Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 28, 12:08 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
All KEVRansomware-linked
361 entries
CVEProductCVSSAddedDue dateSummary
CVE-2026-59310
Ransomware
VS
vCenter Server
VMware
9.8Aug 18Aug 21vCenter directory-traversal vulnerability
CVE-2026-63077
Ransomware
TE
TeamCity
JetBrains
9.8Aug 5Aug 8JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVE-2026-20316
Ransomware
CS
Cisco Secure Firewall Management Center (FMC)
Cisco
5.3Jul 29Aug 1Cisco Secure Firewall Management Center Software Static Credential Vulnerability
CVE-2026-15409
Ransomware
SM
SMA1000
SonicWall
10.0Jul 14Jul 17SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-15410
Ransomware
SM
SMA1000
SonicWall
7.2Jul 14Jul 17SonicWall SMA1000 Appliances Code Injection Vulnerability
CVE-2026-45659
Ransomware
SH
SharePoint
Microsoft
8.8Jul 1Jul 4Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-12569
Ransomware
FL
FlexPLM
PTC
9.8Jun 25Jun 28Remote Code Execution (RCE) vulnerability in Windchill PDMlink
CVE-2026-35273
Ransomware
PE
PeopleSoft Enterprise PeopleTools
Oracle Corporation
9.8Jun 12Jun 15Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CVE-2026-50751
Ransomware
QS
Quantum Security Gateway
Check Point
9.3Jun 8Jun 11User Authentication Bypass in VPN Remote Access and Mobile Access
CVE-2026-0257
Ransomware
PA
PAN-OS
Palo Alto Networks
9.1May 29Jun 1PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
CVE-2026-48027
Ransomware
NX
nx-console
nrwl
9.8May 27Jun 10Compromised Nx Console version 18.95.0
CVE-2026-45321
Ransomware
AR
arktype-adapter
@tanstack
9.6May 27Jun 10Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
CVE-2026-41940
Ransomware
CP
cPanel
WebPros
9.8Apr 30May 3WebPros cPanel and WHM Authentication Bypass via Login Flow
CVE-2024-1708
Ransomware
SC
ScreenConnect
ConnectWise
8.4Apr 28May 12Improper limitation of a pathname to a restricted directory (“path traversal”)
CVE-2024-57726
Ransomware
SI
Simplehelp
Simple-help
9.9Apr 24May 8SimpleHelp Missing Authorization Vulnerability
CVE-2024-57728
Ransomware
SI
Simplehelp
Simple-help
7.2Apr 24May 8SimpleHelp Path Traversal Vulnerability
CVE-2026-33825
Ransomware
MD
Microsoft Defender Antimalware Platform
Microsoft
7.8Apr 22May 6Microsoft Defender Elevation of Privilege Vulnerability
CVE-2023-27351
Ransomware
PM
PaperCut MF/NG
PaperCut
7.5Apr 20May 4PaperCut NG/MF Improper Authentication Vulnerability
CVE-2024-27199
Ransomware
TE
TeamCity
JetBrains
7.3Apr 20May 4JetBrains TeamCity Relative Path Traversal Vulnerability
CVE-2023-21529
Ransomware
ES
Exchange Server
Microsoft
8.8Apr 13Apr 27Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2025-60710
Ransomware
WI
Windows
Microsoft
7.8Apr 13Apr 27Host Process for Windows Tasks Elevation of Privilege Vulnerability
CVE-2026-20131
Ransomware
CS
Cisco Secure Firewall Management Center (FMC)
Cisco
10.0Mar 19Mar 22Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
CVE-2025-26399
Ransomware
WH
Web Help Desk
SolarWinds
9.8Mar 9Mar 12SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
CVE-2026-1731
Ransomware
RS
Remote Support
BeyondTrust
9.8Feb 13Feb 16Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
CVE-2026-24423
Ransomware
SM
SmarterMail
SmarterTools
9.8Feb 5Feb 26SmarterTools SmarterMail < Build 9511 Unauthenticated RCE via ConnectToHub API
CVE-2025-52691
Ransomware
SM
SmarterMail
SmarterTools
10.0Jan 26Feb 16Upload Arbitrary Files
CVE-2026-23760
Ransomware
SM
SmarterMail
SmarterTools
9.8Jan 26Feb 16SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
CVE-2025-14733
Ransomware
FO
Fireware OS
WatchGuard
9.8Dec 19Dec 26WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVE-2025-55182
Ransomware
RE
react-server-dom-parcel
Meta
10.0Dec 5Dec 12Meta React Server Components Remote Code Execution Vulnerability
CVE-2025-61884
Ransomware
OC
Oracle Configurator
Oracle Corporation
7.5Oct 20Nov 10Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
CVE-2025-61882
Ransomware
OC
Oracle Concurrent Processing
Oracle Corporation
9.8Oct 6Oct 27Oracle E-Business Suite Unspecified Vulnerability
CVE-2021-43226
Ransomware
WI
Windows
Microsoft
7.8Oct 6Oct 27Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2025-10035
Ransomware
GM
GoAnywhere MFT
Fortra
9.8Sep 29Oct 20Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVE-2025-8088
Ransomware
WI
WinRAR
win.rar GmbH
8.8Aug 12Sep 2Path traversal vulnerability in WinRAR
CVE-2025-49704
Ransomware
SH
SharePoint
Microsoft
8.8Jul 22Jul 23Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2025-49706
Ransomware
SH
SharePoint
Microsoft
6.5Jul 22Jul 23Microsoft SharePoint Server Spoofing Vulnerability
CVE-2025-53770
Ransomware
SH
SharePoint
Microsoft
9.8Jul 20Jul 21Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-5777
Ransomware
NA
NetScaler ADC
Citrix
7.5Jul 10Jul 11NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
CVE-2019-6693
Ransomware
FO
FortiOS
Fortinet
6.5Jun 25Jul 16Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
CVE-2025-42999
Ransomware
SN
SAP NetWeaver (Visual Composer development server)
SAP_SE
9.1May 15Jun 5Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
CVE-2025-3248
Ransomware
LA
langflow
langflow-ai
9.8May 5May 26Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
CVE-2025-31324
Ransomware
SN
SAP NetWeaver (Visual Composer development server)
SAP_SE
9.8Apr 29May 20Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CVE-2025-29824
Ransomware
WI
Windows
Microsoft
7.8Apr 8Apr 29Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2025-31161
Ransomware
CR
CrushFTP
CrushFTP
9.8Apr 7Apr 28CrushFTP Authentication Bypass Vulnerability
CVE-2025-22457
Ransomware
CS
Connect Secure
Ivanti
9.8Apr 4Apr 11Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVE-2025-24472
Ransomware
FO
FortiOS
Fortinet
8.1Mar 18Apr 8Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-26633
Ransomware
WI
Windows
Microsoft
7.0Mar 11Apr 1Microsoft Management Console Security Feature Bypass Vulnerability
CVE-2025-22225
Ransomware
ES
ESXi
VMware
8.2Mar 4Mar 25VMware ESXi Arbitrary Write Vulnerability
CVE-2018-8639
Ransomware
WI
Windows
Microsoft
7.8Mar 3Mar 24Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2024-53704
Ransomware
SO
SonicOS
SonicWall
9.8Feb 18Mar 11SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
Page 1 of 8 · 361 total
12…8