026	27 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2020-9715 ↗ · CISA KEV entry ↗
CVE-2023-36424 Microsoft	Microsoft Windows	13 Apr 2026	27 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2023-36424 ↗ · CISA KEV entry ↗
CVE-2023-21529 Microsoft	Microsoft Exchange Server	13 Apr 2026	27 Apr 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2023-21529 ↗ · CISA KEV entry ↗
CVE-2025-60710 Microsoft	Microsoft Windows	13 Apr 2026	27 Apr 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-60710 ↗ · CISA KEV entry ↗
CVE-2012-1854 Microsoft	Microsoft Visual Basic for Applications (VBA)	13 Apr 2026	27 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2012-1854 ↗ · CISA KEV entry ↗
CVE-2026-1340 Ivanti	Ivanti Endpoint Manager Mobile (EPMM)	8 Apr 2026	11 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-1340 ↗ · CISA KEV entry ↗
CVE-2026-35616 Fortinet	Fortinet FortiClient EMS	6 Apr 2026	9 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-35616 ↗ · CISA KEV entry ↗
CVE-2026-3502 TrueConf	TrueConf Client	2 Apr 2026	16 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-3502 ↗ · CISA KEV entry ↗
CVE-2026-5281 Google	Google Dawn	1 Apr 2026	15 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-5281 ↗ · CISA KEV entry ↗
CVE-2026-3055 Citrix	Citrix NetScaler	30 Mar 2026	2 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-3055 ↗ · CISA KEV entry ↗
CVE-2025-53521 F5	F5 BIG-IP	27 Mar 2026	30 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-53521 ↗ · CISA KEV entry ↗
CVE-2026-33634 Aquasecurity	Aquasecurity Trivy	26 Mar 2026	9 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-33634 ↗ · CISA KEV entry ↗
CVE-2026-33017 Langflow	Langflow	25 Mar 2026	8 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-33017 ↗ · CISA KEV entry ↗
CVE-2025-31277 Apple	Apple Multiple Products	20 Mar 2026	3 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-31277 ↗ · CISA KEV entry ↗
CVE-2025-43520 Apple	Apple Multiple Products	20 Mar 2026	3 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-43520 ↗ · CISA KEV entry ↗
CVE-2025-43510 Apple	Apple Multiple Products	20 Mar 2026	3 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-43510 ↗ · CISA KEV entry ↗
CVE-2025-54068 Laravel	Laravel Livewire	20 Mar 2026	3 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-54068 ↗ · CISA KEV entry ↗
CVE-2025-32432 Craft CMS	Craft CMS	20 Mar 2026	3 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-32432 ↗ · CISA KEV entry ↗
CVE-2026-20131 Cisco	Cisco Secure Firewall Management Center (FMC)	19 Mar 2026	22 Mar 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20131 ↗ · CISA KEV entry ↗
CVE-2026-20963 Microsoft	Microsoft SharePoint	18 Mar 2026	21 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20963 ↗ · CISA KEV entry ↗
CVE-2025-66376 Synacor	Synacor Zimbra Collaboration Suite (ZCS)	18 Mar 2026	1 Apr 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-66376 ↗ · CISA KEV entry ↗
CVE-2025-47813 Wing FTP Server	Wing FTP Server	16 Mar 2026	30 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-47813 ↗ · CISA KEV entry ↗
CVE-2026-3909 Google	Google Skia	13 Mar 2026	27 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-3909 ↗ · CISA KEV entry ↗
CVE-2026-3910 Google	Google Chromium V8	13 Mar 2026	27 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-3910 ↗ · CISA KEV entry ↗
CVE-2025-68613 n8n	n8n	11 Mar 2026	25 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-68613 ↗ · CISA KEV entry ↗
CVE-2026-1603 Ivanti	Ivanti Endpoint Manager (EPM)	9 Mar 2026	23 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-1603 ↗ · CISA KEV entry ↗
CVE-2025-26399 SolarWinds	SolarWinds Web Help Desk	9 Mar 2026	12 Mar 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-26399 ↗ · CISA KEV entry ↗
CVE-2021-22054 Omnissa	Omnissa Workspace One UEM	9 Mar 2026	23 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2021-22054 ↗ · CISA KEV entry ↗
