Exploited Vulnerabilities Tracker
Every vulnerability the US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed attackers are exploiting. If your organisation runs one of these products, patch it first. Updated as CISA publishes; TechUpscale reports each addition within minutes.
9added in the last 7 days
35added in the last 30 days
0of those used in ransomware
1,748in the catalog in total
Get alerted the moment CISA adds one
One email per addition (batches arrive together), plus the Cyber Brief: the day's security news for practitioners, every weekday morning. Free.
Most affected vendors (last 90 days)
Latest additions
| Added | CVE | Vendor and product | Vulnerability | Patch by | Ransomware | Read |
|---|---|---|---|---|---|---|
| Oct 16, 2026 | CVE-2026-102764 |
BeyondTrust Remote Support | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | Oct 19 | Not known | Our story · NVD |
| Oct 16, 2026 | CVE-2025-61624 |
Fortinet Multiple Products | Fortinet Multiple Products Path Traversal Vulnerability | Oct 19 | Not known | Our story · NVD |
| Oct 15, 2026 | CVE-2026-21589 |
Atlassian Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | Oct 18 | Not known | Our story · NVD |
| Oct 14, 2026 | CVE-2026-76519 |
Cisco Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | Oct 17 | Not known | Our story · NVD |
| Oct 14, 2026 | CVE-2026-105134 |
Ahsay AhsayCBS | Ahsay AhsayCBS Command Injection Vulnerability | Oct 17 | Not known | Our story · NVD |
| Oct 14, 2026 | CVE-2026-105133 |
Ahsay AhsayCBS | Ahsay AhsayCBS Improper Authentication Vulnerability | Oct 17 | Not known | Our story · NVD |
| Oct 14, 2026 | CVE-2026-0322 |
Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | Oct 17 | Not known | Our story · NVD |
| Oct 13, 2026 | CVE-2026-96951 |
Microsoft Windows | Microsoft Windows Command Injection Vulnerability | Oct 16 | Not known | Our story · NVD |
| Oct 13, 2026 | CVE-2026-104935 |
Ivanti Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | Oct 16 | Not known | Our story · NVD |
| Oct 8, 2026 | CVE-2023-22894 |
Strapi Strapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | Oct 11 | Not known | Our story · NVD |
| Oct 8, 2026 | CVE-2021-3199 |
ONLYOFFICE Docs | ONLYOFFICE Docs Server Path Traversal Vulnerability | Oct 11 | Not known | Our story · NVD |
| Oct 8, 2026 | CVE-2016-3081 |
Apache Struts | Apache Struts Command Injection Vulnerability | Oct 11 | Not known | Our story · NVD |
| Oct 8, 2026 | CVE-2015-5477 |
ISC BIND | ISC BIND Data Processing Errors Vulnerability | Oct 11 | Not known | Our story · NVD |
| Oct 8, 2026 | CVE-2015-3306 |
ProFTPD ProFTPD | ProFTPD Improper Access Control Vulnerability | Oct 11 | Not known | Our story · NVD |
| Oct 4, 2026 | CVE-2026-88779 |
Citrix NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | Oct 7 | Not known | Our story · NVD |
| Oct 2, 2026 | CVE-2026-102490 |
Zammad GmbH Zammad | Zammad GmbH Zammad Improper Privilege Management Vulnerability | Oct 5 | Not known | Our story · NVD |
| Oct 2, 2026 | CVE-2026-102489 |
Zammad GmbH Zammad | Zammad GmbH Zammad Session Fixation Vulnerability | Oct 5 | Not known | Our story · NVD |
| Oct 1, 2026 | CVE-2026-104286 |
Fortinet FortiMail | Fortinet FortiMail Path Traversal Vulnerability | Oct 4 | Not known | Our story · NVD |
| Sep 30, 2026 | CVE-2026-76504 |
Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | Oct 3 | Not known | Our story · NVD |
| Sep 29, 2026 | CVE-2026-86950 |
Apple Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | Oct 13 | Not known | Our story · NVD |
