CISA Known Exploited Vulnerabilities
1,762 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2026-28318 |
SolarWinds | Serv-U | — | 0.4365 | 2026-06-05 | 2026-06-19 | |
CVE-2026-45247 |
Mirasvit | Mirasvit Full Page Cache Warmer | — | 0.2616 | 2026-06-03 | 2026-06-06 | |
CVE-2022-0492 |
Linux | Kernel | — | — | 2026-06-02 | 2026-06-05 | |
CVE-2025-48595 |
Android | Framework | — | 0.0195 | 2026-06-02 | 2026-06-05 | |
CVE-2024-21182 |
Oracle | WebLogic Server | — | 0.7416 | 2026-06-01 | 2026-06-04 | |
CVE-2026-0257 |
Palo Alto Networks | PAN-OS | 7.8 | 0.9501 | 2026-05-29 | 2026-06-01 | RW |
CVE-2026-48027 |
Nx | Nx Console | — | 0.0185 | 2026-05-27 | 2026-06-10 | RW |
CVE-2026-45321 |
TanStack | TanStack | 9.6 | 0.0328 | 2026-05-27 | 2026-06-10 | RW |
CVE-2026-8398 |
Daemon | Daemon Tools Lite | 9.3 | 0.0146 | 2026-05-27 | 2026-05-30 | |
CVE-2026-48172 |
LiteSpeed | cPanel Plugin | — | 0.1792 | 2026-05-26 | 2026-05-29 | |
CVE-2026-9082 |
Drupal | Core | — | 0.8938 | 2026-05-22 | 2026-05-27 | |
CVE-2025-34291 |
Langflow | Langflow | — | 0.9281 | 2026-05-21 | 2026-06-04 | |
CVE-2026-34926 |
Trend Micro | Apex One | — | 0.1342 | 2026-05-21 | 2026-06-04 | |
CVE-2008-4250 |
Microsoft | Windows | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2009-1537 |
Microsoft | DirectX | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2009-3459 |
Adobe | Acrobat and Reader | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2010-0249 |
Microsoft | Internet Explorer | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2010-0806 |
Microsoft | Internet Explorer | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2026-41091 |
Microsoft | Defender | — | 0.0820 | 2026-05-20 | 2026-06-03 | |
CVE-2026-45498 |
Microsoft | Defender | — | 0.6308 | 2026-05-20 | 2026-06-03 | |
CVE-2026-42897 |
Microsoft | Microsoft | 6.1 | 0.7066 | 2026-05-15 | 2026-05-29 | |
CVE-2026-20182 |
Cisco | Catalyst SD-WAN | 10.0 | 0.9182 | 2026-05-14 | 2026-05-17 | |
CVE-2026-42208 |
BerriAI | LiteLLM | 9.3 | 0.8942 | 2026-05-08 | 2026-05-11 | |
CVE-2026-6973 |
Ivanti | Endpoint Manager Mobile (EPMM) | 7.2 | 0.3445 | 2026-05-07 | 2026-05-10 | |
CVE-2026-0300 |
Palo Alto Networks | PAN-OS | 9.3 | 0.4171 | 2026-05-06 | 2026-05-09 | |
CVE-2026-31431 |
Linux | Kernel | — | 0.9811 | 2026-05-01 | 2026-05-15 | |
CVE-2026-41940 |
WebPros | cPanel & WHM and WP2 (WordPress Squared) | 9.3 | 0.9853 | 2026-04-30 | 2026-05-03 | RW |
CVE-2024-1708 |
ConnectWise | ScreenConnect | — | 0.9544 | 2026-04-28 | 2026-05-12 | RW |
CVE-2026-32202 |
Microsoft | Windows | 4.3 | 0.7090 | 2026-04-28 | 2026-05-12 | |
CVE-2025-29635 |
D-Link | DIR-823X | — | 0.8794 | 2026-04-24 | 2026-05-08 | |
CVE-2024-7399 |
Samsung | MagicINFO 9 Server | — | 0.9194 | 2026-04-24 | 2026-05-08 | |
CVE-2024-57728 |
SimpleHelp | SimpleHelp | — | 0.6447 | 2026-04-24 | 2026-05-08 | RW |
CVE-2024-57726 |
SimpleHelp | SimpleHelp | — | 0.6641 | 2026-04-24 | 2026-05-08 | RW |
CVE-2026-39987 |
Marimo | Marimo | — | 0.9956 | 2026-04-23 | 2026-05-07 | |
CVE-2026-33825 |
Microsoft | Defender | — | 0.0675 | 2026-04-22 | 2026-05-06 | RW |
CVE-2026-20122 |
Cisco | Catalyst SD-WAN Manger | — | 0.2580 | 2026-04-20 | 2026-04-23 | |
CVE-2026-20133 |
Cisco | Catalyst SD-WAN Manager | — | 0.3148 | 2026-04-20 | 2026-04-23 | |
CVE-2025-2749 |
Kentico | Kentico Xperience | — | 0.0402 | 2026-04-20 | 2026-05-04 | |
CVE-2023-27351 |
PaperCut | NG/MF | — | 0.7805 | 2026-04-20 | 2026-05-04 | RW |
CVE-2025-48700 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.0171 | 2026-04-20 | 2026-04-23 | |
CVE-2026-20128 |
Cisco | Catalyst SD-WAN Manager | — | 0.0732 | 2026-04-20 | 2026-04-23 | |
CVE-2025-32975 |
Quest | KACE Systems Management Appliance (SMA) | — | 0.0249 | 2026-04-20 | 2026-05-04 | |
CVE-2024-27199 |
JetBrains | TeamCity | — | 0.9999 | 2026-04-20 | 2026-05-04 | RW |
CVE-2026-34197 |
Apache | ActiveMQ | — | 0.9826 | 2026-04-16 | 2026-04-30 | |
CVE-2009-0238 |
Microsoft | Office | — | — | 2026-04-14 | 2026-04-28 | |
CVE-2026-32201 |
Microsoft | SharePoint Server | 6.5 | 0.4338 | 2026-04-14 | 2026-04-28 | |
CVE-2012-1854 |
Microsoft | Visual Basic for Applications (VBA) | — | — | 2026-04-13 | 2026-04-27 | |
CVE-2025-60710 |
Microsoft | Windows | — | 0.0461 | 2026-04-13 | 2026-04-27 | RW |
CVE-2023-21529 |
Microsoft | Exchange Server | — | 0.5929 | 2026-04-13 | 2026-04-27 | RW |
CVE-2023-36424 |
Microsoft | Windows | — | 0.1209 | 2026-04-13 | 2026-04-27 |