SQ Magazine

Smarter Insights for a Fast-Moving Digital World

SQ Magazine The Threat Index CISA KEV Tracker

CISA KEV Tracker

Every vulnerability CISA has cataloged as exploited in the wild, mirrored weekly from the agency's own feed: what was added when, the remediation deadline CISA set, and how the year's entries distribute across vendors.

289 records updated through next review by 16 Nov 2026

Sofia Ramirez
Senior Tech Writer • 699 Articles
Sofia Ramirez is a technology and cybersecurity writer at SQ Magazine. With a keen eye on emerging threats and innovations, she helps reader...
LATEST POSTS:
SEC Philippines Confirms Data Breach on Digital Platforms
ModSecurity Upload Bypass Exploit Goes Public With No Patch Listed
Drone Statistics 2026: Registrations, Pilots and Commercial Fleets

At a glance

Most recent addition
CVE-2026-123218 9 Nov 2026
Next federal due date
CVE-2026-111497 10 Nov 2026
Most recent ransomware-linked addition
CVE-2026-59310 18 Aug 2026

All records

289 vulnerabilities, newest addition first. Filter or search below.

How to use this tracker

  1. Search & filter

    Filter by vendor, ransomware or month, or use the search box to find a specific vulnerability.

  2. Explore the data

    Sort by newest first, due date or A to Z.

  3. Inspect records

    Select Detail on any row to open its full record, then copy a link that opens that row directly.

  4. Verify sources

    Every row links the primary source it came from on cisa.gov.

