Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 28, 09:42 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
All KEVRansomware-linked
1,761 entries
CVEProductCVSSAddedDue dateSummary
CVE-2026-48356CO
Commerce
Adobe
9.3Oct 27Nov 10Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
CVE-2026-111497BR
Brotli
Google
9.2Oct 27Nov 10Out-of-Bounds Write in Google Brotli Decoder
CVE-2026-109618PH
PHP
PHP
9.8Oct 26Oct 29RCE via OOM corruption
CVE-2026-109619PH
PHP
PHP
8.1Oct 26Oct 29RCE via stale global state
CVE-2026-114625VO
VeloCloud Orchestrator
Arista Networks
9.9Oct 23Oct 26VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host
CVE-2026-110447CO
Collabora Online - Built-in CODE Server
Collabora
9.8Oct 23Oct 26Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
CVE-2026-106931SS
SiteGuard Server Edition for Apache httpd
EG Secure Solutions Inc.
7.8Oct 20Oct 23EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
CVE-2026-96656MS
Media Server
Plex
7.2Oct 20Oct 23Plex Media Server arbitrary file write
CVE-2026-110936SS
Siemens Software Center
Siemens
6.7Oct 20Nov 3Siemens Software Center Uncontrolled Search Path Element Vulnerability
CVE-2026-96654MS
Media Server
Plex
6.5Oct 20Oct 23Plex Media Server URL injection
CVE-2026-96652MS
Media Server
Plex
4.3Oct 20Nov 3Plex Media Server SSRF
CVE-2026-96655MS
Media Server
Plex
4.3Oct 20Nov 3Plex Media Server arbitrary-host SSRF
CVE-2026-102764RS
Remote Support
BeyondTrust
9.8Oct 16Oct 19Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
CVE-2025-61624FO
FortiOS
Fortinet
6.5Oct 16Oct 19Fortinet Multiple Products Path Traversal Vulnerability
CVE-2026-21589CO
Confluence
Atlassian
7.5Oct 15Oct 18Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVE-2026-105134AH
AhsayCBS
Ahsay
10.0Oct 14Oct 17Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection
CVE-2026-76519CS
Cisco Secure Email
Cisco
9.8Oct 14Oct 17Cisco Secure Email Gateway Arbitrary File Write Vulnerability
CVE-2026-105133AH
AhsayCBS
Ahsay
7.3Oct 14Oct 17Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication
CVE-2026-0322PA
PAN-OS
Palo Alto Networks
7.2Oct 14Oct 17PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
CVE-2026-96951WI
Windows
Microsoft
8.8Oct 13Oct 16Windows Shell Security Feature Bypass Vulnerability
CVE-2026-104935CS
Connect Secure
Ivanti
8.6Oct 13Oct 16Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVE-2015-3306DL
Debian Linux
Debian
10.0Oct 8Oct 11ProFTPD Improper Access Control Vulnerability
CVE-2021-3199DS
Document Server
Onlyoffice
9.8Oct 8Oct 11ONLYOFFICE Docs Server Path Traversal Vulnerability
CVE-2016-3081ST
Struts
Apache
8.1Oct 8Oct 11Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method:…
CVE-2015-5477JO
Junos OS
Juniper
7.5Oct 8Oct 11 ISC BIND Data Processing Errors Vulnerability
CVE-2023-22894ST
Strapi
Strapi
4.9Oct 8Oct 11Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter
CVE-2026-88779NA
NetScaler ADC
Citrix
7.5Oct 4Oct 7Memory overflow vulnerability leading to Denial of Service
CVE-2026-102489ZA
Zammad
Zammad GmbH
9.8Oct 2Oct 5Undisclosed RCE in Zammad v6.3 and higher
CVE-2026-102490ZA
Zammad
Zammad GmbH
7.8Oct 2Oct 5Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
CVE-2026-104286FO
FortiMail
Fortinet
9.8Oct 1Oct 4Fortinet FortiMail Path Traversal Vulnerability
CVE-2026-76504CC
Cisco Catalyst SD-WAN Manager
Cisco
9.8Sep 30Oct 3Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
CVE-2026-86950MA
macOS
Apple
8.8Sep 29Oct 13Apple Multiple Products Out-of-Bounds Write Vulnerability
CVE-2026-88771NA
NetScaler ADC
Citrix
9.8Sep 27Sep 30A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
CVE-2026-88772NA
NetScaler ADC
Citrix
8.1Sep 27Sep 30Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
CVE-2026-65660SH
SharePoint
Microsoft
8.8Sep 25Sep 28Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-87902WO
WordPress
WordPress
8.1Sep 25Sep 28WordPress Core Remote File Inclusion Vulnerability
CVE-2026-67279RO
RouterOS
Mikrotik
6.5Sep 25Sep 28SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
CVE-2026-5430WA
WSO2 API Control Plane
WSO2
10.0Sep 24Sep 27Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
CVE-2026-71362CO
Commerce
Adobe
9.1Sep 24Sep 27Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-93952VO
VeloCloud Orchestrator (VCO) On-Prem
Arista Networks
10.0Sep 22Sep 25VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host
CVE-2026-93616QS
Quantum Security Management
checkpoint
9.8Sep 22Sep 25Directory Traversal and File upload allows execution of arbitrary script on the Management Server
CVE-2026-94127BI
BIG-IP
F5
9.8Sep 22Sep 25BIG-IP APM OAuth vulnerability
CVE-2026-85102QS
Quantum Security Gateway
Check Point
9.8Sep 22Sep 25Improper Certificate Validation in Quantum Security Gateway
CVE-2026-7273GF
GS1900-10HP firmware
Zyxel
8.8Sep 21Sep 24Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
CVE-2025-39682KE
Kernel
Linux
9.8Sep 18Sep 21tls: fix handling of zero-length records on the rx_list
CVE-2026-53266KE
Kernel
Linux
8.8Sep 18Sep 21netfilter: bridge: make ebt_snat ARP rewrite writable
CVE-2025-39964KE
Kernel
Linux
5.5Sep 18Sep 21crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
CVE-2026-76460CI
Cisco Identity Services Engine Software
Cisco
10.0Sep 16Sep 19Cisco Identity Services Engine Authentication Bypass Vulnerability
CVE-2026-58704AN
Android
Google
8.8Sep 16Sep 19Google Pixel Improper Authorization Vulnerability
CVE-2026-87886AB
Acronis Backup extension for Plesk
Acronis
7.8Sep 16Sep 19Acronis Backup Incorrect Default Permissions Vulnerability
Page 1 of 36 · 1,761 total
12…36