Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 28, 11:20 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
All KEVRansomware-linked
1,761 entries
CVEProductCVSSAddedDue dateSummary
CVE-2026-63077
Ransomware
TE
TeamCity
JetBrains
9.8Aug 5Aug 8JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVE-2026-9198LO
Langflow OSS
IBM
9.8Aug 4Aug 7Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
CVE-2026-34486TO
Tomcat
Apache
7.5Aug 4Aug 7Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
CVE-2026-18556NC
N-central
N-able
7.4Aug 4Aug 7Unauthenticated administrative account takeover
CVE-2026-18577NC
N-central
N-able
8.1Aug 3Aug 6Incomplete patch leads to administrative account takeover
CVE-2026-20316
Ransomware
CS
Cisco Secure Firewall Management Center (FMC)
Cisco
5.3Jul 29Aug 1Cisco Secure Firewall Management Center Software Static Credential Vulnerability
CVE-2026-16812VO
VeloCloud Orchestrator On-Prem
Arista Networks
10.0Jul 27Jul 30VeloCloud Orchestrator OS Command Injection
CVE-2025-68686FO
FortiOS
Fortinet
5.9Jul 27Aug 10Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVE-2026-16232MS
Multi-Domain Security Management
checkpoint
9.8Jul 22Jul 25Authentication Bypass in the SmartConsole Login Process Using an Application Token
CVE-2026-50522SH
SharePoint
Microsoft
9.8Jul 22Jul 25Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-63030WO
WordPress
WordPress
9.8Jul 21Jul 24WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
CVE-2026-0770LA
Langflow
Langflow
9.8Jul 21Jul 24Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability
CVE-2021-27137DD
DD-WRT
DD-WRT
8.1Jul 21Jul 24DD-WRT Stack-Based Buffer Overflow Vulnerability
CVE-2026-60137WO
WordPress
WordPress
5.9Jul 21Aug 4WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
CVE-2026-58644SH
SharePoint
Microsoft
9.8Jul 16Jul 19Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-39808FO
FortiSandbox
Fortinet
9.8Jul 16Jul 19Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-25089FO
FortiSandbox
Fortinet
9.8Jul 16Jul 19Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-46817OP
Oracle Payments
Oracle Corporation
9.8Jul 15Jul 18Oracle E-Business Suite Improper Privilege Management Vulnerability
CVE-2023-4346KP
KNX Protocol Connection Authorization Option 1
KNX Association
7.5Jul 15Jul 29KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
CVE-2026-15409
Ransomware
SM
SMA1000
SonicWall
10.0Jul 14Jul 17SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-56164SH
SharePoint
Microsoft
9.8Jul 14Jul 17Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-56155W1
Windows 10 Version 1607
Microsoft
7.8Jul 14Jul 28Active Directory Federation Services Elevation of Privilege Vulnerability
CVE-2026-15410
Ransomware
SM
SMA1000
SonicWall
7.2Jul 14Jul 17SonicWall SMA1000 Appliances Code Injection Vulnerability
CVE-2008-4128IO
Ios
Cisco
8.1Jul 13Jul 16Cisco IOS Cross-Site Request Forgery Vulnerability
CVE-2026-48939IE
iCagenda extension for Joomla
icagenda.com
9.8Jul 10Jul 13Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
CVE-2026-56291BB
balbooa.com Balbooa Forms extension for Joomla
balbooa.com
9.8Jul 10Jul 13Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
CVE-2026-48282CO
ColdFusion
Adobe
10.0Jul 7Jul 10ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CVE-2026-48908SP
SP Page Builder extension for Joomla
joomshaper.net
9.8Jul 7Jul 10Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
CVE-2026-56290JP
JoomlaCK.fr Page Builder CK extension for Joomla
joomlack.fr
9.8Jul 7Jul 10Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0
CVE-2026-55255LA
langflow
langflow-ai
8.4Jul 7Jul 10Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
CVE-2026-45659
Ransomware
SH
SharePoint
Microsoft
8.8Jul 1Jul 4Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-48558SI
SimpleHelp
SimpleHelp
10.0Jun 29Jul 2SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
CVE-2026-12569
Ransomware
FL
FlexPLM
PTC
9.8Jun 25Jun 28Remote Code Execution (RCE) vulnerability in Windchill PDMlink
CVE-2026-20230CU
Cisco Unified Communications Manager
Cisco
8.6Jun 25Jun 28Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
CVE-2026-34909EF
EFG
Ubiquiti Inc
10.0Jun 23Jun 26Ubiquiti UniFi OS Path Traversal Vulnerability
CVE-2026-34910EF
EFG
Ubiquiti Inc
10.0Jun 23Jun 26Ubiquiti UniFi OS Improper Input Validation Vulnerability
CVE-2026-34908EF
EFG
Ubiquiti Inc
10.0Jun 23Jun 26Ubiquiti UniFi OS Improper Access Control Vulnerability
CVE-2025-67038ES
E210 series
Lantronix
9.8Jun 23Jun 26Lantronix EDS5000, G520, and X300 OS Command Injection
CVE-2026-20253SE
Splunk Enterprise
Splunk
9.8Jun 18Jun 21Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise
CVE-2026-48907JC
Joomla Content Editor (JCE) extension for Joomla
joomlacontenteditor.net
9.8Jun 16Jun 19Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
CVE-2026-54420CP
cPanel Plugin
LiteSpeed Technologies
8.5Jun 15Jun 18LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
CVE-2026-20262CC
Cisco Catalyst SD-WAN Manager
Cisco
6.5Jun 15Jun 29Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
CVE-2026-35273
Ransomware
PE
PeopleSoft Enterprise PeopleTools
Oracle Corporation
9.8Jun 12Jun 15Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CVE-2026-10520SE
Sentry
ivanti
10.0Jun 11Jun 14Ivanti Sentry OS Command Injection Vulnerability
CVE-2026-11645CH
Chrome
Google
8.8Jun 9Jun 23Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CVE-2026-20245CC
Cisco Catalyst SD-WAN Controller
Cisco
7.8Jun 9Jun 23Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
CVE-2026-7473EO
EOS
Arista Networks
5.8Jun 9Jun 23Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
CVE-2026-50751
Ransomware
QS
Quantum Security Gateway
Check Point
9.3Jun 8Jun 11User Authentication Bypass in VPN Remote Access and Mobile Access
CVE-2026-42271LI
litellm
BerriAI
8.8Jun 8Jun 22LiteLLM: Authenticated command execution via MCP stdio test endpoints
CVE-2026-28318SE
Serv-U
SolarWinds
7.5Jun 5Jun 19SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability
Page 3 of 36 · 1,761 total
1234…36