CVE Vendor / Product Added Due (federal) Ransomware use Source Record detail
CVE-2026-123218 IBM IBM Aspera Faspex 9 Nov 2026 12 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
IBM Aspera Faspex Incorrect Authorization Vulnerability
CISA description
IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.11.09 by the deterministic sync.
CVE-2026-116779 SignalWire SignalWire FreeSwitch 9 Nov 2026 12 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
SignalWire FreeSwitch Code Injection Vulnerability
CISA description
SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.11.09 by the deterministic sync.
CVE-2026-123158 OpenBSD OpenBSD OpenSSH 9 Nov 2026 12 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
CISA description
OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.11.09 by the deterministic sync.
CVE-2026-102895 GPUStack GPUStack 9 Nov 2026 12 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
GPUStack Improper Authentication Vulnerability
CISA description
GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.11.09 by the deterministic sync.
CVE-2026-19868 SonicWall SonicWall SonicOS SSLVPN 6 Nov 2026 20 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
CISA description
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA).
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.11.06 by the deterministic sync.
CVE-2024-27834 Apple Apple Multiple Products 4 Nov 2026 18 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Apple Multiple Products Improper Authentication Vulnerability
CISA description
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.11.04 by the deterministic sync.
CVE-2026-119977 WordPress WordPress Core 3 Nov 2026 6 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
CISA description
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.11.03 by the deterministic sync.
CVE-2026-111357 Ivanti Ivanti Connect Secure 30 Oct 2026 2 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
CISA description
Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.30 by the deterministic sync.
CVE-2026-118527 Ivanti Ivanti Connect Secure 30 Oct 2026 13 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
CISA description
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.30 by the deterministic sync.
CVE-2026-76418 Cisco Cisco Secure Firewall ASA Software and Cisco Secure FTD Software 29 Oct 2026 1 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
CISA description
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.29 by the deterministic sync.
CVE-2026-97229 GitLab GitLab Community Edition and Enterprise Edition 29 Oct 2026 1 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
CISA description
GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.29 by the deterministic sync.
CVE-2026-46300 Linux Linux Kernel 28 Oct 2026 31 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Linux Kernel Missing Initialization of a Variable Vulnerability
CISA description
Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.28 by the deterministic sync.
CVE-2026-41709 Broadcom Broadcom VMware ESX 28 Oct 2026 11 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Broadcom VMWare ESX Insufficient Logging Vulnerability
CISA description
Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.28 by the deterministic sync.
CVE-2026-111497 Google Google Brotli 27 Oct 2026 10 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Google Brotli Unchecked Return Value Vulnerability
CISA description
Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.27 by the deterministic sync.
CVE-2026-48356 Adobe Adobe Commerce and Magento 27 Oct 2026 10 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
CISA description
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.27 by the deterministic sync.
CVE-2026-109619 PHP Group PHP Group PHP 26 Oct 2026 29 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
PHP Stale Internal Request-State Vulnerability
CISA description
PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.26 by the deterministic sync.
CVE-2026-109618 PHP Group PHP Group PHP 26 Oct 2026 29 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
PHP Memory Corruption Vulnerability
CISA description
PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.26 by the deterministic sync.
CVE-2026-110447 Collabora Collabora Online – Built-in CODE Server 23 Oct 2026 26 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CISA description
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.23 by the deterministic sync.
CVE-2026-114625 Arista Arista VeloCloud Orchestrator 23 Oct 2026 26 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Arista VeloCloud Orchestrator SQL Injection Vulnerability
CISA description
Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.23 by the deterministic sync.
CVE-2026-110936 Siemens Siemens Software Center 20 Oct 2026 3 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Siemens Software Center Uncontrolled Search Path Element Vulnerability
CISA description
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.20 by the deterministic sync.
CVE-2026-96652 Plex Plex Media Server 20 Oct 2026 3 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CISA description
Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.20 by the deterministic sync.
CVE-2026-96654 Plex Plex Media Server 20 Oct 2026 23 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
CISA description
Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.20 by the deterministic sync.
CVE-2026-96655 Plex Plex Media Server 20 Oct 2026 3 Nov 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
CISA description
Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.20 by the deterministic sync.
CVE-2026-96656 Plex Plex Media Server 20 Oct 2026 23 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
Plex Media Server External Control of File Name or Path Vulnerability
CISA description
Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.20 by the deterministic sync.
CVE-2026-106931 EG Secure Solutions EG Secure Solutions SiteGuard Server Edition 20 Oct 2026 23 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)
Vulnerability
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CISA description
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Last confirmed
9 Nov 2026
Recent change
Added from CISA catalog 2026.10.20 by the deterministic sync.
CVE-2025-61624 Fortinet Fortinet Multiple Products 16 Oct 2026 19 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-61624 ↗ · CISA KEV entry ↗
CVE-2026-102764 BeyondTrust BeyondTrust Remote Support 16 Oct 2026 19 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-102764 ↗ · CISA KEV entry ↗
CVE-2026-21589 Atlassian Atlassian Multiple Products 15 Oct 2026 18 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21589 ↗ · CISA KEV entry ↗
CVE-2026-0322 Palo Alto Networks Palo Alto Networks PAN-OS 14 Oct 2026 17 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-0322 ↗ · CISA KEV entry ↗
CVE-2026-105133 Ahsay AhsayCBS 14 Oct 2026 17 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-105133 ↗ · CISA KEV entry ↗
CVE-2026-76519 Cisco Cisco Secure Email Gateway 14 Oct 2026 17 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-76519 ↗ · CISA KEV entry ↗