CVE-2023-41974 Apple	Apple iOS and iPadOS	5 Mar 2026	26 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2023-41974 ↗ · CISA KEV entry ↗
CVE-2021-30952 Apple	Apple Multiple Products	5 Mar 2026	26 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2021-30952 ↗ · CISA KEV entry ↗
CVE-2023-43000 Apple	Apple Multiple Products	5 Mar 2026	26 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2023-43000 ↗ · CISA KEV entry ↗
CVE-2021-22681 Rockwell	Rockwell Multiple Products	5 Mar 2026	26 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2021-22681 ↗ · CISA KEV entry ↗
CVE-2017-7921 Hikvision	Hikvision Multiple Products	5 Mar 2026	26 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2017-7921 ↗ · CISA KEV entry ↗
CVE-2026-21385 Qualcomm	Qualcomm Multiple Chipsets	3 Mar 2026	24 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21385 ↗ · CISA KEV entry ↗
CVE-2026-22719 Broadcom	Broadcom VMware Aria Operations	3 Mar 2026	24 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-22719 ↗ · CISA KEV entry ↗
CVE-2026-20127 Cisco	Cisco Catalyst SD-WAN Controller and Manager	25 Feb 2026	27 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20127 ↗ · CISA KEV entry ↗
CVE-2022-20775 Cisco	Cisco SD-WAN	25 Feb 2026	27 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2022-20775 ↗ · CISA KEV entry ↗
CVE-2026-25108 Soliton Systems K.K	Soliton Systems K.K FileZen	24 Feb 2026	17 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-25108 ↗ · CISA KEV entry ↗
CVE-2025-68461 Roundcube	Roundcube Webmail	20 Feb 2026	13 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-68461 ↗ · CISA KEV entry ↗
CVE-2025-49113 Roundcube	Roundcube Webmail	20 Feb 2026	13 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-49113 ↗ · CISA KEV entry ↗
CVE-2026-22769 Dell	Dell RecoverPoint for Virtual Machines (RP4VMs)	18 Feb 2026	21 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-22769 ↗ · CISA KEV entry ↗
CVE-2021-22175 GitLab	GitLab	18 Feb 2026	11 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2021-22175 ↗ · CISA KEV entry ↗
CVE-2026-2441 Google	Google Chromium	17 Feb 2026	10 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-2441 ↗ · CISA KEV entry ↗
CVE-2008-0015 Microsoft	Microsoft Windows	17 Feb 2026	10 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2008-0015 ↗ · CISA KEV entry ↗
CVE-2024-7694 TeamT5	TeamT5 ThreatSonar Anti-Ransomware	17 Feb 2026	10 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-7694 ↗ · CISA KEV entry ↗
CVE-2020-7796 Synacor	Synacor Zimbra Collaboration Suite	17 Feb 2026	10 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2020-7796 ↗ · CISA KEV entry ↗
CVE-2026-1731 BeyondTrust	BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)	13 Feb 2026	16 Feb 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-1731 ↗ · CISA KEV entry ↗
CVE-2025-40536 SolarWinds	SolarWinds Web Help Desk	12 Feb 2026	15 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-40536 ↗ · CISA KEV entry ↗
CVE-2025-15556 Notepad++	Notepad++	12 Feb 2026	5 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-15556 ↗ · CISA KEV entry ↗
CVE-2024-43468 Microsoft	Microsoft Configuration Manager	12 Feb 2026	5 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-43468 ↗ · CISA KEV entry ↗
CVE-2026-20700 Apple	Apple Multiple Products	12 Feb 2026	5 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20700 ↗ · CISA KEV entry ↗
CVE-2026-21514 Microsoft	Microsoft Office	10 Feb 2026	3 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21514 ↗ · CISA KEV entry ↗
CVE-2026-21519 Microsoft	Microsoft Windows	10 Feb 2026	3 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21519 ↗ · CISA KEV entry ↗
CVE-2026-21533 Microsoft	Microsoft Windows	10 Feb 2026	3 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21533 ↗ · CISA KEV entry ↗
