✳CyberIntelExplore intelligence
CISA KNOWN EXPLOITED VULNERABILITIES

Threat Intelligence

Browse the latest entries added to CISA's KEV catalog. Inclusion means evidence of exploitation in the wild; it does not determine whether your assets are affected.

Source: CISA KEV • Last fetched: 2026-10-18T20:41:19.108764+00:00 • Catalog size: 1748 • Showing up to 150 entries

Recently catalogued exploited vulnerabilities150 entries
CVEVendor / ProductVulnerabilityAddedRansomware
CVE-2026-102764BeyondTrust
Remote Support		BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability2026-10-16Unknown
CVE-2025-61624Fortinet
Multiple Products		Fortinet Multiple Products Path Traversal Vulnerability2026-10-16Unknown
CVE-2026-21589Atlassian
Multiple Products		Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability2026-10-15Unknown
CVE-2026-76519Cisco
Secure Email Gateway		Cisco Secure Email Gateway Relative Path Traversal Vulnerability2026-10-14Unknown
CVE-2026-105134Ahsay
AhsayCBS		Ahsay AhsayCBS Command Injection Vulnerability2026-10-14Unknown
CVE-2026-105133Ahsay
AhsayCBS		Ahsay AhsayCBS Improper Authentication Vulnerability2026-10-14Unknown
CVE-2026-0322Palo Alto Networks
PAN-OS		Palo Alto Networks PAN-OS Code Injection Vulnerability2026-10-14Unknown
CVE-2026-96951Microsoft
Windows		Microsoft Windows Command Injection Vulnerability2026-10-13Unknown
CVE-2026-104935Ivanti
Connect Secure		Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability2026-10-13Unknown
CVE-2023-22894Strapi
Strapi		Strapi Cleartext Storage of Sensitive Information Vulnerability2026-10-08Unknown
CVE-2021-3199ONLYOFFICE
Docs		ONLYOFFICE Docs Server Path Traversal Vulnerability2026-10-08Unknown
CVE-2016-3081Apache
Struts		Apache Struts Command Injection Vulnerability2026-10-08Unknown
CVE-2015-5477ISC
BIND		 ISC BIND Data Processing Errors Vulnerability2026-10-08Unknown
CVE-2015-3306ProFTPD
ProFTPD		ProFTPD Improper Access Control Vulnerability2026-10-08Unknown
CVE-2026-88779Citrix
NetScaler		Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-10-04Unknown
CVE-2026-102490Zammad GmbH
Zammad		Zammad GmbH Zammad Improper Privilege Management Vulnerability2026-10-02Unknown
CVE-2026-102489Zammad GmbH
Zammad		Zammad GmbH Zammad Session Fixation Vulnerability2026-10-02Unknown
CVE-2026-104286Fortinet
FortiMail		Fortinet FortiMail Path Traversal Vulnerability2026-10-01Unknown
CVE-2026-76504Cisco
Catalyst SD-WAN Manager		Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability2026-09-30Unknown
CVE-2026-86950Apple
Multiple Products		Apple Multiple Products Out-of-Bounds Write Vulnerability2026-09-29Unknown
CVE-2026-88772Citrix
NetScaler		Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-09-27Unknown
CVE-2026-88771Citrix
NetScaler		Citrix NetScaler Improper Input Validation Vulnerability2026-09-27Unknown
CVE-2026-87902WordPress
Core		WordPress Core Remote File Inclusion Vulnerability2026-09-25Unknown
CVE-2026-67279MikroTik
RouterOS		Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability2026-09-25Unknown
CVE-2026-65660Microsoft
SharePoint		Microsoft SharePoint Code Injection Vulnerability2026-09-25Unknown
CVE-2026-71362Adobe
Commerce and Magento 		Adobe Commerce and Magento Incorrect Authorization Vulnerability 2026-09-24Unknown
CVE-2026-5430WSO2
Multiple Products		WSO2 Multiple Products Path Traversal Vulnerability 2026-09-24Unknown
CVE-2026-94127F5
BIG-IP APM		F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability2026-09-22Unknown
CVE-2026-93952Arista
VeloCloud Orchestrator		Arista VeloCloud Orchestrator Improper Input Validation Vulnerability2026-09-22Unknown
CVE-2026-93616Check Point
Multiple Products		Check Point Multiple Products Path Traversal Vulnerability2026-09-22Unknown
CVE-2026-85102Check Point
Multiple Products		Check Point Multiple Products Improper Certificate Validation Vulnerability2026-09-22Unknown
CVE-2026-7273Zyxel
GS1900 Series Switches		Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability2026-09-21Unknown
CVE-2026-53266Linux
Kernel		Linux Kernel Out-of-Bounds Write Vulnerability2026-09-18Unknown
CVE-2025-39964Linux
Kernel		Linux Kernel Race Condition Vulnerability2026-09-18Unknown
CVE-2025-39682Linux
Kernel		Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability2026-09-18Unknown
CVE-2026-87886Acronis