CVE-2026-105134 Ahsay AhsayCBS 14 Oct 2026 17 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-105134 ↗ · CISA KEV entry ↗
CVE-2026-96951 Microsoft Microsoft Windows 13 Oct 2026 16 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-96951 ↗ · CISA KEV entry ↗
CVE-2026-104935 Ivanti Ivanti Connect Secure 13 Oct 2026 16 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-104935 ↗ · CISA KEV entry ↗
CVE-2015-3306 ProFTPD ProFTPD 8 Oct 2026 11 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2015-3306 ↗ · CISA KEV entry ↗
CVE-2021-3199 ONLYOFFICE ONLYOFFICE Docs 8 Oct 2026 11 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-3199 ↗ · CISA KEV entry ↗
CVE-2023-22894 Strapi Strapi 8 Oct 2026 11 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-22894 ↗ · CISA KEV entry ↗
CVE-2016-3081 Apache Apache Struts 8 Oct 2026 11 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2016-3081 ↗ · CISA KEV entry ↗
CVE-2015-5477 ISC ISC BIND 8 Oct 2026 11 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2015-5477 ↗ · CISA KEV entry ↗
CVE-2026-88779 Citrix Citrix NetScaler 4 Oct 2026 7 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-88779 ↗ · CISA KEV entry ↗
CVE-2026-102489 Zammad GmbH Zammad GmbH Zammad 2 Oct 2026 5 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-102489 ↗ · CISA KEV entry ↗
CVE-2026-102490 Zammad GmbH Zammad GmbH Zammad 2 Oct 2026 5 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-102490 ↗ · CISA KEV entry ↗
CVE-2026-104286 Fortinet Fortinet FortiMail 1 Oct 2026 4 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-104286 ↗ · CISA KEV entry ↗
CVE-2026-76504 Cisco Cisco Catalyst SD-WAN Manager 30 Sep 2026 3 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-76504 ↗ · CISA KEV entry ↗
CVE-2026-86950 Apple Apple Multiple Products 29 Sep 2026 13 Oct 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-86950 ↗ · CISA KEV entry ↗
CVE-2026-88771 Citrix Citrix NetScaler 27 Sep 2026 30 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-88771 ↗ · CISA KEV entry ↗
CVE-2026-88772 Citrix Citrix NetScaler 27 Sep 2026 30 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-88772 ↗ · CISA KEV entry ↗
CVE-2026-87902 WordPress WordPress Core 25 Sep 2026 28 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-87902 ↗ · CISA KEV entry ↗
CVE-2026-65660 Microsoft Microsoft SharePoint 25 Sep 2026 28 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-65660 ↗ · CISA KEV entry ↗
CVE-2026-67279 MikroTik MikroTik RouterOS 25 Sep 2026 28 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-67279 ↗ · CISA KEV entry ↗
CVE-2026-71362 Adobe Adobe Commerce and Magento 24 Sep 2026 27 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-71362 ↗ · CISA KEV entry ↗
CVE-2026-5430 WSO2 WSO2 Multiple Products 24 Sep 2026 27 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-5430 ↗ · CISA KEV entry ↗
CVE-2026-85102 Check Point Check Point Multiple Products 22 Sep 2026 25 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-85102 ↗ · CISA KEV entry ↗
CVE-2026-93616 Check Point Check Point Multiple Products 22 Sep 2026 25 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-93616 ↗ · CISA KEV entry ↗
CVE-2026-94127 F5 F5 BIG-IP APM 22 Sep 2026 25 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-94127 ↗ · CISA KEV entry ↗
CVE-2026-93952 Arista Arista VeloCloud Orchestrator 22 Sep 2026 25 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-93952 ↗ · CISA KEV entry ↗
CVE-2026-7273 Zyxel Zyxel GS1900 Series Switches 21 Sep 2026 24 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-7273 ↗ · CISA KEV entry ↗
CVE-2025-39682 Linux Linux Kernel 18 Sep 2026 21 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-39682 ↗ · CISA KEV entry ↗
CVE-2026-53266 Linux Linux Kernel 18 Sep 2026 21 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-53266 ↗ · CISA KEV entry ↗
CVE-2025-39964 Linux Linux Kernel 18 Sep 2026 21 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-39964 ↗ · CISA KEV entry ↗
CVE-2026-87886 Acronis Acronis Backup 16 Sep 2026 19 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-87886 ↗ · CISA KEV entry ↗
CVE-2026-76460 Cisco Cisco Identity Services Engine 16 Sep 2026 19 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-76460 ↗ · CISA KEV entry ↗
CVE-2026-58704 Google Google Pixel 16 Sep 2026 19 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-58704 ↗ · CISA KEV entry ↗
CVE-2026-76461 Cisco Cisco Secure Email Gateway 14 Sep 2026 17 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-76461 ↗ · CISA KEV entry ↗
CVE-2026-85706 GitLab GitLab Community Edition and Enterprise Edition 11 Sep 2026 14 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-85706 ↗ · CISA KEV entry ↗
CVE-2026-42018 JFrog JFrog Artifactory 11 Sep 2026 25 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-42018 ↗ · CISA KEV entry ↗
CVE-2026-42016 JFrog JFrog Artifactory 11 Sep 2026 25 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-42016 ↗ · CISA KEV entry ↗
CVE-2026-84869 ConnectWise ConnectWise ScreenConnect 11 Sep 2026 14 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-84869 ↗ · CISA KEV entry ↗
CVE-2026-67277 MikroTik MikroTik RouterOS 10 Sep 2026 13 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-67277 ↗ · CISA KEV entry ↗
CVE-2026-86060 MikroTik MikroTik RouterOS 10 Sep 2026 13 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-86060 ↗ · CISA KEV entry ↗
CVE-2026-20079 Cisco Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewa… 9 Sep 2026 12 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20079 ↗ · CISA KEV entry ↗
CVE-2026-87491 Google Google Chromium V8 9 Sep 2026 23 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-87491 ↗ · CISA KEV entry ↗
CVE-2025-25249 Fortinet Fortinet Multiple Products 9 Sep 2026 12 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-25249 ↗ · CISA KEV entry ↗
CVE-2026-19490 Citrix Citrix NetScaler 9 Sep 2026 12 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-19490 ↗ · CISA KEV entry ↗
CVE-2026-85880 Microsoft Microsoft Windows 8 Sep 2026 22 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-85880 ↗ · CISA KEV entry ↗
CVE-2026-86218 N-able N-able N-central 8 Sep 2026 11 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-86218 ↗ · CISA KEV entry ↗
CVE-2026-81963 Microsoft Microsoft Windows 8 Sep 2026 22 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-81963 ↗ · CISA KEV entry ↗
CVE-2026-75650 Adobe Adobe Commerce and Magento 8 Sep 2026 11 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-75650 ↗ · CISA KEV entry ↗
CVE-2026-85046 Google Google Chromium V8 4 Sep 2026 18 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-85046 ↗ · CISA KEV entry ↗
CVE-2026-83549 SonicWall SonicWall SMA1000 Appliances 2 Sep 2026 5 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-83549 ↗ · CISA KEV entry ↗
CVE-2026-83548 SonicWall SonicWall SMA1000 Appliances 2 Sep 2026 5 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-83548 ↗ · CISA KEV entry ↗
CVE-2026-9586 Sangoma Sangoma Switchvox 2 Sep 2026 5 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-9586 ↗ · CISA KEV entry ↗
CVE-2026-82329 JFrog JFrog Artifactory 2 Sep 2026 5 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-82329 ↗ · CISA KEV entry ↗
CVE-2026-49869 Kestra Kestra OSS 2 Sep 2026 5 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-49869 ↗ · CISA KEV entry ↗