| Sep 27, 2026 | CVE-2026-88772 |
Citrix NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | Sep 30 | Not known | Our story · NVD |
| Sep 27, 2026 | CVE-2026-88771 |
Citrix NetScaler | Citrix NetScaler Improper Input Validation Vulnerability | Sep 30 | Not known | Our story · NVD |
| Sep 25, 2026 | CVE-2026-87902 |
WordPress Core | WordPress Core Remote File Inclusion Vulnerability | Sep 28 | Not known | Our story · NVD |
| Sep 25, 2026 | CVE-2026-67279 |
MikroTik RouterOS | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | Sep 28 | Not known | Our story · NVD |
| Sep 25, 2026 | CVE-2026-65660 |
Microsoft SharePoint | Microsoft SharePoint Code Injection Vulnerability | Sep 28 | Not known | Our story · NVD |
| Sep 24, 2026 | CVE-2026-71362 |
Adobe Commerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | Sep 27 | Not known | NVD |
| Sep 24, 2026 | CVE-2026-5430 |
WSO2 Multiple Products | WSO2 Multiple Products Path Traversal Vulnerability | Sep 27 | Not known | NVD |
| Sep 22, 2026 | CVE-2026-94127 |
F5 BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | Sep 25 | Not known | NVD |
| Sep 22, 2026 | CVE-2026-93952 |
Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | Sep 25 | Not known | NVD |
| Sep 22, 2026 | CVE-2026-93616 |
Check Point Multiple Products | Check Point Multiple Products Path Traversal Vulnerability | Sep 25 | Not known | NVD |
| Sep 22, 2026 | CVE-2026-85102 |
Check Point Multiple Products | Check Point Multiple Products Improper Certificate Validation Vulnerability | Sep 25 | Not known | NVD |
| Sep 21, 2026 | CVE-2026-7273 |
Zyxel GS1900 Series Switches | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | Sep 24 | Not known | NVD |
| Sep 18, 2026 | CVE-2026-53266 |
Linux Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | Sep 21 | Not known | NVD |
| Sep 18, 2026 | CVE-2025-39964 |
Linux Kernel | Linux Kernel Race Condition Vulnerability | Sep 21 | Not known | NVD |
| Sep 18, 2026 | CVE-2025-39682 |
Linux Kernel | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | Sep 21 | Not known | NVD |
| Sep 16, 2026 | CVE-2026-87886 |
Acronis Backup | Acronis Backup Incorrect Default Permissions Vulnerability | Sep 19 | Not known | NVD |
| Sep 16, 2026 | CVE-2026-76460 |
Cisco Identity Services Engine | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | Sep 19 | Not known | NVD |
| Sep 16, 2026 | CVE-2026-58704 |
Google Pixel | Google Pixel Improper Authorization Vulnerability | Sep 19 | Not known | NVD |
| Sep 14, 2026 | CVE-2026-76461 |
Cisco Secure Email Gateway | Cisco Secure Email Gateway SQL Injection Vulnerability | Sep 17 | Not known | NVD |
| Sep 11, 2026 | CVE-2026-85706 |
GitLab Community Edition and Enterprise Edition | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | Sep 14 | Not known | NVD |
| Sep 11, 2026 | CVE-2026-84869 |
ConnectWise ScreenConnect | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | Sep 14 | Not known | NVD |
| Sep 11, 2026 | CVE-2026-42018 |
JFrog Artifactory | JFrog Artifactory Improper Authentication Vulnerability | Sep 25 | Not known | NVD |
| Sep 11, 2026 | CVE-2026-42016 |
JFrog Artifactory | JFrog Artifactory Incorrect Authorization Vulnerability | Sep 25 | Not known | NVD |
| Sep 10, 2026 | CVE-2026-86060 |
MikroTik RouterOS | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | Sep 13 | Not known | NVD |
| Sep 10, 2026 | CVE-2026-67277 |
MikroTik RouterOS | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | Sep 13 | Not known | NVD |