Backup		Acronis Backup Incorrect Default Permissions Vulnerability2026-09-16Unknown
CVE-2026-76460Cisco
Identity Services Engine		Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability2026-09-16Unknown
CVE-2026-58704Google
Pixel		Google Pixel Improper Authorization Vulnerability2026-09-16Unknown
CVE-2026-76461Cisco
Secure Email Gateway		Cisco Secure Email Gateway SQL Injection Vulnerability2026-09-14Unknown
CVE-2026-85706GitLab
Community Edition and Enterprise Edition		GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability2026-09-11Unknown
CVE-2026-84869ConnectWise
ScreenConnect		ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability2026-09-11Unknown
CVE-2026-42018JFrog
Artifactory		JFrog Artifactory Improper Authentication Vulnerability2026-09-11Unknown
CVE-2026-42016JFrog
Artifactory		JFrog Artifactory Incorrect Authorization Vulnerability2026-09-11Unknown
CVE-2026-86060MikroTik
RouterOS		MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability2026-09-10Unknown
CVE-2026-67277MikroTik
RouterOS		MikroTik RouterOS Missing Authentication for Critical Function Vulnerability2026-09-10Unknown
CVE-2026-87491Google
Chromium V8		Google Chromium V8 Out of Bounds Write Vulnerability2026-09-09Unknown
CVE-2026-20079Cisco
Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management		Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-09-09Unknown
CVE-2026-19490Citrix
NetScaler		Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-09-09Unknown
CVE-2025-25249Fortinet
Multiple Products		Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability2026-09-09Unknown
CVE-2026-86218N-able
N-central		N-able N-central Static Code Injection Vulnerability2026-09-08Unknown
CVE-2026-85880Microsoft
Windows		Microsoft Windows Heap-Based Buffer Overflow Vulnerability2026-09-08Unknown
CVE-2026-81963Microsoft
Windows		Microsoft Windows Link Following Vulnerability2026-09-08Unknown
CVE-2026-75650Adobe
Commerce and Magento		Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability2026-09-08Unknown
CVE-2026-85046Google
Chromium V8		Google Chromium V8 Type Confusion Vulnerability2026-09-04Unknown
CVE-2026-9586Sangoma
Switchvox		Sangoma Switchvox SQL Injection Vulnerability2026-09-02Unknown
CVE-2026-83549SonicWall
SMA1000 Appliances		SonicWall SMA1000 Appliances OS Command Injection Vulnerability2026-09-02Unknown
CVE-2026-83548SonicWall
SMA1000 Appliances		SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability2026-09-02Unknown
CVE-2026-82329JFrog
Artifactory		JFrog Artifactory Improper Authentication Vulnerability2026-09-02Unknown
CVE-2026-59822BerriAI
LiteLLM		BerriAI LiteLLM Improper Authentication Vulnerability2026-09-02Unknown
CVE-2026-49869Kestra
Kestra OSS		Kestra OSS OS Command Injection Vulnerability2026-09-02Unknown
CVE-2026-48710Kludex
Starlette		Kludex Starlette HTTP Request/Response Smuggling Vulnerability2026-09-02Unknown
CVE-2026-82078PaperCut
NG/MF		PaperCut NG/MF Unsafe Reflection Vulnerability2026-08-31Unknown
CVE-2026-81578PaperCut
NG/MF		PaperCut NG/MF Missing Authentication for Critical Function Vulnerability2026-08-31Unknown
CVE-2026-66384JFrog
Artifactory		JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability2026-08-27Unknown
CVE-2026-53362Linux
Kernel		Linux Kernel Unspecified Vulnerability2026-08-27Unknown
CVE-2023-49105ownCloud
ownCloud		ownCloud Improper Authentication Vulnerability2026-08-27Unknown
CVE-2026-8452Citrix
NetScaler ADC and NetScaler Gateway		Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-08-26Unknown
CVE-2022-0995Linux
Kernel		Linux Kernel Out-of-Bounds Write Vulnerability2026-08-26Unknown
CVE-2021-23758Ajax.NET Professional
Ajax.NET Professional		Ajax.NET Professional Deserialization of Untrusted Data Vulnerability2026-08-26Unknown
CVE-2019-1068Microsoft
SQL Server		Microsoft SQL Server Remote Code Execution Vulnerability2026-08-26Unknown
CVE-2015-5287Red Hat
Automatic Bug Reporting Tool		Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability2026-08-26Unknown
CVE-2015-3246Red Hat
Libuser		Red Hat Libuser Race Condition Vulnerability2026-08-26Unknown
CVE-2026-60004Gitea
Gitea		Gitea Code Injection Vulnerability2026-08-25Unknown
CVE-2026-21962Oracle
HTTP Server and Oracle Weblogic Server Proxy Plug-in		Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability2026-08-24Unknown