CVE-2026-48710 Kludex Kludex Starlette 2 Sep 2026 16 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48710 ↗ · CISA KEV entry ↗
CVE-2026-59822 BerriAI BerriAI LiteLLM 2 Sep 2026 16 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-59822 ↗ · CISA KEV entry ↗
CVE-2026-81578 PaperCut PaperCut NG/MF 31 Aug 2026 14 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-81578 ↗ · CISA KEV entry ↗
CVE-2026-82078 PaperCut PaperCut NG/MF 31 Aug 2026 14 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-82078 ↗ · CISA KEV entry ↗
CVE-2026-66384 JFrog JFrog Artifactory 27 Aug 2026 10 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-66384 ↗ · CISA KEV entry ↗
CVE-2026-53362 Linux Linux Kernel 27 Aug 2026 30 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-53362 ↗ · CISA KEV entry ↗
CVE-2023-49105 ownCloud ownCloud 27 Aug 2026 30 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-49105 ↗ · CISA KEV entry ↗
CVE-2019-1068 Microsoft Microsoft SQL Server 26 Aug 2026 29 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2019-1068 ↗ · CISA KEV entry ↗
CVE-2026-8452 Citrix Citrix NetScaler ADC and NetScaler Gateway 26 Aug 2026 29 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-8452 ↗ · CISA KEV entry ↗
CVE-2022-0995 Linux Linux Kernel 26 Aug 2026 29 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2022-0995 ↗ · CISA KEV entry ↗
CVE-2015-5287 Red Hat Red Hat Automatic Bug Reporting Tool 26 Aug 2026 9 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2015-5287 ↗ · CISA KEV entry ↗
CVE-2015-3246 Red Hat Red Hat Libuser 26 Aug 2026 9 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2015-3246 ↗ · CISA KEV entry ↗
CVE-2021-23758 Ajax.NET Professional Ajax.NET Professional 26 Aug 2026 9 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-23758 ↗ · CISA KEV entry ↗
CVE-2026-60004 Gitea Gitea 25 Aug 2026 28 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-60004 ↗ · CISA KEV entry ↗
CVE-2026-21962 Oracle Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in 24 Aug 2026 27 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21962 ↗ · CISA KEV entry ↗
CVE-2026-73570 Synacor Synacor Zimbra Collaboration Suite (ZCS) 21 Aug 2026 24 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-73570 ↗ · CISA KEV entry ↗
CVE-2026-72529 TrueConf TrueConf Server 20 Aug 2026 23 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-72529 ↗ · CISA KEV entry ↗
CVE-2026-72530 TrueConf TrueConf Server 20 Aug 2026 3 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-72530 ↗ · CISA KEV entry ↗
CVE-2026-64849 MLflow MLflow 19 Aug 2026 2 Sep 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-64849 ↗ · CISA KEV entry ↗
CVE-2026-65400 Apple Apple macOS 18 Aug 2026 21 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-65400 ↗ · CISA KEV entry ↗
CVE-2026-55040 Microsoft Microsoft SharePoint 18 Aug 2026 21 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-55040 ↗ · CISA KEV entry ↗
CVE-2026-59310 Broadcom Broadcom VMware vCenter 18 Aug 2026 21 Aug 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-59310 ↗ · CISA KEV entry ↗
CVE-2026-33824 Microsoft Microsoft Internet Key Exchange (IKE) Service Extensions 18 Aug 2026 21 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-33824 ↗ · CISA KEV entry ↗
CVE-2025-62593 Ray-Project Ray-Project Ray 17 Aug 2026 20 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-62593 ↗ · CISA KEV entry ↗
CVE-2026-72898 Metabase Metabase 11 Aug 2026 14 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-72898 ↗ · CISA KEV entry ↗
CVE-2026-68820 Microsoft Microsoft Windows Ancillary Function Driver for WinSock 11 Aug 2026 25 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-68820 ↗ · CISA KEV entry ↗
CVE-2026-20349 Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat De… 11 Aug 2026 14 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20349 ↗ · CISA KEV entry ↗
CVE-2026-8037 Progress Progress LoadMaster 7 Aug 2026 10 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-8037 ↗ · CISA KEV entry ↗
CVE-2026-63077 JetBrains JetBrains TeamCity 5 Aug 2026 8 Aug 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-63077 ↗ · CISA KEV entry ↗
CVE-2026-9198 IBM IBM Langflow 4 Aug 2026 7 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-9198 ↗ · CISA KEV entry ↗
CVE-2026-34486 Apache Apache Tomcat 4 Aug 2026 7 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-34486 ↗ · CISA KEV entry ↗
CVE-2026-18556 N-able N-able N-central 4 Aug 2026 7 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-18556 ↗ · CISA KEV entry ↗
CVE-2026-18577 N-able N-able N-central 3 Aug 2026 6 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-18577 ↗ · CISA KEV entry ↗
CVE-2026-20316 Cisco Cisco Secure Firewall Management Center (FMC) 29 Jul 2026 1 Aug 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20316 ↗ · CISA KEV entry ↗
CVE-2026-16812 Arista Arista VeloCloud Orchestrator 27 Jul 2026 30 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-16812 ↗ · CISA KEV entry ↗
CVE-2025-68686 Fortinet Fortinet FortiOS 27 Jul 2026 10 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-68686 ↗ · CISA KEV entry ↗
CVE-2026-50522 Microsoft Microsoft SharePoint 22 Jul 2026 25 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-50522 ↗ · CISA KEV entry ↗
CVE-2026-16232 Check Point Check Point SmartConsole 22 Jul 2026 25 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-16232 ↗ · CISA KEV entry ↗
CVE-2021-27137 DD-WRT DD-WRT 21 Jul 2026 24 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-27137 ↗ · CISA KEV entry ↗
CVE-2026-0770 Langflow Langflow 21 Jul 2026 24 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-0770 ↗ · CISA KEV entry ↗
CVE-2026-63030 WordPress WordPress Core 21 Jul 2026 24 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-63030 ↗ · CISA KEV entry ↗
CVE-2026-60137 WordPress WordPress Core 21 Jul 2026 4 Aug 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-60137 ↗ · CISA KEV entry ↗
CVE-2026-39808 Fortinet Fortinet FortiSandbox 16 Jul 2026 19 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-39808 ↗ · CISA KEV entry ↗
CVE-2026-25089 Fortinet Fortinet FortiSandbox 16 Jul 2026 19 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-25089 ↗ · CISA KEV entry ↗
CVE-2026-58644 Microsoft Microsoft SharePoint 16 Jul 2026 19 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-58644 ↗ · CISA KEV entry ↗
CVE-2023-4346 KNX Association KNX Association KNX Protocol Connection Authorization Option 1 15 Jul 2026 29 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-4346 ↗ · CISA KEV entry ↗
CVE-2026-46817 Oracle Oracle E-Business Suite 15 Jul 2026 18 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-46817 ↗ · CISA KEV entry ↗
CVE-2026-15410 SonicWall SonicWall SMA1000 Appliances 14 Jul 2026 17 Jul 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-15410 ↗ · CISA KEV entry ↗
CVE-2026-15409 SonicWall SonicWall SMA1000 Appliances 14 Jul 2026 17 Jul 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-15409 ↗ · CISA KEV entry ↗
CVE-2026-56164 Microsoft Microsoft SharePoint Server 14 Jul 2026 17 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-56164 ↗ · CISA KEV entry ↗
CVE-2026-56155 Microsoft Microsoft Active Directory Federation Services 14 Jul 2026 28 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-56155 ↗ · CISA KEV entry ↗
