Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 29, 22:18 UTC
Added this week
10
▲ 25%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2026-7473EO
EOS
Arista Networks
5.8Jun 9Jun 23Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
CVE-2026-50751
Ransomware
QS
Quantum Security Gateway
Check Point
9.3Jun 8Jun 11User Authentication Bypass in VPN Remote Access and Mobile Access
CVE-2026-42271LI
litellm
BerriAI
8.8Jun 8Jun 22LiteLLM: Authenticated command execution via MCP stdio test endpoints
CVE-2026-28318SE
Serv-U
SolarWinds
7.5Jun 5Jun 19SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
CVE-2026-45247FP
Full Page Cache Warmer for Magento 2
Mirasvit
9.8Jun 3Jun 6Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection
CVE-2010-0249IE
Internet Explorer
Microsoft
8.8Jun 3Jun 3Microsoft Internet Explorer Use-After-Free Vulnerability
CVE-2025-48595AN
Android
Google
8.4Jun 2Jun 5Android Framework Integer Overflow Vulnerability
CVE-2022-0492KE
Kernel
Linux
7.8Jun 2Jun 5Linux Kernel Improper Authentication Vulnerability
CVE-2024-21182WS
WebLogic Server
Oracle
7.5Jun 1Jun 4Oracle WebLogic Server Unspecified Vulnerability
CVE-2026-0257
Ransomware
PA
PAN-OS
Palo Alto Networks
9.1May 29Jun 1PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
CVE-2026-48027
Ransomware
NX
nx-console
nrwl
9.8May 27Jun 10Compromised Nx Console version 18.95.0
CVE-2026-8398DT
DAEMON Tools Lite
AVB Disc Soft
9.8May 27May 30Daemon Tools Lite Embedded Malicious Code Vulnerability
CVE-2026-45321
Ransomware
AR
arktype-adapter
@tanstack
9.6May 27Jun 10Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
CVE-2026-48172CP
cPanel Plugin
LiteSpeed Technologies
9.8May 26May 29LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
CVE-2026-9082DR
Drupal
Drupal
9.8May 22May 27Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
CVE-2025-34291LA
Langflow
Langflow
8.8May 21Jun 4Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE
CVE-2026-34926AO
Apex One
Trend Micro
6.7May 21Jun 4Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CVE-2008-4250WI
Windows
Microsoft
9.8May 20Jun 3Microsoft Windows Buffer Overflow Vulnerability
CVE-2009-3459AC
Acrobat
Adobe
8.8May 20Jun 3Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
CVE-2009-1537DI
Directx
Microsoft
8.8May 20Jun 3Microsoft DirectX NULL Byte Overwrite Vulnerability
CVE-2010-0806IE
Internet Explorer
Microsoft
8.8May 20Jun 3Microsoft Internet Explorer Use-After-Free Vulnerability
CVE-2026-41091MM
Microsoft Malware Protection Engine
Microsoft
7.8May 20Jun 3Microsoft Defender Elevation of Privilege Vulnerability
CVE-2026-45498MD
Microsoft Defender Antimalware Platform
Microsoft
7.5May 20Jun 3Microsoft Defender Denial of Service Vulnerability
CVE-2026-42897ES
Exchange Server
Microsoft
6.1May 15May 29Microsoft Exchange Server Spoofing Vulnerability
CVE-2026-20182CC
Cisco Catalyst SD-WAN Controller
Cisco
10.0May 14May 17Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVE-2026-42208LI
litellm
BerriAI
9.8May 8May 11LiteLLM: SQL injection in Proxy API key verification
CVE-2026-6973EM
Endpoint Manager Mobile
Ivanti
7.2May 7May 10Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
CVE-2026-0300PA
PAN-OS
Palo Alto Networks
9.8May 6May 9PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
CVE-2026-31431KE
Kernel
Linux
7.8May 1May 15crypto: algif_aead - Revert to operating out-of-place
CVE-2026-41940
Ransomware
CP
cPanel
WebPros
9.8Apr 30May 3WebPros cPanel and WHM Authentication Bypass via Login Flow
CVE-2024-1708
Ransomware
SC
ScreenConnect
ConnectWise
8.4Apr 28May 12Improper limitation of a pathname to a restricted directory (“path traversal”)
CVE-2026-32202WI
Windows
Microsoft
4.3Apr 28May 12Windows Shell Spoofing Vulnerability
CVE-2024-57726
Ransomware
SI
Simplehelp
Simple-help
9.9Apr 24May 8SimpleHelp Missing Authorization Vulnerability
CVE-2024-7399M9
MagicINFO 9 Server
Samsung Electronics
9.8Apr 24May 8Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVE-2024-57728
Ransomware
SI
Simplehelp
Simple-help
7.2Apr 24May 8SimpleHelp Path Traversal Vulnerability
CVE-2025-29635DF
Dir-823x Firmware
Dlink
7.2Apr 24May 8D-Link DIR-823X Command Injection Vulnerability
CVE-2026-39987MA
marimo
marimo-team
9.8Apr 23May 7marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
CVE-2026-33825
Ransomware
MD
Microsoft Defender Antimalware Platform
Microsoft
7.8Apr 22May 6Microsoft Defender Elevation of Privilege Vulnerability
CVE-2025-32975KS
Kace Systems Management Appliance
Quest
10.0Apr 20May 4Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
CVE-2026-20128CC
Cisco Catalyst SD-WAN Manager
Cisco
7.5Apr 20Apr 23Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
CVE-2023-27351
Ransomware
PM
PaperCut MF/NG
PaperCut
7.5Apr 20May 4PaperCut NG/MF Improper Authentication Vulnerability
CVE-2026-20133CC
Cisco Catalyst SD-WAN Manager
Cisco
7.5Apr 20Apr 23Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVE-2024-27199
Ransomware
TE
TeamCity
JetBrains
7.3Apr 20May 4JetBrains TeamCity Relative Path Traversal Vulnerability
CVE-2025-2749XP
Xperience
Kentico
7.2Apr 20May 4Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE
CVE-2025-48700ZC
Zimbra Collaboration Suite
Synacor
6.1Apr 20Apr 23Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
CVE-2026-20122CC
Cisco Catalyst SD-WAN Manager
Cisco
5.4Apr 20Apr 23Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
CVE-2026-34197AC
ActiveMQ
Apache
8.8Apr 16Apr 30Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans
CVE-2009-0238OF
Office
Microsoft
8.8Apr 14Apr 28Microsoft Office Remote Code Execution
CVE-2026-32201SH
SharePoint
Microsoft
6.5Apr 14Apr 28Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-21643FO
FortiClientEMS
Fortinet
9.8Apr 13Apr 16Fortinet FortiClient EMS SQL Injection Vulnerability
Page 4 of 36 · 1,765 total
1…345…36