| Sep 9, 2026 | CVE-2026-87491 |
Google Chromium V8 | Google Chromium V8 Out of Bounds Write Vulnerability | Sep 23 | Not known | NVD |
| Sep 9, 2026 | CVE-2026-20079 |
Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | Sep 12 | Not known | NVD |
| Sep 9, 2026 | CVE-2026-19490 |
Citrix NetScaler | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | Sep 12 | Not known | NVD |
| Sep 9, 2026 | CVE-2025-25249 |
Fortinet Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | Sep 12 | Not known | NVD |
| Sep 8, 2026 | CVE-2026-86218 |
N-able N-central | N-able N-central Static Code Injection Vulnerability | Sep 11 | Not known | NVD |
| Sep 8, 2026 | CVE-2026-85880 |
Microsoft Windows | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | Sep 22 | Not known | NVD |
| Sep 8, 2026 | CVE-2026-81963 |
Microsoft Windows | Microsoft Windows Link Following Vulnerability | Sep 22 | Not known | NVD |
| Sep 8, 2026 | CVE-2026-75650 |
Adobe Commerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | Sep 11 | Not known | NVD |
| Sep 4, 2026 | CVE-2026-85046 |
Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | Sep 18 | Not known | NVD |
| Sep 2, 2026 | CVE-2026-9586 |
Sangoma Switchvox | Sangoma Switchvox SQL Injection Vulnerability | Sep 5 | Not known | NVD |
| Sep 2, 2026 | CVE-2026-83549 |
SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | Sep 5 | Not known | NVD |
| Sep 2, 2026 | CVE-2026-83548 |
SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Sep 5 | Not known | NVD |
| Sep 2, 2026 | CVE-2026-82329 |
JFrog Artifactory | JFrog Artifactory Improper Authentication Vulnerability | Sep 5 | Not known | NVD |
| Sep 2, 2026 | CVE-2026-59822 |
BerriAI LiteLLM | BerriAI LiteLLM Improper Authentication Vulnerability | Sep 16 | Not known | NVD |
| Sep 2, 2026 | CVE-2026-49869 |
Kestra Kestra OSS | Kestra OSS OS Command Injection Vulnerability | Sep 5 | Not known | NVD |
| Sep 2, 2026 | CVE-2026-48710 |
Kludex Starlette | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | Sep 16 | Not known | NVD |
| Aug 31, 2026 | CVE-2026-82078 |
PaperCut NG/MF | PaperCut NG/MF Unsafe Reflection Vulnerability | Sep 14 | Not known | NVD |
| Aug 31, 2026 | CVE-2026-81578 |
PaperCut NG/MF | PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | Sep 14 | Not known | NVD |
| Aug 27, 2026 | CVE-2026-66384 |
JFrog Artifactory | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | Sep 10 | Not known | NVD |
| Aug 27, 2026 | CVE-2026-53362 |
Linux Kernel | Linux Kernel Unspecified Vulnerability | Aug 30 | Not known | NVD |
| Aug 27, 2026 | CVE-2023-49105 |
ownCloud ownCloud | ownCloud Improper Authentication Vulnerability | Aug 30 | Not known | NVD |
| Aug 26, 2026 | CVE-2026-8452 |
Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | Aug 29 | Not known | NVD |
| Aug 26, 2026 | CVE-2022-0995 |
Linux Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | Aug 29 | Not known | NVD |
| Aug 26, 2026 | CVE-2021-23758 |
Ajax.NET Professional Ajax.NET Professional | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | Sep 9 | Not known | NVD |
| Aug 26, 2026 | CVE-2019-1068 |
Microsoft SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | Aug 29 | Not known | NVD |
| Aug 26, 2026 | CVE-2015-5287 |
Red Hat Automatic Bug Reporting Tool | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability | Sep 9 | Not known | NVD |
| Aug 26, 2026 | CVE-2015-3246 |
Red Hat Libuser | Red Hat Libuser Race Condition Vulnerability | Sep 9 | Not known | NVD |
| Aug 25, 2026 | CVE-2026-60004 |