CVE-2008-4128 Cisco Cisco IOS 13 Jul 2026 16 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2008-4128 ↗ · CISA KEV entry ↗
CVE-2026-48939 iCagenda iCagenda 10 Jul 2026 13 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48939 ↗ · CISA KEV entry ↗
CVE-2026-56291 Balbooa Balbooa Forms 10 Jul 2026 13 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-56291 ↗ · CISA KEV entry ↗
CVE-2026-48282 Adobe Adobe ColdFusion 7 Jul 2026 10 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48282 ↗ · CISA KEV entry ↗
CVE-2026-56290 Joomlack Joomlack Page Builder 7 Jul 2026 10 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-56290 ↗ · CISA KEV entry ↗
CVE-2026-55255 Langflow Langflow 7 Jul 2026 10 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-55255 ↗ · CISA KEV entry ↗
CVE-2026-48908 JoomShaper JoomShaper SP Page Builder 7 Jul 2026 10 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48908 ↗ · CISA KEV entry ↗
CVE-2026-45659 Microsoft Microsoft SharePoint Server 1 Jul 2026 4 Jul 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-45659 ↗ · CISA KEV entry ↗
CVE-2026-48558 SimpleHelp SimpleHelp 29 Jun 2026 2 Jul 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48558 ↗ · CISA KEV entry ↗
CVE-2026-20230 Cisco Cisco Unified Communications Manager 25 Jun 2026 28 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20230 ↗ · CISA KEV entry ↗
CVE-2026-12569 PTC PTC Windchill and FlexPLM 25 Jun 2026 28 Jun 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-12569 ↗ · CISA KEV entry ↗
CVE-2026-34908 Ubiquiti Ubiquiti UniFi OS 23 Jun 2026 26 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-34908 ↗ · CISA KEV entry ↗
CVE-2026-34909 Ubiquiti Ubiquiti UniFi OS 23 Jun 2026 26 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-34909 ↗ · CISA KEV entry ↗
CVE-2026-34910 Ubiquiti Ubiquiti UniFi OS 23 Jun 2026 26 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-34910 ↗ · CISA KEV entry ↗
CVE-2025-67038 Lantronix Lantronix EDS5000 23 Jun 2026 26 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-67038 ↗ · CISA KEV entry ↗
CVE-2026-20253 Splunk Splunk Enterprise 18 Jun 2026 21 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20253 ↗ · CISA KEV entry ↗
CVE-2026-48907 Widget Factory Widget Factory Joomla Content Editor 16 Jun 2026 19 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48907 ↗ · CISA KEV entry ↗
CVE-2026-20262 Cisco Cisco Catalyst SD-WAN Manager 15 Jun 2026 29 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20262 ↗ · CISA KEV entry ↗
CVE-2026-54420 LiteSpeed LiteSpeed cPanel Plugin 15 Jun 2026 18 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-54420 ↗ · CISA KEV entry ↗
CVE-2026-35273 Oracle Oracle PeopleSoft Enterprise PeopleTools 12 Jun 2026 15 Jun 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-35273 ↗ · CISA KEV entry ↗
CVE-2026-10520 Ivanti Ivanti Sentry 11 Jun 2026 14 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-10520 ↗ · CISA KEV entry ↗
CVE-2026-20245 Cisco Cisco Catalyst SD-WAN Manager 9 Jun 2026 23 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20245 ↗ · CISA KEV entry ↗
CVE-2026-7473 Arista Arista Extensible Operating System 9 Jun 2026 23 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-7473 ↗ · CISA KEV entry ↗
CVE-2026-11645 Google Google Chromium V8 9 Jun 2026 23 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-11645 ↗ · CISA KEV entry ↗
CVE-2026-50751 Check Point Check Point Security Gateway 8 Jun 2026 11 Jun 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-50751 ↗ · CISA KEV entry ↗
CVE-2026-42271 BerriAI BerriAI LiteLLM 8 Jun 2026 22 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-42271 ↗ · CISA KEV entry ↗
CVE-2026-28318 SolarWinds SolarWinds Serv-U 5 Jun 2026 19 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-28318 ↗ · CISA KEV entry ↗
CVE-2026-45247 Mirasvit Mirasvit Full Page Cache Warmer 3 Jun 2026 6 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-45247 ↗ · CISA KEV entry ↗
CVE-2025-48595 Android Android Framework 2 Jun 2026 5 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-48595 ↗ · CISA KEV entry ↗
CVE-2022-0492 Linux Linux Kernel 2 Jun 2026 5 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2022-0492 ↗ · CISA KEV entry ↗
CVE-2024-21182 Oracle Oracle WebLogic Server 1 Jun 2026 4 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-21182 ↗ · CISA KEV entry ↗
CVE-2026-0257 Palo Alto Networks Palo Alto Networks PAN-OS 29 May 2026 1 Jun 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-0257 ↗ · CISA KEV entry ↗
CVE-2026-8398 Daemon Daemon Tools Lite 27 May 2026 30 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-8398 ↗ · CISA KEV entry ↗
CVE-2026-45321 TanStack TanStack 27 May 2026 10 Jun 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-45321 ↗ · CISA KEV entry ↗
CVE-2026-48027 Nx Nx Console 27 May 2026 10 Jun 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48027 ↗ · CISA KEV entry ↗
CVE-2026-48172 LiteSpeed LiteSpeed cPanel Plugin 26 May 2026 29 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-48172 ↗ · CISA KEV entry ↗
CVE-2026-9082 Drupal Drupal Core 22 May 2026 27 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-9082 ↗ · CISA KEV entry ↗
CVE-2026-34926 Trend Micro Trend Micro Apex One 21 May 2026 4 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-34926 ↗ · CISA KEV entry ↗
CVE-2025-34291 Langflow Langflow 21 May 2026 4 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-34291 ↗ · CISA KEV entry ↗
CVE-2026-45498 Microsoft Microsoft Defender 20 May 2026 3 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-45498 ↗ · CISA KEV entry ↗
CVE-2026-41091 Microsoft Microsoft Defender 20 May 2026 3 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-41091 ↗ · CISA KEV entry ↗
CVE-2010-0806 Microsoft Microsoft Internet Explorer 20 May 2026 3 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2010-0806 ↗ · CISA KEV entry ↗
CVE-2010-0249 Microsoft Microsoft Internet Explorer 20 May 2026 3 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2010-0249 ↗ · CISA KEV entry ↗
CVE-2009-3459 Adobe Adobe Acrobat and Reader 20 May 2026 3 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2009-3459 ↗ · CISA KEV entry ↗
CVE-2009-1537 Microsoft Microsoft DirectX 20 May 2026 3 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2009-1537 ↗ · CISA KEV entry ↗
CVE-2008-4250 Microsoft Microsoft Windows 20 May 2026 3 Jun 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2008-4250 ↗ · CISA KEV entry ↗
CVE-2026-42897 Microsoft Microsoft 15 May 2026 29 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-42897 ↗ · CISA KEV entry ↗
CVE-2026-20182 Cisco Cisco Catalyst SD-WAN 14 May 2026 17 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20182 ↗ · CISA KEV entry ↗
CVE-2026-42208 BerriAI BerriAI LiteLLM 8 May 2026 11 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-42208 ↗ · CISA KEV entry ↗
CVE-2026-6973 Ivanti Ivanti Endpoint Manager Mobile (EPMM) 7 May 2026 10 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-6973 ↗ · CISA KEV entry ↗
CVE-2026-0300 Palo Alto Networks Palo Alto Networks PAN-OS 6 May 2026 9 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-0300 ↗ · CISA KEV entry ↗
CVE-2026-31431 Linux Linux Kernel 1 May 2026 15 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-31431 ↗ · CISA KEV entry ↗