CVE-2026-73570Synacor
Zimbra Collaboration Suite (ZCS)		Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability2026-08-21Unknown
CVE-2026-72530TrueConf
Server		TrueConf Server Code Injection Vulnerability2026-08-20Unknown
CVE-2026-72529TrueConf
Server		TrueConf Server Missing Authentication for Critical Function Vulnerability2026-08-20Unknown
CVE-2026-64849MLflow
MLflow		MLflow Server-Side Request Forgery Vulnerability2026-08-19Unknown
CVE-2026-65400Apple
macOS		Apple macOS Improper Authentication Vulnerability2026-08-18Unknown
CVE-2026-59310Broadcom
VMware vCenter		Broadcom VMware vCenter Path Traversal Vulnerability2026-08-18Known
CVE-2026-55040Microsoft
SharePoint		Microsoft SharePoint Weak Authentication Vulnerability2026-08-18Unknown
CVE-2026-33824Microsoft
Internet Key Exchange (IKE) Service Extensions		Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability2026-08-18Unknown
CVE-2025-62593Ray-Project
Ray		Ray-Project Ray Code Injection Vulnerability2026-08-17Unknown
CVE-2026-72898Metabase
Metabase		Metabase SQL Injection Vulnerability2026-08-11Unknown
CVE-2026-68820Microsoft
Windows Ancillary Function Driver for WinSock 		Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability2026-08-11Unknown
CVE-2026-20349Cisco
Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) 		Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability2026-08-11Unknown
CVE-2026-8037Progress
LoadMaster		Progress LoadMaster Command Injection Vulnerability2026-08-07Unknown
CVE-2026-63077JetBrains
TeamCity		JetBrains TeamCity Deserialization of Untrusted Data Vulnerability2026-08-05Known
CVE-2026-9198IBM
Langflow		IBM Langflow Code Injection Vulnerability2026-08-04Unknown
CVE-2026-34486Apache
Tomcat		Apache Tomcat Missing Encryption of Sensitive Data Vulnerability2026-08-04Unknown
CVE-2026-18556N-able
N-central		N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-08-04Unknown
CVE-2026-18577N-able
N-central		N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-08-03Unknown
CVE-2026-20316Cisco
Secure Firewall Management Center (FMC)		Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability2026-07-29Known
CVE-2026-16812Arista
VeloCloud Orchestrator		Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability2026-07-27Unknown
CVE-2025-68686Fortinet
FortiOS		Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability2026-07-27Unknown
CVE-2026-50522Microsoft
SharePoint		Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-22Unknown
CVE-2026-16232Check Point
SmartConsole		Check Point SmartConsole Improper Authentication Vulnerability2026-07-22Unknown
CVE-2026-63030WordPress
Core		WordPress Core Interpretation Conflict Vulnerability2026-07-21Unknown
CVE-2026-60137WordPress
Core		WordPress Core SQL Injection Vulnerability2026-07-21Unknown
CVE-2026-0770Langflow
Langflow		Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability2026-07-21Unknown
CVE-2021-27137DD-WRT
DD-WRT		DD-WRT Stack-Based Buffer Overflow Vulnerability2026-07-21Unknown
CVE-2026-58644Microsoft
SharePoint		Microsoft SharePoint Deserialization of Untrusted Data Vulnerability2026-07-16Unknown
CVE-2026-39808Fortinet
FortiSandbox		Fortinet FortiSandbox OS Command Injection Vulnerability2026-07-16Unknown
CVE-2026-25089Fortinet
FortiSandbox		Fortinet FortiSandbox OS Command Injection Vulnerability2026-07-16Unknown
CVE-2026-46817Oracle
E-Business Suite		Oracle E-Business Suite Improper Privilege Management Vulnerability2026-07-15Unknown
CVE-2023-4346KNX Association
KNX Protocol Connection Authorization Option 1		KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability2026-07-15Unknown
CVE-2026-56164Microsoft
SharePoint Server		Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability2026-07-14Unknown
CVE-2026-56155Microsoft
Active Directory Federation Services		Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 2026-07-14Unknown
CVE-2026-15410SonicWall
SMA1000 Appliances		SonicWall SMA1000 Appliances Code Injection Vulnerability2026-07-14Known
CVE-2026-15409SonicWall
SMA1000 Appliances		SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability2026-07-14Known
CVE-2008-4128Cisco
IOS		Cisco IOS Cross-Site Request Forgery Vulnerability2026-07-13Unknown
CVE-2026-56291Balbooa