Gitea Gitea | Gitea Code Injection Vulnerability | Aug 28 | Not known | NVD |
| Aug 24, 2026 | CVE-2026-21962 |
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | Aug 27 | Not known | NVD |
| Aug 21, 2026 | CVE-2026-73570 |
Synacor Zimbra Collaboration Suite (ZCS) | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | Aug 24 | Not known | Our story · NVD |
| Aug 20, 2026 | CVE-2026-72530 |
TrueConf Server | TrueConf Server Code Injection Vulnerability | Sep 3 | Not known | NVD |
| Aug 20, 2026 | CVE-2026-72529 |
TrueConf Server | TrueConf Server Missing Authentication for Critical Function Vulnerability | Aug 23 | Not known | NVD |
| Aug 19, 2026 | CVE-2026-64849 |
MLflow MLflow | MLflow Server-Side Request Forgery Vulnerability | Sep 2 | Not known | NVD |
| Aug 18, 2026 | CVE-2026-65400 |
Apple macOS | Apple macOS Improper Authentication Vulnerability | Aug 21 | Not known | NVD |
| Aug 18, 2026 | CVE-2026-59310 |
Broadcom VMware vCenter | Broadcom VMware vCenter Path Traversal Vulnerability | Aug 21 | Yes | NVD |
| Aug 18, 2026 | CVE-2026-55040 |
Microsoft SharePoint | Microsoft SharePoint Weak Authentication Vulnerability | Aug 21 | Not known | NVD |
| Aug 18, 2026 | CVE-2026-33824 |
Microsoft Internet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | Aug 21 | Not known | NVD |
| Aug 17, 2026 | CVE-2025-62593 |
Ray-Project Ray | Ray-Project Ray Code Injection Vulnerability | Aug 20 | Not known | NVD |
| Aug 11, 2026 | CVE-2026-72898 |
Metabase Metabase | Metabase SQL Injection Vulnerability | Aug 14 | Not known | NVD |
| Aug 11, 2026 | CVE-2026-68820 |
Microsoft Windows Ancillary Function Driver for WinSock | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | Aug 25 | Not known | NVD |
| Aug 11, 2026 | CVE-2026-20349 |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | Aug 14 | Not known | NVD |
| Aug 7, 2026 | CVE-2026-8037 |
Progress LoadMaster | Progress LoadMaster Command Injection Vulnerability | Aug 10 | Not known | NVD |
| Aug 5, 2026 | CVE-2026-63077 |
JetBrains TeamCity | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | Aug 8 | Yes | NVD |
| Aug 4, 2026 | CVE-2026-9198 |
IBM Langflow | IBM Langflow Code Injection Vulnerability | Aug 7 | Not known | NVD |
| Aug 4, 2026 | CVE-2026-34486 |
Apache Tomcat | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | Aug 7 | Not known | NVD |
| Aug 4, 2026 | CVE-2026-18556 |
N-able N-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | Aug 7 | Not known | NVD |
| Aug 3, 2026 | CVE-2026-18577 |
N-able N-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | Aug 6 | Not known | NVD |
| Jul 29, 2026 | CVE-2026-20316 |
Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | Aug 1 | Yes | NVD |
| Jul 27, 2026 | CVE-2026-16812 |
Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | Jul 30 | Not known | NVD |
| Jul 27, 2026 | CVE-2025-68686 |
Fortinet FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Aug 10 | Not known | NVD |
| Jul 22, 2026 | CVE-2026-50522 |
Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Jul 25 | Not known | NVD |
| Jul 22, 2026 | CVE-2026-16232 |
Check Point SmartConsole | Check Point SmartConsole Improper Authentication Vulnerability | Jul 25 | Not known | NVD |
| Jul 21, 2026 | CVE-2026-63030 |
WordPress Core | WordPress Core Interpretation Conflict Vulnerability | Jul 24 | Not known | NVD |
| Jul 21, 2026 | CVE-2026-60137 |
WordPress Core | WordPress Core SQL Injection Vulnerability | Aug 4 | Not known | NVD |
| Jul 21, 2026 | CVE-2026-0770 |