CVE-2026-21510 Microsoft	Microsoft Windows	10 Feb 2026	3 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21510 ↗ · CISA KEV entry ↗
CVE-2026-21525 Microsoft	Microsoft Windows	10 Feb 2026	3 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21525 ↗ · CISA KEV entry ↗
CVE-2026-21513 Microsoft	Microsoft Windows	10 Feb 2026	3 Mar 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21513 ↗ · CISA KEV entry ↗
CVE-2026-24423 SmarterTools	SmarterTools SmarterMail	5 Feb 2026	26 Feb 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-24423 ↗ · CISA KEV entry ↗
CVE-2025-11953 React Native Community	React Native Community CLI	5 Feb 2026	26 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-11953 ↗ · CISA KEV entry ↗
CVE-2025-40551 SolarWinds	SolarWinds Web Help Desk	3 Feb 2026	6 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-40551 ↗ · CISA KEV entry ↗
CVE-2019-19006 Sangoma	Sangoma FreePBX	3 Feb 2026	24 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2019-19006 ↗ · CISA KEV entry ↗
CVE-2025-64328 Sangoma	Sangoma FreePBX	3 Feb 2026	24 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-64328 ↗ · CISA KEV entry ↗
CVE-2021-39935 GitLab	GitLab Community and Enterprise Editions	3 Feb 2026	24 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2021-39935 ↗ · CISA KEV entry ↗
CVE-2026-1281 Ivanti	Ivanti Endpoint Manager Mobile (EPMM)	29 Jan 2026	1 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-1281 ↗ · CISA KEV entry ↗
CVE-2026-24858 Fortinet	Fortinet Multiple Products	27 Jan 2026	30 Jan 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-24858 ↗ · CISA KEV entry ↗
CVE-2026-21509 Microsoft	Microsoft Office	26 Jan 2026	16 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-21509 ↗ · CISA KEV entry ↗
CVE-2026-24061 GNU	GNU InetUtils	26 Jan 2026	16 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-24061 ↗ · CISA KEV entry ↗
CVE-2026-23760 SmarterTools	SmarterTools SmarterMail	26 Jan 2026	16 Feb 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-23760 ↗ · CISA KEV entry ↗
CVE-2025-52691 SmarterTools	SmarterTools SmarterMail	26 Jan 2026	16 Feb 2026	Known	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-52691 ↗ · CISA KEV entry ↗
CVE-2018-14634 Linux	Linux Kernel	26 Jan 2026	16 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2018-14634 ↗ · CISA KEV entry ↗
CVE-2024-37079 Broadcom	Broadcom VMware vCenter Server	23 Jan 2026	13 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2024-37079 ↗ · CISA KEV entry ↗
CVE-2025-54313 Prettier	Prettier eslint-config-prettier	22 Jan 2026	12 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-54313 ↗ · CISA KEV entry ↗
CVE-2025-31125 Vite	Vitejs	22 Jan 2026	12 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-31125 ↗ · CISA KEV entry ↗
CVE-2025-34026 Versa	Versa Concerto	22 Jan 2026	12 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-34026 ↗ · CISA KEV entry ↗
CVE-2025-68645 Synacor	Synacor Zimbra Collaboration Suite (ZCS)	22 Jan 2026	12 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-68645 ↗ · CISA KEV entry ↗
CVE-2026-20045 Cisco	Cisco Unified Communications Manager	21 Jan 2026	11 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20045 ↗ · CISA KEV entry ↗
CVE-2026-20805 Microsoft	Microsoft Windows	13 Jan 2026	3 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2026-20805 ↗ · CISA KEV entry ↗
CVE-2025-8110 Gogs	Gogs	12 Jan 2026	2 Feb 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-8110 ↗ · CISA KEV entry ↗
CVE-2025-37164 Hewlett Packard Enterprise (HPE)	Hewlett Packard Enterprise (HPE) OneView	7 Jan 2026	28 Jan 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2025-37164 ↗ · CISA KEV entry ↗
CVE-2009-0556 Microsoft	Microsoft Office	7 Jan 2026	28 Jan 2026	Unknown	CISA Known Exploited Vulnerabilities Catalog (2026.10.08)
Full CISA detail loads when opened. Canonical records: CVE-2009-0556 ↗ · CISA KEV entry ↗

