CISA Known Exploited Vulnerabilities
1,762 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2026-8037 |
Progress | LoadMaster | — | 0.9984 | 2026-08-07 | 2026-08-10 | |
CVE-2026-63077 |
JetBrains | TeamCity | 9.8 | 0.9356 | 2026-08-05 | 2026-08-08 | RW |
CVE-2026-18556 |
N-able | N-central | 8.2 | 0.0788 | 2026-08-04 | 2026-08-07 | |
CVE-2026-34486 |
Apache | Tomcat | — | 0.9850 | 2026-08-04 | 2026-08-07 | |
CVE-2026-9198 |
IBM | Langflow | 9.8 | 0.2866 | 2026-08-04 | 2026-08-07 | |
CVE-2026-18577 |
N-able | N-central | 8.2 | 0.1462 | 2026-08-03 | 2026-08-06 | |
CVE-2026-20316 |
Cisco | Secure Firewall Management Center (FMC) | 5.3 | 0.3510 | 2026-07-29 | 2026-08-01 | RW |
CVE-2025-68686 |
Fortinet | FortiOS | — | 0.2950 | 2026-07-27 | 2026-08-10 | |
CVE-2026-16812 |
Arista | VeloCloud Orchestrator | 10.0 | 0.0100 | 2026-07-27 | 2026-07-30 | |
CVE-2026-16232 |
Check Point | SmartConsole | 9.3 | 0.0352 | 2026-07-22 | 2026-07-25 | |
CVE-2026-50522 |
Microsoft | SharePoint | 9.8 | 0.0304 | 2026-07-22 | 2026-07-25 | |
CVE-2026-60137 |
WordPress | Core | — | 0.0532 | 2026-07-21 | 2026-08-04 | |
CVE-2026-63030 |
WordPress | Core | — | 0.1065 | 2026-07-21 | 2026-07-24 | |
CVE-2026-0770 |
Langflow | Langflow | — | 0.6256 | 2026-07-21 | 2026-07-24 | |
CVE-2021-27137 |
DD-WRT | DD-WRT | — | — | 2026-07-21 | 2026-07-24 | |
CVE-2026-58644 |
Microsoft | SharePoint | 9.8 | 0.1587 | 2026-07-16 | 2026-07-19 | |
CVE-2026-25089 |
Fortinet | FortiSandbox | — | 0.7611 | 2026-07-16 | 2026-07-19 | |
CVE-2026-39808 |
Fortinet | FortiSandbox | 9.8 | 0.9319 | 2026-07-16 | 2026-07-19 | |
CVE-2026-46817 |
Oracle | E-Business Suite | — | 0.1231 | 2026-07-15 | 2026-07-18 | |
CVE-2023-4346 |
KNX Association | KNX Protocol Connection Authorization Option 1 | — | 0.0136 | 2026-07-15 | 2026-07-29 | |
CVE-2026-56155 |
Microsoft | Active Directory Federation Services | 7.8 | 0.0035 | 2026-07-14 | 2026-07-28 | |
CVE-2026-56164 |
Microsoft | SharePoint Server | 5.3 | 0.0101 | 2026-07-14 | 2026-07-17 | |
CVE-2026-15409 |
SonicWall | SMA1000 Appliances | 10.0 | 0.0679 | 2026-07-14 | 2026-07-17 | RW |
CVE-2026-15410 |
SonicWall | SMA1000 Appliances | 7.2 | 0.1179 | 2026-07-14 | 2026-07-17 | RW |
CVE-2008-4128 |
Cisco | IOS | — | — | 2026-07-13 | 2026-07-16 | |
CVE-2026-56291 |
Balbooa | Forms | 10.0 | 0.1485 | 2026-07-10 | 2026-07-13 | |
CVE-2026-48939 |
iCagenda | iCagenda | 10.0 | 0.2007 | 2026-07-10 | 2026-07-13 | |
CVE-2026-48908 |
JoomShaper | SP Page Builder | 10.0 | 0.8851 | 2026-07-07 | 2026-07-10 | |
CVE-2026-55255 |
Langflow | Langflow | 8.4 | 0.0089 | 2026-07-07 | 2026-07-10 | |
CVE-2026-56290 |
Joomlack | Page Builder | 10.0 | 0.3087 | 2026-07-07 | 2026-07-10 | |
CVE-2026-48282 |
Adobe | ColdFusion | 10.0 | 0.4239 | 2026-07-07 | 2026-07-10 | |
CVE-2026-45659 |
Microsoft | SharePoint Server | — | 0.8024 | 2026-07-01 | 2026-07-04 | RW |
CVE-2026-48558 |
SimpleHelp | SimpleHelp | — | 0.7766 | 2026-06-29 | 2026-07-02 | |
CVE-2026-12569 |
PTC | Windchill and FlexPLM | — | 0.4605 | 2026-06-25 | 2026-06-28 | RW |
CVE-2026-20230 |
Cisco | Unified Communications Manager | — | 0.8820 | 2026-06-25 | 2026-06-28 | |
CVE-2025-67038 |
Lantronix | EDS5000 | — | 0.2029 | 2026-06-23 | 2026-06-26 | |
CVE-2026-34910 |
Ubiquiti | UniFi OS | — | 0.9003 | 2026-06-23 | 2026-06-26 | |
CVE-2026-34909 |
Ubiquiti | UniFi OS | — | 0.6803 | 2026-06-23 | 2026-06-26 | |
CVE-2026-34908 |
Ubiquiti | UniFi OS | — | 0.8829 | 2026-06-23 | 2026-06-26 | |
CVE-2026-20253 |
Splunk | Enterprise | — | 0.9694 | 2026-06-18 | 2026-06-21 | |
CVE-2026-48907 |
Widget Factory | Joomla Content Editor | — | 0.8544 | 2026-06-16 | 2026-06-19 | |
CVE-2026-54420 |
LiteSpeed | cPanel Plugin | — | 0.0144 | 2026-06-15 | 2026-06-18 | |
CVE-2026-20262 |
Cisco | Catalyst SD-WAN Manager | — | 0.2912 | 2026-06-15 | 2026-06-29 | |
CVE-2026-35273 |
Oracle | PeopleSoft Enterprise PeopleTools | — | 0.9668 | 2026-06-12 | 2026-06-15 | RW |
CVE-2026-10520 |
Ivanti | Sentry | — | 0.9991 | 2026-06-11 | 2026-06-14 | |
CVE-2026-11645 |
Chromium V8 | — | 0.0244 | 2026-06-09 | 2026-06-23 | ||
CVE-2026-7473 |
Arista | Extensible Operating System | 6.9 | 0.0111 | 2026-06-09 | 2026-06-23 | |
CVE-2026-20245 |
Cisco | Catalyst SD-WAN Manager | — | 0.2532 | 2026-06-09 | 2026-06-23 | |
CVE-2026-42271 |
BerriAI | LiteLLM | 8.7 | 0.9144 | 2026-06-08 | 2026-06-22 | |
CVE-2026-50751 |
Check Point | Security Gateway | — | 0.8534 | 2026-06-08 | 2026-06-11 | RW |