Langflow Langflow | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | Jul 24 | Not known | NVD |
| Jul 21, 2026 | CVE-2021-27137 |
DD-WRT DD-WRT | DD-WRT Stack-Based Buffer Overflow Vulnerability | Jul 24 | Not known | NVD |
| Jul 16, 2026 | CVE-2026-58644 |
Microsoft SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Jul 19 | Not known | NVD |
| Jul 16, 2026 | CVE-2026-39808 |
Fortinet FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | Jul 19 | Not known | NVD |
| Jul 16, 2026 | CVE-2026-25089 |
Fortinet FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | Jul 19 | Not known | NVD |
| Jul 15, 2026 | CVE-2026-46817 |
Oracle E-Business Suite | Oracle E-Business Suite Improper Privilege Management Vulnerability | Jul 18 | Not known | NVD |
| Jul 15, 2026 | CVE-2023-4346 |
KNX Association KNX Protocol Connection Authorization Option 1 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | Jul 29 | Not known | NVD |
| Jul 14, 2026 | CVE-2026-56164 |
Microsoft SharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | Jul 17 | Not known | NVD |
| Jul 14, 2026 | CVE-2026-56155 |
Microsoft Active Directory Federation Services | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | Jul 28 | Not known | NVD |
| Jul 14, 2026 | CVE-2026-15410 |
SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | Jul 17 | Yes | NVD |
| Jul 14, 2026 | CVE-2026-15409 |
SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Jul 17 | Yes | NVD |
| Jul 13, 2026 | CVE-2008-4128 |
Cisco IOS | Cisco IOS Cross-Site Request Forgery Vulnerability | Jul 16 | Not known | NVD |
| Jul 10, 2026 | CVE-2026-56291 |
Balbooa Forms | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | Jul 13 | Not known | NVD |
| Jul 10, 2026 | CVE-2026-48939 |
iCagenda iCagenda | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | Jul 13 | Not known | NVD |
| Jul 7, 2026 | CVE-2026-56290 |
Joomlack Page Builder | Joomlack Page Builder Improper Access Control Vulnerability | Jul 10 | Not known | NVD |
| Jul 7, 2026 | CVE-2026-55255 |
Langflow Langflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | Jul 10 | Not known | NVD |
| Jul 7, 2026 | CVE-2026-48908 |
JoomShaper SP Page Builder | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | Jul 10 | Not known | NVD |
| Jul 7, 2026 | CVE-2026-48282 |
Adobe ColdFusion | Adobe ColdFusion Path Traversal Vulnerability | Jul 10 | Not known | NVD |
| Jul 1, 2026 | CVE-2026-45659 |
Microsoft SharePoint Server | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | Jul 4 | Yes | NVD |
| Jun 29, 2026 | CVE-2026-48558 |
SimpleHelp SimpleHelp | SimpleHelp Authentication Bypass Vulnerability | Jul 2 | Not known | NVD |
| Jun 25, 2026 | CVE-2026-20230 |
Cisco Unified Communications Manager | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | Jun 28 | Not known | NVD |
| Jun 25, 2026 | CVE-2026-12569 |
PTC Windchill and FlexPLM | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | Jun 28 | Yes | NVD |
| Jun 23, 2026 | CVE-2026-34910 |
Ubiquiti UniFi OS | Ubiquiti UniFi OS Improper Input Validation Vulnerability | Jun 26 | Not known | NVD |
| Jun 23, 2026 | CVE-2026-34909 |
Ubiquiti UniFi OS | Ubiquiti UniFi OS Path Traversal Vulnerability | Jun 26 | Not known | NVD |
| Jun 23, 2026 | CVE-2026-34908 |
Ubiquiti UniFi OS | Ubiquiti UniFi OS Improper Access Control Vulnerability | Jun 26 | Not known | NVD |
| Jun 23, 2026 | CVE-2025-67038 |
Lantronix EDS5000 | Lantronix EDS5000 Code Injection Vulnerability | Jun 26 | Not known | NVD |
| Jun 18, 2026 | CVE-2026-20253 |