CVE-2026-41940 WebPros WebPros cPanel & WHM and WP2 (WordPress Squared) 30 Apr 2026 3 May 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-41940 ↗ · CISA KEV entry ↗
CVE-2026-32202 Microsoft Microsoft Windows 28 Apr 2026 12 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-32202 ↗ · CISA KEV entry ↗
CVE-2024-1708 ConnectWise ConnectWise ScreenConnect 28 Apr 2026 12 May 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-1708 ↗ · CISA KEV entry ↗
CVE-2024-57726 SimpleHelp SimpleHelp 24 Apr 2026 8 May 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-57726 ↗ · CISA KEV entry ↗
CVE-2024-57728 SimpleHelp SimpleHelp 24 Apr 2026 8 May 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-57728 ↗ · CISA KEV entry ↗
CVE-2024-7399 Samsung Samsung MagicINFO 9 Server 24 Apr 2026 8 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-7399 ↗ · CISA KEV entry ↗
CVE-2025-29635 D-Link D-Link DIR-823X 24 Apr 2026 8 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-29635 ↗ · CISA KEV entry ↗
CVE-2026-39987 Marimo Marimo 23 Apr 2026 7 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-39987 ↗ · CISA KEV entry ↗
CVE-2026-33825 Microsoft Microsoft Defender 22 Apr 2026 6 May 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-33825 ↗ · CISA KEV entry ↗
CVE-2024-27199 JetBrains JetBrains TeamCity 20 Apr 2026 4 May 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-27199 ↗ · CISA KEV entry ↗
CVE-2025-32975 Quest Quest KACE Systems Management Appliance (SMA) 20 Apr 2026 4 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-32975 ↗ · CISA KEV entry ↗
CVE-2026-20128 Cisco Cisco Catalyst SD-WAN Manager 20 Apr 2026 23 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20128 ↗ · CISA KEV entry ↗
CVE-2025-48700 Synacor Synacor Zimbra Collaboration Suite (ZCS) 20 Apr 2026 23 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-48700 ↗ · CISA KEV entry ↗
CVE-2023-27351 PaperCut PaperCut NG/MF 20 Apr 2026 4 May 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-27351 ↗ · CISA KEV entry ↗
CVE-2025-2749 Kentico Kentico Xperience 20 Apr 2026 4 May 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-2749 ↗ · CISA KEV entry ↗
CVE-2026-20133 Cisco Cisco Catalyst SD-WAN Manager 20 Apr 2026 23 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20133 ↗ · CISA KEV entry ↗
CVE-2026-20122 Cisco Cisco Catalyst SD-WAN Manger 20 Apr 2026 23 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20122 ↗ · CISA KEV entry ↗
CVE-2026-34197 Apache Apache ActiveMQ 16 Apr 2026 30 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-34197 ↗ · CISA KEV entry ↗
CVE-2026-32201 Microsoft Microsoft SharePoint Server 14 Apr 2026 28 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-32201 ↗ · CISA KEV entry ↗
CVE-2009-0238 Microsoft Microsoft Office 14 Apr 2026 28 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2009-0238 ↗ · CISA KEV entry ↗
CVE-2026-34621 Adobe Adobe Acrobat and Reader 13 Apr 2026 27 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-34621 ↗ · CISA KEV entry ↗
CVE-2026-21643 Fortinet Fortinet FortiClient EMS 13 Apr 2026 16 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21643 ↗ · CISA KEV entry ↗
CVE-2020-9715 Adobe Adobe Acrobat 13 Apr 2026 27 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2020-9715 ↗ · CISA KEV entry ↗
CVE-2023-36424 Microsoft Microsoft Windows 13 Apr 2026 27 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-36424 ↗ · CISA KEV entry ↗
CVE-2023-21529 Microsoft Microsoft Exchange Server 13 Apr 2026 27 Apr 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-21529 ↗ · CISA KEV entry ↗
CVE-2025-60710 Microsoft Microsoft Windows 13 Apr 2026 27 Apr 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-60710 ↗ · CISA KEV entry ↗
CVE-2012-1854 Microsoft Microsoft Visual Basic for Applications (VBA) 13 Apr 2026 27 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2012-1854 ↗ · CISA KEV entry ↗
CVE-2026-1340 Ivanti Ivanti Endpoint Manager Mobile (EPMM) 8 Apr 2026 11 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-1340 ↗ · CISA KEV entry ↗
CVE-2026-35616 Fortinet Fortinet FortiClient EMS 6 Apr 2026 9 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-35616 ↗ · CISA KEV entry ↗
CVE-2026-3502 TrueConf TrueConf Client 2 Apr 2026 16 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-3502 ↗ · CISA KEV entry ↗
CVE-2026-5281 Google Google Dawn 1 Apr 2026 15 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-5281 ↗ · CISA KEV entry ↗
CVE-2026-3055 Citrix Citrix NetScaler 30 Mar 2026 2 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-3055 ↗ · CISA KEV entry ↗
CVE-2025-53521 F5 F5 BIG-IP 27 Mar 2026 30 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-53521 ↗ · CISA KEV entry ↗
CVE-2026-33634 Aquasecurity Aquasecurity Trivy 26 Mar 2026 9 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-33634 ↗ · CISA KEV entry ↗
CVE-2026-33017 Langflow Langflow 25 Mar 2026 8 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-33017 ↗ · CISA KEV entry ↗
CVE-2025-31277 Apple Apple Multiple Products 20 Mar 2026 3 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-31277 ↗ · CISA KEV entry ↗
CVE-2025-43520 Apple Apple Multiple Products 20 Mar 2026 3 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-43520 ↗ · CISA KEV entry ↗
CVE-2025-43510 Apple Apple Multiple Products 20 Mar 2026 3 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-43510 ↗ · CISA KEV entry ↗
CVE-2025-54068 Laravel Laravel Livewire 20 Mar 2026 3 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-54068 ↗ · CISA KEV entry ↗
CVE-2025-32432 Craft CMS Craft CMS 20 Mar 2026 3 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-32432 ↗ · CISA KEV entry ↗
CVE-2026-20131 Cisco Cisco Secure Firewall Management Center (FMC) 19 Mar 2026 22 Mar 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20131 ↗ · CISA KEV entry ↗
CVE-2026-20963 Microsoft Microsoft SharePoint 18 Mar 2026 21 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20963 ↗ · CISA KEV entry ↗
CVE-2025-66376 Synacor Synacor Zimbra Collaboration Suite (ZCS) 18 Mar 2026 1 Apr 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-66376 ↗ · CISA KEV entry ↗
CVE-2025-47813 Wing FTP Server Wing FTP Server 16 Mar 2026 30 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-47813 ↗ · CISA KEV entry ↗
CVE-2026-3909 Google Google Skia 13 Mar 2026 27 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-3909 ↗ · CISA KEV entry ↗
CVE-2026-3910 Google Google Chromium V8 13 Mar 2026 27 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-3910 ↗ · CISA KEV entry ↗
CVE-2025-68613 n8n n8n 11 Mar 2026 25 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-68613 ↗ · CISA KEV entry ↗
CVE-2026-1603 Ivanti Ivanti Endpoint Manager (EPM) 9 Mar 2026 23 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-1603 ↗ · CISA KEV entry ↗
CVE-2025-26399 SolarWinds SolarWinds Web Help Desk 9 Mar 2026 12 Mar 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-26399 ↗ · CISA KEV entry ↗
CVE-2021-22054 Omnissa Omnissa Workspace One UEM 9 Mar 2026 23 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-22054 ↗ · CISA KEV entry ↗
CVE-2023-41974 Apple Apple iOS and iPadOS 5 Mar 2026 26 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-41974 ↗ · CISA KEV entry ↗
CVE-2021-30952 Apple Apple Multiple Products 5 Mar 2026 26 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-30952 ↗ · CISA KEV entry ↗
