Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 29, 21:21 UTC
Added this week
10
▲ 25%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2026-72898ME
Metabase
Metabase
10.0Aug 11Aug 14Metabase SQL injection via password reset endpoint
CVE-2026-20349CS
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
Cisco
8.6Aug 11Aug 14Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
CVE-2026-68820W1
Windows 10 Version 1607
Microsoft
7.0Aug 11Aug 25Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-8037EC
ECS Connections Manager
Progress Software
9.8Aug 7Aug 10OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVE-2026-63077
Ransomware
TE
TeamCity
JetBrains
9.8Aug 5Aug 8JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVE-2026-9198LO
Langflow OSS
IBM
9.8Aug 4Aug 7Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
CVE-2026-34486TO
Tomcat
Apache
7.5Aug 4Aug 7Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
CVE-2026-18556NC
N-central
N-able
7.4Aug 4Aug 7Unauthenticated administrative account takeover
CVE-2026-18577NC
N-central
N-able
8.1Aug 3Aug 6Incomplete patch leads to administrative account takeover
CVE-2026-20316
Ransomware
CS
Cisco Secure Firewall Management Center (FMC)
Cisco
5.3Jul 29Aug 1Cisco Secure Firewall Management Center Software Static Credential Vulnerability
CVE-2026-16812VO
VeloCloud Orchestrator On-Prem
Arista Networks
10.0Jul 27Jul 30VeloCloud Orchestrator OS Command Injection
CVE-2025-68686FO
FortiOS
Fortinet
5.9Jul 27Aug 10Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVE-2026-50522SH
SharePoint
Microsoft
9.8Jul 22Jul 25Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-16232MS
Multi-Domain Security Management
checkpoint
9.8Jul 22Jul 25Authentication Bypass in the SmartConsole Login Process Using an Application Token
CVE-2026-63030WO
WordPress
WordPress
9.8Jul 21Jul 24WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
CVE-2026-0770LA
Langflow
Langflow
9.8Jul 21Jul 24Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
CVE-2021-27137DD
DD-WRT
DD-WRT
8.1Jul 21Jul 24DD-WRT Stack-Based Buffer Overflow Vulnerability
CVE-2026-60137WO
WordPress
WordPress
5.9Jul 21Aug 4WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
CVE-2026-39808FO
FortiSandbox
Fortinet
9.8Jul 16Jul 19Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-25089FO
FortiSandbox
Fortinet
9.8Jul 16Jul 19Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-58644SH
SharePoint
Microsoft
9.8Jul 16Jul 19Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-46817OP
Oracle Payments
Oracle Corporation
9.8Jul 15Jul 18Oracle E-Business Suite Improper Privilege Management Vulnerability
CVE-2023-4346KP
KNX Protocol Connection Authorization Option 1
KNX Association
7.5Jul 15Jul 29KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
CVE-2026-15409
Ransomware
SM
SMA1000
SonicWall
10.0Jul 14Jul 17SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-56164SH
SharePoint
Microsoft
9.8Jul 14Jul 17Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-56155W1
Windows 10 Version 1607
Microsoft
7.8Jul 14Jul 28Active Directory Federation Services Elevation of Privilege Vulnerability
CVE-2026-15410
Ransomware
SM
SMA1000
SonicWall
7.2Jul 14Jul 17SonicWall SMA1000 Appliances Code Injection Vulnerability
CVE-2008-4128IO
Ios
Cisco
8.1Jul 13Jul 16Cisco IOS Cross-Site Request Forgery Vulnerability
CVE-2026-56291BB
balbooa.com Balbooa Forms extension for Joomla
balbooa.com
9.8Jul 10Jul 13Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
CVE-2026-48939IE
iCagenda extension for Joomla
icagenda.com
9.8Jul 10Jul 13Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
CVE-2026-48282CO
ColdFusion
Adobe
10.0Jul 7Jul 10ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CVE-2026-48908SP
SP Page Builder extension for Joomla
joomshaper.net
9.8Jul 7Jul 10Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
CVE-2026-56290JP
JoomlaCK.fr Page Builder CK extension for Joomla
joomlack.fr
9.8Jul 7Jul 10Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0
CVE-2026-55255LA
langflow
langflow-ai
8.4Jul 7Jul 10Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
CVE-2026-45659
Ransomware
SH
SharePoint
Microsoft
8.8Jul 1Jul 4Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-48558SI
SimpleHelp
SimpleHelp
10.0Jun 29Jul 2SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
CVE-2026-12569
Ransomware
FL
FlexPLM
PTC
9.8Jun 25Jun 28Remote Code Execution (RCE) vulnerability in Windchill PDMlink
CVE-2026-20230CU
Cisco Unified Communications Manager
Cisco
8.6Jun 25Jun 28Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
CVE-2026-34909EF
EFG
Ubiquiti Inc
10.0Jun 23Jun 26Ubiquiti UniFi OS Path Traversal Vulnerability
CVE-2026-34910EF
EFG
Ubiquiti Inc
10.0Jun 23Jun 26Ubiquiti UniFi OS Improper Input Validation Vulnerability
CVE-2026-34908EF
EFG
Ubiquiti Inc
10.0Jun 23Jun 26Ubiquiti UniFi OS Improper Access Control Vulnerability
CVE-2025-67038ES
E210 series
Lantronix
9.8Jun 23Jun 26Lantronix EDS5000, G520, and X300 OS Command Injection
CVE-2026-20253SE
Splunk Enterprise
Splunk
9.8Jun 18Jun 21Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
CVE-2026-48907JC
Joomla Content Editor (JCE) extension for Joomla
joomlacontenteditor.net
9.8Jun 16Jun 19Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
CVE-2026-54420CP
cPanel Plugin
LiteSpeed Technologies
8.5Jun 15Jun 18LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
CVE-2026-20262CC
Cisco Catalyst SD-WAN Manager
Cisco
6.5Jun 15Jun 29Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
CVE-2026-35273
Ransomware
PE
PeopleSoft Enterprise PeopleTools
Oracle Corporation
9.8Jun 12Jun 15Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CVE-2026-10520SE
Sentry
ivanti
10.0Jun 11Jun 14Ivanti Sentry OS Command Injection Vulnerability
CVE-2026-11645CH
Chrome
Google
8.8Jun 9Jun 23Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CVE-2026-20245CC
Cisco Catalyst SD-WAN Controller
Cisco
7.8Jun 9Jun 23Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
Page 3 of 36 · 1,765 total
1234…36