CISA Known Exploited Vulnerabilities
1,762 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2026-41709 |
Broadcom | VMware ESX | 2.7 | 0.0030 | 2026-10-28 | 2026-11-11 | |
CVE-2026-46300 |
Linux | Kernel | 7.8 | 0.1019 | 2026-10-28 | 2026-10-31 | 15 PoC |
CVE-2026-48356 |
Adobe | Commerce and Magento | 9.3 | 0.5908 | 2026-10-27 | 2026-11-10 | |
CVE-2026-111497 |
Brotli | 9.2 | 0.8799 | 2026-10-27 | 2026-11-10 | ||
CVE-2026-109618 |
PHP Group | PHP | 9.2 | 1.0000 | 2026-10-26 | 2026-10-29 | 710 PoC |
CVE-2026-109619 |
PHP Group | PHP | 9.2 | 1.0000 | 2026-10-26 | 2026-10-29 | |
CVE-2026-114625 |
Arista | VeloCloud Orchestrator | 9.4 | 0.0103 | 2026-10-23 | 2026-10-26 | |
CVE-2026-110447 |
Collabora | Collabora Online – Built-in CODE Server | 9.2 | 0.1163 | 2026-10-23 | 2026-10-26 | |
CVE-2026-106931 |
EG Secure Solutions | SiteGuard Server Edition | — | 0.0253 | 2026-10-20 | 2026-10-23 | |
CVE-2026-96656 |
Plex | Media Server | — | 0.0179 | 2026-10-20 | 2026-10-23 | |
CVE-2026-96655 |
Plex | Media Server | — | 0.0164 | 2026-10-20 | 2026-11-03 | |
CVE-2026-96654 |
Plex | Media Server | — | 0.0195 | 2026-10-20 | 2026-10-23 | |
CVE-2026-96652 |
Plex | Media Server | — | 0.0182 | 2026-10-20 | 2026-11-03 | |
CVE-2026-110936 |
Siemens | Software Center | — | 0.0097 | 2026-10-20 | 2026-11-03 | |
CVE-2026-102764 |
BeyondTrust | Remote Support | — | 0.1895 | 2026-10-16 | 2026-10-19 | |
CVE-2025-61624 |
Fortinet | Multiple Products | — | 0.0134 | 2026-10-16 | 2026-10-19 | |
CVE-2026-21589 |
Atlassian | Multiple Products | 9.3 | 0.9948 | 2026-10-15 | 2026-10-18 | 13 PoC |
CVE-2026-105134 |
Ahsay | AhsayCBS | 10.0 | 0.8176 | 2026-10-14 | 2026-10-17 | |
CVE-2026-76519 |
Cisco | Secure Email Gateway | — | 0.0215 | 2026-10-14 | 2026-10-17 | |
CVE-2026-105133 |
Ahsay | AhsayCBS | 6.9 | 0.7947 | 2026-10-14 | 2026-10-17 | |
CVE-2026-0322 |
Palo Alto Networks | PAN-OS | — | 0.0174 | 2026-10-14 | 2026-10-17 | |
CVE-2026-104935 |
Ivanti | Connect Secure | — | 0.8677 | 2026-10-13 | 2026-10-16 | |
CVE-2026-96951 |
Microsoft | Windows | 8.8 | 0.0981 | 2026-10-13 | 2026-10-16 | |
CVE-2015-5477 |
ISC | BIND | — | — | 2026-10-08 | 2026-10-11 | |
CVE-2016-3081 |
Apache | Struts | — | — | 2026-10-08 | 2026-10-11 | |
CVE-2023-22894 |
Strapi | Strapi | — | 0.0411 | 2026-10-08 | 2026-10-11 | |
CVE-2021-3199 |
ONLYOFFICE | Docs | — | — | 2026-10-08 | 2026-10-11 | |
CVE-2015-3306 |
ProFTPD | ProFTPD | — | — | 2026-10-08 | 2026-10-11 | |
CVE-2026-88779 |
Citrix | NetScaler | — | 0.1139 | 2026-10-04 | 2026-10-07 | |
CVE-2026-102490 |
Zammad GmbH | Zammad | — | 0.0086 | 2026-10-02 | 2026-10-05 | |
CVE-2026-102489 |
Zammad GmbH | Zammad | — | 0.0196 | 2026-10-02 | 2026-10-05 | |
CVE-2026-104286 |
Fortinet | FortiMail | 9.8 | 0.0457 | 2026-10-01 | 2026-10-04 | |
CVE-2026-76504 |
Cisco | Catalyst SD-WAN Manager | — | 0.3893 | 2026-09-30 | 2026-10-03 | |
CVE-2026-86950 |
Apple | Multiple Products | 8.8 | 0.2617 | 2026-09-29 | 2026-10-13 | |
CVE-2026-88772 |
Citrix | NetScaler | — | 0.7816 | 2026-09-27 | 2026-09-30 | |
CVE-2026-88771 |
Citrix | NetScaler | — | 0.8216 | 2026-09-27 | 2026-09-30 | |
CVE-2026-67279 |
MikroTik | RouterOS | — | 0.0228 | 2026-09-25 | 2026-09-28 | |
CVE-2026-65660 |
Microsoft | SharePoint | 8.8 | 0.0819 | 2026-09-25 | 2026-09-28 | 2 PoC |
CVE-2026-87902 |
WordPress | Core | — | 0.9577 | 2026-09-25 | 2026-09-28 | |
CVE-2026-5430 |
WSO2 | Multiple Products | — | 0.2239 | 2026-09-24 | 2026-09-27 | |
CVE-2026-71362 |
Adobe | Commerce and Magento | 9.1 | 0.9049 | 2026-09-24 | 2026-09-27 | |
CVE-2026-93952 |
Arista | VeloCloud Orchestrator | — | 0.0138 | 2026-09-22 | 2026-09-25 | |
CVE-2026-94127 |
F5 | BIG-IP APM | — | 0.2494 | 2026-09-22 | 2026-09-25 | |
CVE-2026-93616 |
Check Point | Multiple Products | — | 0.9161 | 2026-09-22 | 2026-09-25 | |
CVE-2026-85102 |
Check Point | Multiple Products | — | 0.5414 | 2026-09-22 | 2026-09-25 | |
CVE-2026-7273 |
Zyxel | GS1900 Series Switches | 8.8 | 0.0278 | 2026-09-21 | 2026-09-24 | |
CVE-2025-39964 |
Linux | Kernel | — | 0.0157 | 2026-09-18 | 2026-09-21 | |
CVE-2026-53266 |
Linux | Kernel | — | 0.0093 | 2026-09-18 | 2026-09-21 | |
CVE-2025-39682 |
Linux | Kernel | — | 0.0325 | 2026-09-18 | 2026-09-21 | |
CVE-2026-58704 |
Pixel | — | 0.0063 | 2026-09-16 | 2026-09-19 |