CVE-2023-43000 Apple Apple Multiple Products 5 Mar 2026 26 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2023-43000 ↗ · CISA KEV entry ↗
CVE-2021-22681 Rockwell Rockwell Multiple Products 5 Mar 2026 26 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-22681 ↗ · CISA KEV entry ↗
CVE-2017-7921 Hikvision Hikvision Multiple Products 5 Mar 2026 26 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2017-7921 ↗ · CISA KEV entry ↗
CVE-2026-21385 Qualcomm Qualcomm Multiple Chipsets 3 Mar 2026 24 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21385 ↗ · CISA KEV entry ↗
CVE-2026-22719 Broadcom Broadcom VMware Aria Operations 3 Mar 2026 24 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-22719 ↗ · CISA KEV entry ↗
CVE-2026-20127 Cisco Cisco Catalyst SD-WAN Controller and Manager 25 Feb 2026 27 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20127 ↗ · CISA KEV entry ↗
CVE-2022-20775 Cisco Cisco SD-WAN 25 Feb 2026 27 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2022-20775 ↗ · CISA KEV entry ↗
CVE-2026-25108 Soliton Systems K.K Soliton Systems K.K FileZen 24 Feb 2026 17 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-25108 ↗ · CISA KEV entry ↗
CVE-2025-68461 Roundcube Roundcube Webmail 20 Feb 2026 13 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-68461 ↗ · CISA KEV entry ↗
CVE-2025-49113 Roundcube Roundcube Webmail 20 Feb 2026 13 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-49113 ↗ · CISA KEV entry ↗
CVE-2026-22769 Dell Dell RecoverPoint for Virtual Machines (RP4VMs) 18 Feb 2026 21 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-22769 ↗ · CISA KEV entry ↗
CVE-2021-22175 GitLab GitLab 18 Feb 2026 11 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-22175 ↗ · CISA KEV entry ↗
CVE-2026-2441 Google Google Chromium 17 Feb 2026 10 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-2441 ↗ · CISA KEV entry ↗
CVE-2008-0015 Microsoft Microsoft Windows 17 Feb 2026 10 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2008-0015 ↗ · CISA KEV entry ↗
CVE-2024-7694 TeamT5 TeamT5 ThreatSonar Anti-Ransomware 17 Feb 2026 10 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-7694 ↗ · CISA KEV entry ↗
CVE-2020-7796 Synacor Synacor Zimbra Collaboration Suite 17 Feb 2026 10 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2020-7796 ↗ · CISA KEV entry ↗
CVE-2026-1731 BeyondTrust BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) 13 Feb 2026 16 Feb 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-1731 ↗ · CISA KEV entry ↗
CVE-2025-40536 SolarWinds SolarWinds Web Help Desk 12 Feb 2026 15 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-40536 ↗ · CISA KEV entry ↗
CVE-2025-15556 Notepad++ Notepad++ 12 Feb 2026 5 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-15556 ↗ · CISA KEV entry ↗
CVE-2024-43468 Microsoft Microsoft Configuration Manager 12 Feb 2026 5 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-43468 ↗ · CISA KEV entry ↗
CVE-2026-20700 Apple Apple Multiple Products 12 Feb 2026 5 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20700 ↗ · CISA KEV entry ↗
CVE-2026-21514 Microsoft Microsoft Office 10 Feb 2026 3 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21514 ↗ · CISA KEV entry ↗
CVE-2026-21519 Microsoft Microsoft Windows 10 Feb 2026 3 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21519 ↗ · CISA KEV entry ↗
CVE-2026-21533 Microsoft Microsoft Windows 10 Feb 2026 3 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21533 ↗ · CISA KEV entry ↗
CVE-2026-21510 Microsoft Microsoft Windows 10 Feb 2026 3 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21510 ↗ · CISA KEV entry ↗
CVE-2026-21525 Microsoft Microsoft Windows 10 Feb 2026 3 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21525 ↗ · CISA KEV entry ↗
CVE-2026-21513 Microsoft Microsoft Windows 10 Feb 2026 3 Mar 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21513 ↗ · CISA KEV entry ↗
CVE-2026-24423 SmarterTools SmarterTools SmarterMail 5 Feb 2026 26 Feb 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-24423 ↗ · CISA KEV entry ↗
CVE-2025-11953 React Native Community React Native Community CLI 5 Feb 2026 26 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-11953 ↗ · CISA KEV entry ↗
CVE-2025-40551 SolarWinds SolarWinds Web Help Desk 3 Feb 2026 6 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-40551 ↗ · CISA KEV entry ↗
CVE-2019-19006 Sangoma Sangoma FreePBX 3 Feb 2026 24 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2019-19006 ↗ · CISA KEV entry ↗
CVE-2025-64328 Sangoma Sangoma FreePBX 3 Feb 2026 24 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-64328 ↗ · CISA KEV entry ↗
CVE-2021-39935 GitLab GitLab Community and Enterprise Editions 3 Feb 2026 24 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2021-39935 ↗ · CISA KEV entry ↗
CVE-2026-1281 Ivanti Ivanti Endpoint Manager Mobile (EPMM) 29 Jan 2026 1 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-1281 ↗ · CISA KEV entry ↗
CVE-2026-24858 Fortinet Fortinet Multiple Products 27 Jan 2026 30 Jan 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-24858 ↗ · CISA KEV entry ↗
CVE-2026-21509 Microsoft Microsoft Office 26 Jan 2026 16 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-21509 ↗ · CISA KEV entry ↗
CVE-2026-24061 GNU GNU InetUtils 26 Jan 2026 16 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-24061 ↗ · CISA KEV entry ↗
CVE-2026-23760 SmarterTools SmarterTools SmarterMail 26 Jan 2026 16 Feb 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-23760 ↗ · CISA KEV entry ↗
CVE-2025-52691 SmarterTools SmarterTools SmarterMail 26 Jan 2026 16 Feb 2026 Known CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-52691 ↗ · CISA KEV entry ↗
CVE-2018-14634 Linux Linux Kernel 26 Jan 2026 16 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2018-14634 ↗ · CISA KEV entry ↗
CVE-2024-37079 Broadcom Broadcom VMware vCenter Server 23 Jan 2026 13 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2024-37079 ↗ · CISA KEV entry ↗
CVE-2025-54313 Prettier Prettier eslint-config-prettier 22 Jan 2026 12 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-54313 ↗ · CISA KEV entry ↗
CVE-2025-31125 Vite Vitejs 22 Jan 2026 12 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-31125 ↗ · CISA KEV entry ↗
CVE-2025-34026 Versa Versa Concerto 22 Jan 2026 12 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-34026 ↗ · CISA KEV entry ↗
CVE-2025-68645 Synacor Synacor Zimbra Collaboration Suite (ZCS) 22 Jan 2026 12 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-68645 ↗ · CISA KEV entry ↗
CVE-2026-20045 Cisco Cisco Unified Communications Manager 21 Jan 2026 11 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20045 ↗ · CISA KEV entry ↗
CVE-2026-20805 Microsoft Microsoft Windows 13 Jan 2026 3 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2026-20805 ↗ · CISA KEV entry ↗
CVE-2025-8110 Gogs Gogs 12 Jan 2026 2 Feb 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-8110 ↗ · CISA KEV entry ↗
CVE-2025-37164 Hewlett Packard Enterprise (HPE) Hewlett Packard Enterprise (HPE) OneView 7 Jan 2026 28 Jan 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2025-37164 ↗ · CISA KEV entry ↗
CVE-2009-0556 Microsoft Microsoft Office 7 Jan 2026 28 Jan 2026 Unknown CISA Known Exploited Vulnerabilities Catalog (2026.11.09)

