Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jun 12, 2026 | CVE-2026-35273 Ransomware | Oracle · PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | Critical 9.8 | 96.7% | Jun 15, 2026 |
| Jun 11, 2026 | CVE-2026-10520 | Ivanti · Sentry | Ivanti Sentry OS Command Injection Vulnerability | Critical 10.0 | 99.9% | Jun 14, 2026 |
| Jun 9, 2026 | CVE-2026-7473 | Arista · Extensible Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | Medium 5.8 | 1.1% | Jun 23, 2026 |
| Jun 9, 2026 | CVE-2026-20245 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | High 7.8 | 25.3% | Jun 23, 2026 |
| Jun 9, 2026 | CVE-2026-11645 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | High 8.8 | 2.4% | Jun 23, 2026 |
| Jun 8, 2026 | CVE-2026-50751 Ransomware | Check Point · Security Gateway | Check Point Security Gateway Improper Authentication Vulnerability | Critical 9.3 | 85.3% | Jun 11, 2026 |
| Jun 8, 2026 | CVE-2026-42271 | BerriAI · LiteLLM | BerriAI LiteLLM Command Injection Vulnerability | High 8.8 | 91.4% | Jun 22, 2026 |
| Jun 5, 2026 | CVE-2026-28318 | SolarWinds · Serv-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | High 7.5 | 48.0% | Jun 19, 2026 |
| Jun 3, 2026 | CVE-2026-45247 | Mirasvit · Mirasvit Full Page Cache Warmer | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 26.2% | Jun 6, 2026 |
| Jun 2, 2026 | CVE-2025-48595 | Android · Framework | Android Framework Integer Overflow Vulnerability | High 8.4 | 1.9% | Jun 5, 2026 |
| Jun 2, 2026 | CVE-2022-0492 | Linux · Kernel | Linux Kernel Improper Authentication Vulnerability | High 7.8 | 5.5% | Jun 5, 2026 |
| Jun 1, 2026 | CVE-2024-21182 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | High 7.5 | 74.2% | Jun 4, 2026 |
| May 29, 2026 | CVE-2026-0257 Ransomware | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | High 7.8 | 95.6% | Jun 1, 2026 |
| May 27, 2026 | CVE-2026-8398 | Daemon · Daemon Tools Lite | Daemon Tools Lite Embedded Malicious Code Vulnerability | Critical 9.8 | 1.5% | May 30, 2026 |
| May 27, 2026 | CVE-2026-48027 Ransomware | Nx · Nx Console | Nx Console Embedded Malicious Code Vulnerability | Critical 9.3 | 1.8% | Jun 10, 2026 |
| May 27, 2026 | CVE-2026-45321 Ransomware | TanStack · TanStack | TanStack Unspecified Vulnerability | Critical 9.6 | 3.3% | Jun 10, 2026 |
| May 26, 2026 | CVE-2026-48172 | LiteSpeed · cPanel Plugin | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | Critical 10.0 | 17.9% | May 29, 2026 |
| May 22, 2026 | CVE-2026-9082 | Drupal · Core | Drupal Core SQL Injection Vulnerability | Critical 9.8 | 89.4% | May 27, 2026 |
| May 21, 2026 | CVE-2026-34926 | Trend Micro · Apex One | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | Medium 6.7 | 13.4% | Jun 4, 2026 |
| May 21, 2026 | CVE-2025-34291 | Langflow · Langflow | Langflow Origin Validation Error Vulnerability | Critical 9.4 | 93.2% | Jun 4, 2026 |
| May 20, 2026 | CVE-2026-45498 | Microsoft · Defender | Microsoft Defender Denial of Service Vulnerability | Medium 4.0 | 63.1% | Jun 3, 2026 |
| May 20, 2026 | CVE-2026-41091 | Microsoft · Defender | Microsoft Defender Link Following Vulnerability | High 7.8 | 8.2% | Jun 3, 2026 |
| May 20, 2026 | CVE-2010-0806 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | High 8.8 | 82.1% | Jun 3, 2026 |
| May 20, 2026 | CVE-2010-0249 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | High 8.8 | 91.9% | Jun 3, 2026 |
| May 20, 2026 | CVE-2009-3459 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | High 8.8 | 86.5% | Jun 3, 2026 |
