Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Feb 17, 2026 | CVE-2008-0015 | Microsoft · Windows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | High 8.8 | 76.6% | Mar 10, 2026 |
| Feb 13, 2026 | CVE-2026-1731 Ransomware | BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | Critical 9.9 | 93.9% | Feb 16, 2026 |
| Feb 12, 2026 | CVE-2026-20700 | Apple · Multiple Products | Apple Multiple Buffer Overflow Vulnerability | High 7.8 | 1.7% | Mar 5, 2026 |
| Feb 12, 2026 | CVE-2025-40536 | SolarWinds · Web Help Desk | SolarWinds Web Help Desk Security Control Bypass Vulnerability | High 8.1 | 73.6% | Feb 15, 2026 |
| Feb 12, 2026 | CVE-2025-15556 | Notepad++ · Notepad++ | Notepad++ Download of Code Without Integrity Check Vulnerability | High 7.7 | 1.7% | Mar 5, 2026 |
| Feb 12, 2026 | CVE-2024-43468 | Microsoft · Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | Critical 9.8 | 81.0% | Mar 5, 2026 |
| Feb 10, 2026 | CVE-2026-21533 | Microsoft · Windows | Microsoft Windows Improper Privilege Management Vulnerability | High 7.8 | 4.3% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21525 | Microsoft · Windows | Microsoft Windows NULL Pointer Dereference Vulnerability | Medium 6.2 | 5.0% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21519 | Microsoft · Windows | Microsoft Windows Type Confusion Vulnerability | High 7.8 | 2.6% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21514 | Microsoft · Office | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | High 7.8 | 1.6% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21513 | Microsoft · Windows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | High 8.8 | 15.9% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21510 | Microsoft · Windows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | High 8.8 | 61.2% | Mar 3, 2026 |
| Feb 5, 2026 | CVE-2026-24423 Ransomware | SmarterTools · SmarterMail | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability | Critical 9.3 | 88.2% | Feb 26, 2026 |
| Feb 5, 2026 | CVE-2025-11953 | React Native Community · CLI | React Native Community CLI OS Command Injection Vulnerability | Critical 9.8 | 94.0% | Feb 26, 2026 |
| Feb 3, 2026 | CVE-2025-64328 | Sangoma · FreePBX | Sangoma FreePBX OS Command Injection Vulnerability | High 8.6 | 84.6% | Feb 24, 2026 |
| Feb 3, 2026 | CVE-2025-40551 | SolarWinds · Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 84.2% | Feb 6, 2026 |
| Feb 3, 2026 | CVE-2021-39935 | GitLab · Community and Enterprise Editions | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | Medium 6.8 | 36.1% | Feb 24, 2026 |
| Feb 3, 2026 | CVE-2019-19006 | Sangoma · FreePBX | Sangoma FreePBX Improper Authentication Vulnerability | Critical 9.8 | 54.7% | Feb 24, 2026 |
| Jan 29, 2026 | CVE-2026-1281 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Critical 9.8 | 98.7% | Feb 1, 2026 |
| Jan 27, 2026 | CVE-2026-24858 | Fortinet · Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 9.4 | 86.6% | Jan 30, 2026 |
| Jan 26, 2026 | CVE-2026-24061 | GNU · InetUtils | GNU InetUtils Argument Injection Vulnerability | Critical 9.8 | 99.0% | Feb 16, 2026 |
| Jan 26, 2026 | CVE-2026-23760 Ransomware | SmarterTools · SmarterMail | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 9.3 | 96.4% | Feb 16, 2026 |
| Jan 26, 2026 | CVE-2026-21509 | Microsoft · Office | Microsoft Office Security Feature Bypass Vulnerability | High 7.8 | 70.8% | Feb 16, 2026 |
| Jan 26, 2026 | CVE-2025-52691 Ransomware | SmarterTools · SmarterMail | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability | Critical 10.0 | 85.7% | Feb 16, 2026 |
| Jan 26, 2026 | CVE-2018-14634 | Linux · Kernel | Linux Kernel Integer Overflow Vulnerability | High 7.8 | 14.7% | Feb 16, 2026 |
