CISA Known Exploited Vulnerabilities
1,762 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2020-9715 |
Adobe | Acrobat | — | 0.3349 | 2026-04-13 | 2026-04-27 | |
CVE-2026-21643 |
Fortinet | FortiClient EMS | — | 0.9774 | 2026-04-13 | 2026-04-16 | |
CVE-2026-34621 |
Adobe | Acrobat and Reader | 8.6 | 0.0723 | 2026-04-13 | 2026-04-27 | |
CVE-2026-1340 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.9864 | 2026-04-08 | 2026-04-11 | |
CVE-2026-35616 |
Fortinet | FortiClient EMS | — | 0.9398 | 2026-04-06 | 2026-04-09 | |
CVE-2026-3502 |
TrueConf | Client | — | 0.0585 | 2026-04-02 | 2026-04-16 | |
CVE-2026-5281 |
Dawn | — | 0.1374 | 2026-04-01 | 2026-04-15 | ||
CVE-2026-3055 |
Citrix | NetScaler | — | 0.9149 | 2026-03-30 | 2026-04-02 | |
CVE-2025-53521 |
F5 | BIG-IP | — | 0.0230 | 2026-03-27 | 2026-03-30 | |
CVE-2026-33634 |
Aquasecurity | Trivy | — | 0.5973 | 2026-03-26 | 2026-04-09 | |
CVE-2026-33017 |
Langflow | Langflow | — | 0.9618 | 2026-03-25 | 2026-04-08 | |
CVE-2025-32432 |
Craft CMS | Craft CMS | — | 0.9979 | 2026-03-20 | 2026-04-03 | |
CVE-2025-54068 |
Laravel | Livewire | — | 0.9628 | 2026-03-20 | 2026-04-03 | |
CVE-2025-43510 |
Apple | Multiple Products | — | 0.0036 | 2026-03-20 | 2026-04-03 | |
CVE-2025-43520 |
Apple | Multiple Products | — | 0.0043 | 2026-03-20 | 2026-04-03 | |
CVE-2025-31277 |
Apple | Multiple Products | — | 0.0166 | 2026-03-20 | 2026-04-03 | |
CVE-2026-20131 |
Cisco | Secure Firewall Management Center (FMC) | — | 0.4317 | 2026-03-19 | 2026-03-22 | RW |
CVE-2025-66376 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.2023 | 2026-03-18 | 2026-04-01 | |
CVE-2026-20963 |
Microsoft | SharePoint | — | 0.2920 | 2026-03-18 | 2026-03-21 | |
CVE-2025-47813 |
Wing FTP Server | Wing FTP Server | — | 0.6251 | 2026-03-16 | 2026-03-30 | |
CVE-2026-3910 |
Chromium V8 | — | 0.0269 | 2026-03-13 | 2026-03-27 | ||
CVE-2026-3909 |
Skia | — | 0.0234 | 2026-03-13 | 2026-03-27 | ||
CVE-2025-68613 |
n8n | n8n | — | 0.9899 | 2026-03-11 | 2026-03-25 | |
CVE-2021-22054 |
Omnissa | Workspace One UEM | — | 0.9968 | 2026-03-09 | 2026-03-23 | |
CVE-2025-26399 |
SolarWinds | Web Help Desk | — | 0.9012 | 2026-03-09 | 2026-03-12 | RW |
CVE-2026-1603 |
Ivanti | Endpoint Manager (EPM) | — | 0.8833 | 2026-03-09 | 2026-03-23 | |
CVE-2017-7921 |
Hikvision | Multiple Products | — | 1.0000 | 2026-03-05 | 2026-03-26 | |
CVE-2021-22681 |
Rockwell | Multiple Products | — | 0.6363 | 2026-03-05 | 2026-03-26 | |
CVE-2023-43000 |
Apple | Multiple Products | 8.8 | 0.0404 | 2026-03-05 | 2026-03-26 | |
CVE-2021-30952 |
Apple | Multiple Products | — | 0.0696 | 2026-03-05 | 2026-03-26 | |
CVE-2023-41974 |
Apple | iOS and iPadOS | — | 0.0196 | 2026-03-05 | 2026-03-26 | |
CVE-2026-22719 |
Broadcom | VMware Aria Operations | — | 0.1832 | 2026-03-03 | 2026-03-24 | |
CVE-2026-21385 |
Qualcomm | Multiple Chipsets | — | 0.0132 | 2026-03-03 | 2026-03-24 | |
CVE-2022-20775 |
Cisco | SD-WAN | — | 0.1247 | 2026-02-25 | 2026-02-27 | |
CVE-2026-20127 |
Cisco | Catalyst SD-WAN Controller and Manager | — | 0.8929 | 2026-02-25 | 2026-02-27 | |
CVE-2026-25108 |
Soliton Systems K.K | FileZen | — | 0.0525 | 2026-02-24 | 2026-03-17 | |
CVE-2025-49113 |
Roundcube | Webmail | — | 0.9949 | 2026-02-20 | 2026-03-13 | |
CVE-2025-68461 |
Roundcube | Webmail | — | 0.2741 | 2026-02-20 | 2026-03-13 | |
CVE-2021-22175 |
GitLab | GitLab | — | 0.5337 | 2026-02-18 | 2026-03-11 | |
CVE-2026-22769 |
Dell | RecoverPoint for Virtual Machines (RP4VMs) | — | 0.1353 | 2026-02-18 | 2026-02-21 | |
CVE-2020-7796 |
Synacor | Zimbra Collaboration Suite | — | 0.9359 | 2026-02-17 | 2026-03-10 | |
CVE-2024-7694 |
TeamT5 | ThreatSonar Anti-Ransomware | — | 0.0179 | 2026-02-17 | 2026-03-10 | |
CVE-2008-0015 |
Microsoft | Windows | — | 0.7658 | 2026-02-17 | 2026-03-10 | |
CVE-2026-2441 |
Chromium | — | 0.5496 | 2026-02-17 | 2026-03-10 | ||
CVE-2026-1731 |
BeyondTrust | Remote Support (RS) and Privileged Remote Access (PRA) | — | 0.9310 | 2026-02-13 | 2026-02-16 | RW |
CVE-2026-20700 |
Apple | Multiple Products | — | 0.0168 | 2026-02-12 | 2026-03-05 | |
CVE-2024-43468 |
Microsoft | Configuration Manager | — | 0.8104 | 2026-02-12 | 2026-03-05 | |
CVE-2025-15556 |
Notepad++ | Notepad++ | — | 0.0177 | 2026-02-12 | 2026-03-05 | |
CVE-2025-40536 |
SolarWinds | Web Help Desk | — | 0.7356 | 2026-02-12 | 2026-02-15 | |
CVE-2026-21513 |
Microsoft | Windows | — | 0.1585 | 2026-02-10 | 2026-03-03 |