Forms		Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability2026-07-10Unknown
CVE-2026-48939iCagenda
iCagenda		iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability2026-07-10Unknown
CVE-2026-56290Joomlack
Page Builder		Joomlack Page Builder Improper Access Control Vulnerability2026-07-07Unknown
CVE-2026-55255Langflow
Langflow		Langflow Authorization Bypass Through User-Controlled Key Vulnerability2026-07-07Unknown
CVE-2026-48908JoomShaper
SP Page Builder		JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability2026-07-07Unknown
CVE-2026-48282Adobe
ColdFusion		Adobe ColdFusion Path Traversal Vulnerability2026-07-07Unknown
CVE-2026-45659Microsoft
SharePoint Server		Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability2026-07-01Known
CVE-2026-48558SimpleHelp
SimpleHelp		SimpleHelp Authentication Bypass Vulnerability2026-06-29Unknown
CVE-2026-20230Cisco
Unified Communications Manager		Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability2026-06-25Unknown
CVE-2026-12569PTC
Windchill and FlexPLM		PTC Windchill and FlexPLM Improper Input Validation Vulnerability2026-06-25Known
CVE-2026-34910Ubiquiti
UniFi OS		Ubiquiti UniFi OS Improper Input Validation Vulnerability2026-06-23Unknown
CVE-2026-34909Ubiquiti
UniFi OS		Ubiquiti UniFi OS Path Traversal Vulnerability2026-06-23Unknown
CVE-2026-34908Ubiquiti
UniFi OS		Ubiquiti UniFi OS Improper Access Control Vulnerability2026-06-23Unknown
CVE-2025-67038Lantronix
EDS5000		Lantronix EDS5000 Code Injection Vulnerability2026-06-23Unknown
CVE-2026-20253Splunk
Enterprise		Splunk Enterprise Missing Authentication for Critical Function Vulnerability2026-06-18Unknown
CVE-2026-48907Widget Factory
Joomla Content Editor 		Widget Factory Joomla Content Editor Improper Access Control Vulnerability2026-06-16Unknown
CVE-2026-54420LiteSpeed
cPanel Plugin		LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability2026-06-15Unknown
CVE-2026-20262Cisco
Catalyst SD-WAN Manager		Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability2026-06-15Unknown
CVE-2026-35273Oracle
PeopleSoft Enterprise PeopleTools		Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability2026-06-12Known
CVE-2026-10520Ivanti
Sentry		Ivanti Sentry OS Command Injection Vulnerability2026-06-11Unknown
CVE-2026-7473Arista
Extensible Operating System		Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability2026-06-09Unknown
CVE-2026-20245Cisco
Catalyst SD-WAN Manager		Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability2026-06-09Unknown
CVE-2026-11645Google
Chromium V8		Google Chromium V8 Out-of-Bounds Read and Write Vulnerability2026-06-09Unknown
CVE-2026-50751Check Point
Security Gateway		Check Point Security Gateway Improper Authentication Vulnerability2026-06-08Known
CVE-2026-42271BerriAI
LiteLLM		BerriAI LiteLLM Command Injection Vulnerability2026-06-08Unknown
CVE-2026-28318SolarWinds
Serv-U		SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability2026-06-05Unknown
CVE-2026-45247Mirasvit
Mirasvit Full Page Cache Warmer		Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability2026-06-03Unknown
CVE-2025-48595Android
Framework		Android Framework Integer Overflow Vulnerability2026-06-02Unknown
CVE-2022-0492Linux
Kernel		Linux Kernel Improper Authentication Vulnerability2026-06-02Unknown
CVE-2024-21182Oracle
WebLogic Server		Oracle WebLogic Server Unspecified Vulnerability2026-06-01Unknown
CVE-2026-0257Palo Alto Networks
PAN-OS		Palo Alto Networks PAN-OS Authentication Bypass Vulnerability2026-05-29Known
CVE-2026-8398Daemon
Daemon Tools Lite		Daemon Tools Lite Embedded Malicious Code Vulnerability2026-05-27Unknown
CVE-2026-48027Nx
Nx Console		Nx Console Embedded Malicious Code Vulnerability2026-05-27Known
CVE-2026-45321TanStack
TanStack		TanStack Unspecified Vulnerability2026-05-27Known
CVE-2026-48172LiteSpeed
cPanel Plugin		LiteSpeed cPanel Plugin Privilege Escalation Vulnerability2026-05-26Unknown
CVE-2026-9082Drupal
Core		Drupal Core SQL Injection Vulnerability2026-05-22Unknown
CVE-2026-34926Trend Micro
Apex One		Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability2026-05-21Unknown
CVE-2025-34291Langflow
Langflow		Langflow Origin Validation Error Vulnerability2026-05-21Unknown
CVE-2026-45498Microsoft
Defender		Microsoft Defender Denial of Service Vulnerability2026-05-20Unknown