Splunk Enterprise | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | Jun 21 | Not known | NVD |
| Jun 16, 2026 | CVE-2026-48907 |
Widget Factory Joomla Content Editor | Widget Factory Joomla Content Editor Improper Access Control Vulnerability | Jun 19 | Not known | NVD |
| Jun 15, 2026 | CVE-2026-54420 |
LiteSpeed cPanel Plugin | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | Jun 18 | Not known | NVD |
| Jun 15, 2026 | CVE-2026-20262 |
Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | Jun 29 | Not known | NVD |
| Jun 12, 2026 | CVE-2026-35273 |
Oracle PeopleSoft Enterprise PeopleTools | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | Jun 15 | Yes | NVD |
| Jun 11, 2026 | CVE-2026-10520 |
Ivanti Sentry | Ivanti Sentry OS Command Injection Vulnerability | Jun 14 | Not known | NVD |
| Jun 9, 2026 | CVE-2026-7473 |
Arista Extensible Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | Jun 23 | Not known | NVD |
| Jun 9, 2026 | CVE-2026-20245 |
Cisco Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | Jun 23 | Not known | NVD |
| Jun 9, 2026 | CVE-2026-11645 |
Google Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Jun 23 | Not known | NVD |
| Jun 8, 2026 | CVE-2026-50751 |
Check Point Security Gateway | Check Point Security Gateway Improper Authentication Vulnerability | Jun 11 | Yes | NVD |
| Jun 8, 2026 | CVE-2026-42271 |
BerriAI LiteLLM | BerriAI LiteLLM Command Injection Vulnerability | Jun 22 | Not known | Our story · NVD |
| Jun 5, 2026 | CVE-2026-28318 |
SolarWinds Serv-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | Jun 19 | Not known | NVD |
| Jun 3, 2026 | CVE-2026-45247 |
Mirasvit Mirasvit Full Page Cache Warmer | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | Jun 6 | Not known | NVD |
| Jun 2, 2026 | CVE-2025-48595 |
Android Framework | Android Framework Integer Overflow Vulnerability | Jun 5 | Not known | NVD |
| Jun 2, 2026 | CVE-2022-0492 |
Linux Kernel | Linux Kernel Improper Authentication Vulnerability | Jun 5 | Not known | NVD |
| Jun 1, 2026 | CVE-2024-21182 |
Oracle WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | Jun 4 | Not known | NVD |
| May 29, 2026 | CVE-2026-0257 |
Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | Jun 1 | Yes | NVD |
| May 27, 2026 | CVE-2026-8398 |
Daemon Daemon Tools Lite | Daemon Tools Lite Embedded Malicious Code Vulnerability | May 30 | Not known | NVD |
| May 27, 2026 | CVE-2026-48027 |
Nx Nx Console | Nx Console Embedded Malicious Code Vulnerability | Jun 10 | Yes | NVD |
| May 27, 2026 | CVE-2026-45321 |
TanStack TanStack | TanStack Unspecified Vulnerability | Jun 10 | Yes | NVD |
| May 26, 2026 | CVE-2026-48172 |
LiteSpeed cPanel Plugin | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | May 29 | Not known | NVD |
| May 22, 2026 | CVE-2026-9082 |
Drupal Core | Drupal Core SQL Injection Vulnerability | May 27 | Not known | NVD |
| May 21, 2026 | CVE-2026-34926 |
Trend Micro Apex One | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | Jun 4 | Not known | NVD |
| May 21, 2026 | CVE-2025-34291 |
Langflow Langflow | Langflow Origin Validation Error Vulnerability | Jun 4 | Not known | NVD |
| May 20, 2026 | CVE-2026-45498 |
Microsoft Defender | Microsoft Defender Denial of Service Vulnerability | Jun 3 | Not known | NVD |
Showing the latest 150 of 1,748. The full catalog: CISA KEV. "Patch by" is the deadline CISA sets for US federal agencies; everyone else should treat it as a ceiling.
Every alert and the daily Vulnerability Watch → · Top 10 vulnerabilities of the week →