About this data

Scope: Every entry CISA added to the Known Exploited Vulnerabilities catalog during 2026. Earlier additions remain in CISA's catalog and are not carried here.
Key facts: 255 entries across 99 vendors. Microsoft accounts for 39 of them, 15% of the catalog year to date.
CISA records 27 as known ransomware-campaign use and 228 as unknown, which states that the use is unestablished rather than absent.
CISA gives federal agencies a median of 3 days to remediate a listed flaw, ranging from 2 to 21. That window is how urgently it treats what it lists.
Reading the table: Entries as published in CISA’s Known Exploited Vulnerabilities catalog, verbatim; the due date is the federal remediation deadline CISA set for that entry, under the directive in force when it was added. Exploitation status is CISA’s statement, not our assessment. Informational only, not remediation advice.

Using this data in research or journalism?

Quoting a figure with a link to this page needs no permission. Reuse of the compiled dataset is licensed under CC BY 4.0: credit SQ Magazine and link back.

Download CSV

What the data shows

The charts below redraw the table above as the trends and comparisons a table cannot show.

Catalog additions by month

Entries CISA added to its catalog each month, the latest twelve. The catalog is read in full, so a month with no bar had no additions.

Linked to ransomware

CISA's own flag on each entry. Unknown means CISA has not tied the flaw to a campaign, not that none exists.

Verification ledger

5 most recent of 30 logged updates · RSS

8 Oct 2026 Latest Updated
Deterministic sync against CISA catalog 2026.10.08: 5 added, 2 revised, 0 removed.
4 Oct 2026 Updated
Deterministic sync against CISA catalog 2026.10.04: 1 added, 0 revised, 0 removed.
2 Oct 2026 Updated
Deterministic sync against CISA catalog 2026.10.02: 2 added, 0 revised, 0 removed.
1 Oct 2026 Updated
Deterministic sync against CISA catalog 2026.10.01: 1 added, 0 revised, 0 removed.
30 Sep 2026 Updated
Deterministic sync against CISA catalog 2026.09.30: 1 added, 0 revised, 0 removed.

How this tracker is maintained

Every entry mirrors CISA’s own catalog, and nothing is added on our judgment.

Sourced

Entries come from CISA’s Known Exploited Vulnerabilities catalog, the machine-readable feed the agency publishes itself. The vendor, product, description and required action are CISA’s wording, not a paraphrase; a vulnerability CISA has not listed does not appear here however widely it is discussed.
Dated

Each row carries the date CISA added it and the remediation date CISA set for it. Both are the agency’s dates, and the gap between them is CISA’s judgment of urgency rather than ours.
Re-checked

The catalog is re-read weekly and the page rebuilt from it. Entries CISA revises are updated in place; entries CISA removes are removed here.

Why use this instead of CISA’s own page?: For a single lookup, use CISA. This page exists for the questions the catalog does not answer on its own: how the year’s additions distribute across vendors, how long a remediation window actually is, and how many entries carry a confirmed ransomware link. The rows are CISA’s; the summary is what we add.
What does the remediation deadline mean for me?: Legally, nothing unless you are a US federal civilian agency: the deadlines bind them under a binding operational directive. For everyone else it is a signal of how seriously the agency treats a flaw, not a schedule you inherit.
Why is ransomware use often “unknown”?: Because that is what CISA records. Unknown means the agency has not established a ransomware link, not that it has ruled one out, and this page keeps the distinction rather than reporting only the confirmed cases.

This is informational content, not patching guidance for your environment. CISA’s remediation deadlines bind US federal civilian agencies; they are not a statement about your own risk or priority. Prioritize using the linked advisory, the vendor’s own fix, and your asset inventory.