CISA Known Exploited Vulnerabilities
1,762 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2026-76460 |
Cisco | Identity Services Engine | — | 0.7560 | 2026-09-16 | 2026-09-19 | |
CVE-2026-87886 |
Acronis | Backup | — | 0.0023 | 2026-09-16 | 2026-09-19 | |
CVE-2026-76461 |
Cisco | Secure Email Gateway | — | 0.2954 | 2026-09-14 | 2026-09-17 | |
CVE-2026-84869 |
ConnectWise | ScreenConnect | — | 0.0092 | 2026-09-11 | 2026-09-14 | |
CVE-2026-42016 |
JFrog | Artifactory | 8.8 | 0.0864 | 2026-09-11 | 2026-09-25 | |
CVE-2026-42018 |
JFrog | Artifactory | 7.5 | 0.0980 | 2026-09-11 | 2026-09-25 | |
CVE-2026-85706 |
GitLab | Community Edition and Enterprise Edition | — | 0.9736 | 2026-09-11 | 2026-09-14 | |
CVE-2026-86060 |
MikroTik | RouterOS | — | 0.0639 | 2026-09-10 | 2026-09-13 | |
CVE-2026-67277 |
MikroTik | RouterOS | — | 0.0156 | 2026-09-10 | 2026-09-13 | |
CVE-2026-19490 |
Citrix | NetScaler | 9.3 | 0.3265 | 2026-09-09 | 2026-09-12 | |
CVE-2025-25249 |
Fortinet | Multiple Products | — | 0.0374 | 2026-09-09 | 2026-09-12 | |
CVE-2026-87491 |
Chromium V8 | — | 0.0351 | 2026-09-09 | 2026-09-23 | ||
CVE-2026-20079 |
Cisco | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | — | 0.8847 | 2026-09-09 | 2026-09-12 | |
CVE-2026-75650 |
Adobe | Commerce and Magento | — | 0.0395 | 2026-09-08 | 2026-09-11 | |
CVE-2026-81963 |
Microsoft | Windows | — | 0.0039 | 2026-09-08 | 2026-09-22 | |
CVE-2026-86218 |
N-able | N-central | — | 0.1538 | 2026-09-08 | 2026-09-11 | |
CVE-2026-85880 |
Microsoft | Windows | — | 0.0039 | 2026-09-08 | 2026-09-22 | |
CVE-2026-85046 |
Chromium V8 | — | 0.0181 | 2026-09-04 | 2026-09-18 | ||
CVE-2026-59822 |
BerriAI | LiteLLM | 8.8 | 0.0084 | 2026-09-02 | 2026-09-16 | |
CVE-2026-48710 |
Kludex | Starlette | — | 0.7029 | 2026-09-02 | 2026-09-16 | |
CVE-2026-49869 |
Kestra | Kestra OSS | 10.0 | 0.0209 | 2026-09-02 | 2026-09-05 | |
CVE-2026-82329 |
JFrog | Artifactory | — | 0.1437 | 2026-09-02 | 2026-09-05 | |
CVE-2026-9586 |
Sangoma | Switchvox | 9.3 | 0.1898 | 2026-09-02 | 2026-09-05 | |
CVE-2026-83548 |
SonicWall | SMA1000 Appliances | — | 0.0804 | 2026-09-02 | 2026-09-05 | |
CVE-2026-83549 |
SonicWall | SMA1000 Appliances | — | 0.0989 | 2026-09-02 | 2026-09-05 | |
CVE-2026-82078 |
PaperCut | NG/MF | — | 0.6089 | 2026-08-31 | 2026-09-14 | |
CVE-2026-81578 |
PaperCut | NG/MF | — | 0.8373 | 2026-08-31 | 2026-09-14 | |
CVE-2023-49105 |
ownCloud | ownCloud | — | 0.4319 | 2026-08-27 | 2026-08-30 | |
CVE-2026-53362 |
Linux | Kernel | — | 0.0071 | 2026-08-27 | 2026-08-30 | |
CVE-2026-66384 |
JFrog | Artifactory | 5.3 | 0.0066 | 2026-08-27 | 2026-09-10 | |
CVE-2021-23758 |
Ajax.NET Professional | Ajax.NET Professional | — | — | 2026-08-26 | 2026-09-09 | |
CVE-2015-3246 |
Red Hat | Libuser | — | — | 2026-08-26 | 2026-09-09 | |
CVE-2015-5287 |
Red Hat | Automatic Bug Reporting Tool | — | — | 2026-08-26 | 2026-09-09 | |
CVE-2022-0995 |
Linux | Kernel | — | — | 2026-08-26 | 2026-08-29 | |
CVE-2026-8452 |
Citrix | NetScaler ADC and NetScaler Gateway | — | 0.0101 | 2026-08-26 | 2026-08-29 | |
CVE-2019-1068 |
Microsoft | SQL Server | — | — | 2026-08-26 | 2026-08-29 | |
CVE-2026-60004 |
Gitea | Gitea | — | 0.2399 | 2026-08-25 | 2026-08-28 | |
CVE-2026-21962 |
Oracle | HTTP Server and Oracle Weblogic Server Proxy Plug-in | — | 0.7319 | 2026-08-24 | 2026-08-27 | |
CVE-2026-73570 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.7166 | 2026-08-21 | 2026-08-24 | |
CVE-2026-72530 |
TrueConf | Server | — | 0.0169 | 2026-08-20 | 2026-09-03 | |
CVE-2026-72529 |
TrueConf | Server | — | 0.0146 | 2026-08-20 | 2026-08-23 | |
CVE-2026-64849 |
MLflow | MLflow | 9.3 | 0.1002 | 2026-08-19 | 2026-09-02 | |
CVE-2026-33824 |
Microsoft | Internet Key Exchange (IKE) Service Extensions | — | 0.7705 | 2026-08-18 | 2026-08-21 | |
CVE-2026-59310 |
Broadcom | VMware vCenter | — | 0.0256 | 2026-08-18 | 2026-08-21 | RW |
CVE-2026-55040 |
Microsoft | SharePoint | 9.1 | 0.6954 | 2026-08-18 | 2026-08-21 | 5 PoC |
CVE-2026-65400 |
Apple | macOS | 9.8 | 0.0172 | 2026-08-18 | 2026-08-21 | |
CVE-2025-62593 |
Ray-Project | Ray | — | 0.6015 | 2026-08-17 | 2026-08-20 | |
CVE-2026-20349 |
Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 8.6 | 0.0101 | 2026-08-11 | 2026-08-14 | |
CVE-2026-68820 |
Microsoft | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0033 | 2026-08-11 | 2026-08-25 | 4 PoC |
CVE-2026-72898 |
Metabase | Metabase | — | 0.9855 | 2026-08-11 | 2026-08-14 |