Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 00:20 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2026-20700MA
macOS
Apple
7.8Feb 12Mar 5Apple Multiple Buffer Overflow Vulnerability
CVE-2025-15556NO
notepad-plus-plus
notepad-plus-plus
7.5Feb 12Mar 5Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification
CVE-2026-21513WI
Windows
Microsoft
8.8Feb 10Mar 3MSHTML Framework Security Feature Bypass Vulnerability
CVE-2026-21510WI
Windows
Microsoft
8.8Feb 10Mar 3Windows Shell Security Feature Bypass Vulnerability
CVE-2026-21533WI
Windows
Microsoft
7.8Feb 10Mar 3Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2026-21519WI
Windows
Microsoft
7.8Feb 10Mar 3Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-21514OF
Office
Microsoft
7.8Feb 10Mar 3Microsoft Word Security Feature Bypass Vulnerability
CVE-2026-21525WI
Windows
Microsoft
6.2Feb 10Mar 3Windows Remote Access Connection Manager Denial of Service Vulnerability
CVE-2025-11953RN
React Native Community Cli
React-native-community
9.8Feb 5Feb 26Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
CVE-2026-24423
Ransomware
SM
SmarterMail
SmarterTools
9.8Feb 5Feb 26SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
CVE-2025-40551WH
Web Help Desk
SolarWinds
9.8Feb 3Feb 6SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2019-19006FR
Freepbx
Sangoma
9.8Feb 3Feb 24 Sangoma FreePBX Improper Authentication Vulnerability
CVE-2021-39935GI
GitLab
GitLab
7.5Feb 3Feb 24GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
CVE-2025-64328FI
filestore
FreePBX
7.2Feb 3Feb 24FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
CVE-2026-1281EM
Endpoint Manager Mobile
Ivanti
9.8Jan 29Feb 1Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVE-2026-24858FO
FortiManager
Fortinet
9.8Jan 27Jan 30Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2025-52691
Ransomware
SM
SmarterMail
SmarterTools
10.0Jan 26Feb 16Upload Arbitrary Files
CVE-2026-23760
Ransomware
SM
SmarterMail
SmarterTools
9.8Jan 26Feb 16SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
CVE-2026-24061IN
Inetutils
GNU
9.8Jan 26Feb 16GNU InetUtils Argument Injection Vulnerability
CVE-2026-21509OF
Office
Microsoft
7.8Jan 26Feb 16Microsoft Office Security Feature Bypass Vulnerability
CVE-2018-14634KE
Kernel
Linux
7.8Jan 26Feb 16Linux Kernel Integer Overflow Vulnerability
CVE-2024-37079VS
vCenter Server
VMware
9.8Jan 23Feb 13Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
CVE-2025-68645ZC
Zimbra Collaboration Suite
Synacor
8.8Jan 22Feb 12Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
CVE-2025-54313ES
eslint-config-prettier
prettier
7.5Jan 22Feb 12Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
CVE-2025-31125VI
vite
vitejs
7.5Jan 22Feb 12Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
CVE-2025-34026CO
Concerto
Versa
7.5Jan 22Feb 12Versa Concerto Actuator Authentication Bypass Information Leak
CVE-2026-20045CU
Cisco Unified Communications Manager
Cisco
9.8Jan 21Feb 11Cisco Unified Communications Products Remote Code Execution Vulnerability
CVE-2026-20805WI
Windows
Microsoft
5.5Jan 13Feb 3Desktop Window Manager Information Disclosure Vulnerability
CVE-2025-8110GO
Gogs
Gogs
8.8Jan 12Feb 2File overwrite in file update API in Gogs
CVE-2025-37164HO
HPE OneView
Hewlett Packard Enterprise (HPE)
9.8Jan 7Jan 28Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
CVE-2009-0556OF
Office
Microsoft
8.8Jan 7Jan 28Microsoft Office PowerPoint Code Injection Vulnerability
CVE-2025-14847MO
MongoDB
MongoDB
7.5Dec 29Jan 19Zlib compressed protocol header length confusion may allow memory read
CVE-2023-52163DP
Ds-2105 Pro Firmware
Digiever
8.8Dec 22Jan 12Digiever DS-2105 Pro Missing Authorization Vulnerability
CVE-2025-14733
Ransomware
FO
Fireware OS
WatchGuard
9.8Dec 19Dec 26WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVE-2025-20393CS
Cisco Secure Email
Cisco
10.0Dec 17Dec 24Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
CVE-2025-59374LU
live update
ASUS
9.8Dec 17Jan 7ASUS Live Update Embedded Malicious Code Vulnerability
CVE-2025-40602SM
SMA1000
SonicWall
6.6Dec 17Dec 24SonicWall SMA1000 Missing Authorization Vulnerability
CVE-2025-59718FO
FortiOS
Fortinet
9.8Dec 16Dec 23Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVE-2025-14611CA
CentreStack and TrioFox
Gladinet
9.8Dec 15Jan 5Gladinet CentreStack and TrioFox Hard Coded AES Keys
CVE-2025-43529MA
macOS
Apple
8.8Dec 15Jan 5Apple Multiple Products Use-After-Free WebKit Vulnerability
CVE-2018-4063SW
Sierra Wireless
8.8Dec 12Jan 2Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
CVE-2025-14174CH
Chrome
Google
8.8Dec 12Jan 2Google Chromium Out of Bounds Memory Access Vulnerability
CVE-2025-58360GE
geoserver
geoserver
9.8Dec 11Jan 1GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
CVE-2025-62221WI
Windows
Microsoft
7.8Dec 9Dec 30Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2025-6218WI
WinRAR
RARLAB
7.8Dec 9Dec 30RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
CVE-2025-66644AA
ArrayOS AG
Array Networks
9.8Dec 8Dec 29Array Networks ArrayOS AG OS Command Injection Vulnerability
CVE-2022-37055GF
Go-rt-ac750 Firmware
Dlink
9.8Dec 8Dec 29D-Link Routers Buffer Overflow Vulnerability
CVE-2025-55182
Ransomware
RE
react-server-dom-parcel
Meta
10.0Dec 5Dec 12Meta React Server Components Remote Code Execution Vulnerability
CVE-2021-26828SC
Scadabr
Scadabr
8.8Dec 3Dec 24OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
CVE-2025-48572AN
Android
Google
7.8Dec 2Dec 23Android Framework Privilege Escalation Vulnerability
Page 6 of 36 · 1,765 total
1…567…36