CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2025-40536 |
SolarWinds | Web Help Desk | — | 0.7356 | 2026-02-12 | 2026-02-15 | |
CVE-2026-21513 |
Microsoft | Windows | — | 0.1585 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21525 |
Microsoft | Windows | — | 0.0486 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21510 |
Microsoft | Windows | — | 0.6124 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21533 |
Microsoft | Windows | — | 0.0418 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21519 |
Microsoft | Windows | — | 0.0248 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21514 |
Microsoft | Office | — | 0.0159 | 2026-02-10 | 2026-03-03 | |
CVE-2025-11953 |
React Native Community | CLI | — | 0.9398 | 2026-02-05 | 2026-02-26 | |
CVE-2026-24423 |
SmarterTools | SmarterMail | — | 0.8818 | 2026-02-05 | 2026-02-26 | RW |
CVE-2021-39935 |
GitLab | Community and Enterprise Editions | — | 0.3614 | 2026-02-03 | 2026-02-24 | |
CVE-2025-64328 |
Sangoma | FreePBX | — | 0.8462 | 2026-02-03 | 2026-02-24 | |
CVE-2019-19006 |
Sangoma | FreePBX | — | 0.5595 | 2026-02-03 | 2026-02-24 | |
CVE-2025-40551 |
SolarWinds | Web Help Desk | — | 0.8418 | 2026-02-03 | 2026-02-06 | |
CVE-2026-1281 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.9869 | 2026-01-29 | 2026-02-01 | |
CVE-2026-24858 |
Fortinet | Multiple Products | — | 0.8659 | 2026-01-27 | 2026-01-30 | |
CVE-2018-14634 |
Linux | Kernel | — | 0.1469 | 2026-01-26 | 2026-02-16 | |
CVE-2025-52691 |
SmarterTools | SmarterMail | — | 0.8566 | 2026-01-26 | 2026-02-16 | RW |
CVE-2026-23760 |
SmarterTools | SmarterMail | — | 0.9643 | 2026-01-26 | 2026-02-16 | RW |
CVE-2026-24061 |
GNU | InetUtils | — | 0.9898 | 2026-01-26 | 2026-02-16 | |
CVE-2026-21509 |
Microsoft | Office | — | 0.7079 | 2026-01-26 | 2026-02-16 | |
CVE-2024-37079 |
Broadcom | VMware vCenter Server | — | 0.2238 | 2026-01-23 | 2026-02-13 | |
CVE-2025-68645 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.4887 | 2026-01-22 | 2026-02-12 | |
CVE-2025-34026 |
Versa | Concerto | — | 0.8178 | 2026-01-22 | 2026-02-12 | |
CVE-2025-31125 |
Vite | Vitejs | — | 0.7494 | 2026-01-22 | 2026-02-12 | |
CVE-2025-54313 |
Prettier | eslint-config-prettier | — | 0.0512 | 2026-01-22 | 2026-02-12 | |
CVE-2026-20045 |
Cisco | Unified Communications Manager | — | 0.0454 | 2026-01-21 | 2026-02-11 | |
CVE-2026-20805 |
Microsoft | Windows | — | 0.0746 | 2026-01-13 | 2026-02-03 | |
CVE-2025-8110 |
Gogs | Gogs | — | 0.8520 | 2026-01-12 | 2026-02-02 | |
CVE-2009-0556 |
Microsoft | Office | — | 0.6731 | 2026-01-07 | 2026-01-28 | |
CVE-2025-37164 |
Hewlett Packard Enterprise (HPE) | OneView | — | 0.9019 | 2026-01-07 | 2026-01-28 | |
CVE-2025-14847 |
MongoDB | MongoDB and MongoDB Server | — | 0.8322 | 2025-12-29 | 2026-01-19 | |
CVE-2023-52163 |
Digiever | DS-2105 Pro | — | 0.9692 | 2025-12-22 | 2026-01-12 | |
CVE-2025-14733 |
WatchGuard | Firebox | — | 0.2942 | 2025-12-19 | 2025-12-26 | RW |
CVE-2025-59374 |
ASUS | Live Update | — | 0.0120 | 2025-12-17 | 2026-01-07 | |
CVE-2025-40602 |
SonicWall | SMA1000 appliance | — | 0.0276 | 2025-12-17 | 2025-12-24 | |
CVE-2025-20393 |
Cisco | Multiple Products | — | 0.3239 | 2025-12-17 | 2025-12-24 | |
CVE-2025-59718 |
Fortinet | Multiple Products | — | 0.6829 | 2025-12-16 | 2025-12-23 | |
CVE-2025-14611 |
Gladinet | CentreStack and Triofox | — | 0.5330 | 2025-12-15 | 2026-01-05 | |
CVE-2025-43529 |
Apple | Multiple Products | — | 0.2565 | 2025-12-15 | 2026-01-05 | |
CVE-2018-4063 |
Sierra Wireless | AirLink ALEOS | — | 0.2726 | 2025-12-12 | 2026-01-02 | |
CVE-2025-14174 |
Chromium | — | 0.5533 | 2025-12-12 | 2026-01-02 | ||
CVE-2025-58360 |
OSGeo | GeoServer | — | 0.6117 | 2025-12-11 | 2026-01-01 | |
CVE-2025-6218 |
RARLAB | WinRAR | — | 0.9048 | 2025-12-09 | 2025-12-30 | |
CVE-2025-62221 |
Microsoft | Windows | — | 0.0250 | 2025-12-09 | 2025-12-30 | |
CVE-2022-37055 |
D-Link | Routers | — | 0.5553 | 2025-12-08 | 2025-12-29 | |
CVE-2025-66644 |
Array Networks | ArrayOS AG | — | 0.0341 | 2025-12-08 | 2025-12-29 | |
CVE-2025-55182 |
Meta | React Server Components | — | 0.9980 | 2025-12-05 | 2025-12-12 | RW |
CVE-2021-26828 |
OpenPLC | ScadaBR | — | 0.3910 | 2025-12-03 | 2025-12-24 | |
CVE-2025-48633 |
Android | Framework | — | 0.0026 | 2025-12-02 | 2025-12-23 | |
CVE-2025-48572 |
Android | Framework | — | 0.0026 | 2025-12-02 | 2025-12-23 |