Full CISA detail loads when opened. Canonical records: CVE-2009-0556 ↗ · CISA KEV entry ↗

About this data

Scope
Every entry CISA added to the Known Exploited Vulnerabilities catalog during 2026. Earlier additions remain in CISA's catalog and are not carried here.
Key facts
  • 289 entries across 109 vendors. Microsoft accounts for 40 of them, 14% of the catalog year to date.
  • CISA records 27 as known ransomware-campaign use and 262 as unknown, which states that the use is unestablished rather than absent.
  • CISA gives federal agencies a median of 3 days to remediate a listed flaw, ranging from 2 to 21. That window is how urgently it treats what it lists.
Reading the table
Entries as published in CISA’s Known Exploited Vulnerabilities catalog, verbatim; the due date is the federal remediation deadline CISA set for that entry, under the directive in force when it was added. Exploitation status is CISA’s statement, not our assessment. Informational only, not remediation advice.

Using this data in research or journalism?

Quoting a figure with a link to this page needs no permission. Reuse of the compiled dataset is licensed under CC BY 4.0: credit SQ Magazine and link back.

Download CSV

What the data shows

The charts below redraw the table above as the trends and comparisons a table cannot show.

Catalog additions by month

Entries CISA added to its catalog each month, the latest twelve. The catalog is read in full, so a month with no bar had no additions.

01020304050172826312123263143367Jan 2026Mar 2026May 2026Jul 2026Sep 2026Nov 202601020304050172826312123263143367Feb 2026May 2026Aug 2026Nov 2026

Linked to ransomware

CISA's own flag on each entry. Unknown means CISA has not tied the flaw to a campaign, not that none exists.

Ransomware use unknown 262Known ransomware use 27Ransomware use unknown 262Known ransomware use 27

Verification ledger

5 most recent of 45 logged updates · RSS

  1. Latest Updated

    Deterministic sync against CISA catalog 2026.11.09: 4 added, 0 revised, 0 removed.

  2. Updated

    Deterministic sync against CISA catalog 2026.11.06: 1 added, 0 revised, 0 removed.

  3. Updated

    Deterministic sync against CISA catalog 2026.11.04: 1 added, 0 revised, 0 removed.

  4. Updated

    Deterministic sync against CISA catalog 2026.11.03: 1 added, 0 revised, 0 removed.

  5. Updated

    Deterministic sync against CISA catalog 2026.10.30: 2 added, 0 revised, 0 removed.

How this tracker is maintained

Every entry mirrors CISA’s own catalog, and nothing is added on our judgment.

  1. Sourced

    Entries come from CISA’s Known Exploited Vulnerabilities catalog, the machine-readable feed the agency publishes itself. The vendor, product, description and required action are CISA’s wording, not a paraphrase; a vulnerability CISA has not listed does not appear here however widely it is discussed.

  2. Dated

    Each row carries the date CISA added it and the remediation date CISA set for it. Both are the agency’s dates, and the gap between them is CISA’s judgment of urgency rather than ours.

  3. Re-checked

    The catalog is re-read weekly and the page rebuilt from it. Entries CISA revises are updated in place; entries CISA removes are removed here.

Why use this instead of CISA’s own page?
For a single lookup, use CISA. This page exists for the questions the catalog does not answer on its own: how the year’s additions distribute across vendors, how long a remediation window actually is, and how many entries carry a confirmed ransomware link. The rows are CISA’s; the summary is what we add.
What does the remediation deadline mean for me?
Legally, nothing unless you are a US federal civilian agency: the deadlines bind them under a binding operational directive. For everyone else it is a signal of how seriously the agency treats a flaw, not a schedule you inherit.
Why is ransomware use often “unknown”?
Because that is what CISA records. Unknown means the agency has not established a ransomware link, not that it has ruled one out, and this page keeps the distinction rather than reporting only the confirmed cases.

This is informational content, not patching guidance for your environment. CISA’s remediation deadlines bind US federal civilian agencies; they are not a statement about your own risk or priority. Prioritize using the linked advisory, the vendor’s own fix, and your asset inventory.

Data products updated on a regular schedule.

All Threat Index trackers

  • Healthcare of 26 breaches

    15

    Healthcare 15 Finance 2 Technology 2 Other 7

    26 breaches, As disclosed

    Data Breach

    Major breaches as they are disclosed: organization, records, vector, and the notice itself.

    33M individuals

    Largest breach, Coupang

  • CVEs, Oct 2026 7 vendors

    1,664

    Microsoft 1,408 CVEs, Adobe 189 CVEs, Siemens 41 CVEs, SAP 20 CVEs

    77 bulletins, Monthly

    Patch Tuesday Dashboard

    Monthly CVE counts by vendor and severity, from the vendors' own bulletins.

    8 zero-days, Jan 2025

    Most in one cycle, Microsoft

  • Largest in euros Meta Platforms Ireland

    €1.2 billion

    Meta €1.2B, TikTok €530M, Google €325M, LinkedIn €310M

    21 penalties, Monthly

    Privacy Fines

    Data-protection penalties as the authorities publish them, in the currency they stated.

    Google, Sep 2025

    Most recent decision

  • Raised in US dollars 96 rounds

    $300.8B

    Lab $256.3B, Infra $17.2B, Apps $13.6B, Chips $5.1B

    106 rounds, On change

    AI Funding

    The $100M+ rounds reshaping AI, from the companies' own announcements.

    Legora Series E

    Most recent round, 21 Oct 2026

Company
Discover
Categories
Internet
Technology
Artificial Intelligence
Gaming
Categories
Artificial Intelligence
Cybersecurity
Technology
Internet
All 8 Network Tools
All 12 tools