| Jan 23, 2026 | CVE-2024-37079 | Broadcom · VMware vCenter Server | Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability | Critical 9.8 | 22.4% | Feb 13, 2026 |
| Jan 22, 2026 | CVE-2025-68645 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability | High 8.8 | 48.9% | Feb 12, 2026 |
| Jan 22, 2026 | CVE-2025-54313 | Prettier · eslint-config-prettier | Prettier eslint-config-prettier Embedded Malicious Code Vulnerability | High 7.5 | 5.1% | Feb 12, 2026 |
| Jan 22, 2026 | CVE-2025-34026 | Versa · Concerto | Versa Concerto Improper Authentication Vulnerability | Critical 9.2 | 81.8% | Feb 12, 2026 |
| Jan 22, 2026 | CVE-2025-31125 | Vite · Vitejs | Vite Vitejs Improper Access Control Vulnerability | Medium 5.3 | 74.9% | Feb 12, 2026 |
| Jan 21, 2026 | CVE-2026-20045 | Cisco · Unified Communications Manager | Cisco Unified Communications Products Code Injection Vulnerability | High 8.2 | 4.5% | Feb 11, 2026 |
| Jan 13, 2026 | CVE-2026-20805 | Microsoft · Windows | Microsoft Windows Information Disclosure Vulnerability | Medium 5.5 | 7.5% | Feb 3, 2026 |
| Jan 12, 2026 | CVE-2025-8110 | Gogs · Gogs | Gogs Path Traversal Vulnerability | High 8.7 | 85.2% | Feb 2, 2026 |
| Jan 7, 2026 | CVE-2025-37164 | Hewlett Packard Enterprise (HPE) · OneView | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability | Critical 10.0 | 90.2% | Jan 28, 2026 |
| Jan 7, 2026 | CVE-2009-0556 | Microsoft · Office | Microsoft Office PowerPoint Code Injection Vulnerability | High 8.8 | 67.3% | Jan 28, 2026 |
| Dec 29, 2025 | CVE-2025-14847 | MongoDB · MongoDB and MongoDB Server | MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability | High 7.5 | 83.2% | Jan 19, 2026 |
| Dec 22, 2025 | CVE-2023-52163 | Digiever · DS-2105 Pro | Digiever DS-2105 Pro Missing Authorization Vulnerability | High 8.8 | 96.9% | Jan 12, 2026 |
| Dec 19, 2025 | CVE-2025-14733 Ransomware | WatchGuard · Firebox | WatchGuard Firebox Out of Bounds Write Vulnerability | Critical 9.3 | 29.4% | Dec 26, 2025 |
| Dec 17, 2025 | CVE-2025-59374 | ASUS · Live Update | ASUS Live Update Embedded Malicious Code Vulnerability | Critical 9.3 | 1.2% | Jan 7, 2026 |
| Dec 17, 2025 | CVE-2025-40602 | SonicWall · SMA1000 appliance | SonicWall SMA1000 Missing Authorization Vulnerability | Medium 6.6 | 2.8% | Dec 24, 2025 |
| Dec 17, 2025 | CVE-2025-20393 | Cisco · Multiple Products | Cisco Multiple Products Improper Input Validation Vulnerability | Critical 10.0 | 32.4% | Dec 24, 2025 |
| Dec 16, 2025 | CVE-2025-59718 | Fortinet · Multiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | Critical 9.1 | 68.3% | Dec 23, 2025 |
| Dec 15, 2025 | CVE-2025-43529 | Apple · Multiple Products | Apple Multiple Products Use-After-Free WebKit Vulnerability | High 8.8 | 25.7% | Jan 5, 2026 |
| Dec 15, 2025 | CVE-2025-14611 | Gladinet · CentreStack and Triofox | Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability | High 7.1 | 53.3% | Jan 5, 2026 |
| Dec 12, 2025 | CVE-2025-14174 | Google · Chromium | Google Chromium Out of Bounds Memory Access Vulnerability | High 8.8 | 55.3% | Jan 2, 2026 |
| Dec 12, 2025 | CVE-2018-4063 | Sierra Wireless · AirLink ALEOS | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability | High 8.8 | 27.3% | Jan 2, 2026 |
| Dec 11, 2025 | CVE-2025-58360 | OSGeo · GeoServer | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | High 8.2 | 61.2% | Jan 1, 2026 |
| Dec 9, 2025 | CVE-2025-62221 | Microsoft · Windows | Microsoft Windows Use After Free Vulnerability | High 7.8 | 2.5% | Dec 30, 2025 |
| Dec 9, 2025 | CVE-2025-6218 | RARLAB · WinRAR | RARLAB WinRAR Path Traversal Vulnerability | High 7.8 | 90.5% | Dec 30, 2025 |
| Dec 8, 2025 | CVE-2025-66644 | Array Networks · ArrayOS AG | Array Networks ArrayOS AG OS Command Injection Vulnerability | High 7.2 | 3.3% | Dec 29, 2025 |