| May 20, 2026 | CVE-2009-1537 | Microsoft · DirectX | Microsoft DirectX NULL Byte Overwrite Vulnerability | High 8.8 | 51.1% | Jun 3, 2026 |
| May 20, 2026 | CVE-2008-4250 | Microsoft · Windows | Microsoft Windows Buffer Overflow Vulnerability | Critical 9.8 | 98.8% | Jun 3, 2026 |
| May 15, 2026 | CVE-2026-42897 | Microsoft · Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | High 8.1 | 70.7% | May 29, 2026 |
| May 14, 2026 | CVE-2026-20182 | Cisco · Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Critical 10.0 | 91.8% | May 17, 2026 |
| May 8, 2026 | CVE-2026-42208 | BerriAI · LiteLLM | BerriAI LiteLLM SQL Injection Vulnerability | Critical 9.8 | 89.4% | May 11, 2026 |
| May 7, 2026 | CVE-2026-6973 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | High 7.2 | 34.5% | May 10, 2026 |
| May 6, 2026 | CVE-2026-0300 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | Critical 9.3 | 41.7% | May 9, 2026 |
| May 1, 2026 | CVE-2026-31431 | Linux · Kernel | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | High 7.8 | 98.1% | May 15, 2026 |
| Apr 30, 2026 | CVE-2026-41940 Ransomware | WebPros · cPanel & WHM and WP2 (WordPress Squared) | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | Critical 9.8 | 98.5% | May 3, 2026 |
| Apr 28, 2026 | CVE-2026-32202 | Microsoft · Windows | Microsoft Windows Protection Mechanism Failure Vulnerability | Medium 4.3 | 70.9% | May 12, 2026 |
| Apr 28, 2026 | CVE-2024-1708 Ransomware | ConnectWise · ScreenConnect | ConnectWise ScreenConnect Path Traversal Vulnerability | High 8.4 | 95.4% | May 12, 2026 |
| Apr 24, 2026 | CVE-2025-29635 | D-Link · DIR-823X | D-Link DIR-823X Command Injection Vulnerability | High 7.2 | 87.9% | May 8, 2026 |
| Apr 24, 2026 | CVE-2024-7399 | Samsung · MagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | High 8.8 | 91.9% | May 8, 2026 |
| Apr 24, 2026 | CVE-2024-57728 Ransomware | SimpleHelp · SimpleHelp | SimpleHelp Path Traversal Vulnerability | High 7.2 | 64.5% | May 8, 2026 |
| Apr 24, 2026 | CVE-2024-57726 Ransomware | SimpleHelp · SimpleHelp | SimpleHelp Missing Authorization Vulnerability | Critical 9.9 | 66.4% | May 8, 2026 |
| Apr 23, 2026 | CVE-2026-39987 | Marimo · Marimo | Marimo Remote Code Execution Vulnerability | Critical 9.3 | 99.7% | May 7, 2026 |
| Apr 22, 2026 | CVE-2026-33825 Ransomware | Microsoft · Defender | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | High 7.8 | 6.7% | May 6, 2026 |
| Apr 20, 2026 | CVE-2026-20133 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Medium 6.5 | 35.3% | Apr 23, 2026 |
| Apr 20, 2026 | CVE-2026-20128 | Cisco · Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | High 7.5 | 8.3% | Apr 23, 2026 |
| Apr 20, 2026 | CVE-2026-20122 | Cisco · Catalyst SD-WAN Manger | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | Medium 5.4 | 25.8% | Apr 23, 2026 |
| Apr 20, 2026 | CVE-2025-48700 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | Medium 6.1 | 1.7% | Apr 23, 2026 |
| Apr 20, 2026 | CVE-2025-32975 | Quest · KACE Systems Management Appliance (SMA) | Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability | Critical 10.0 | 2.5% | May 4, 2026 |
| Apr 20, 2026 | CVE-2025-2749 | Kentico · Kentico Xperience | Kentico Xperience Path Traversal Vulnerability | High 7.2 | 4.0% | May 4, 2026 |
| Apr 20, 2026 | CVE-2024-27199 Ransomware | JetBrains · TeamCity | JetBrains TeamCity Relative Path Traversal Vulnerability | High 7.3 | 100.0% | May 4, 2026 |
| Apr 20, 2026 | CVE-2023-27351 Ransomware | PaperCut · NG/MF | PaperCut NG/MF Improper Authentication Vulnerability | High 8.2 | 78.1% | May 4, 2026 |