Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1699
- On the catalogue
- 5
- Added in 7 days
- 7
- Due within 7 days
- 355
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-57031 | Juniper Junos | 4.7medium | — | — | |
| CVE-2026-54344 | Tooljet Tooljet | 4.7medium | — | — | |
| CVE-2026-52902 | Not specified | 4.7medium | — | — | |
| CVE-2026-47999 | Adobe Commerce | 4.8medium | — | — | |
| CVE-2026-47933 | Adobe Coldfusion | 4.8medium | — | — | |
| CVE-2026-42041 | Axios Axios | 4.8medium | — | — | |
| CVE-2026-41226 | Not specified | 4.7medium | — | — | |
| CVE-2026-34694 | Adobe Experience Manager | 4.8medium | — | — | |
| CVE-2026-34658 | Adobe Commerce | 4.8medium | — | — | |
| CVE-2026-34655 | Adobe Commerce | 4.8medium | — | — | |
| CVE-2026-26081 | Haproxy Haproxy | 4.8medium | — | — | |
| CVE-2026-21359 | Adobe Commerce | 4.7medium | — | — | |
| CVE-2026-21291 | Adobe Magento | 4.8medium | — | — | |
| CVE-2026-20090 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2026-20089 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2026-20088 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2026-20087 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2026-18321 | Not specified | 4.7medium | — | — | |
| CVE-2026-13377 | Watchguard Fireware | 4.8medium | — | — | |
| CVE-2026-13376 | Watchguard Fireware | 4.8medium | — | — | |
| CVE-2026-13375 | Watchguard Fireware | 4.8medium | — | — | |
| CVE-2026-13374 | Watchguard Fireware | 4.8medium | — | — | |
| CVE-2026-13373 | Watchguard Fireware | 4.8medium | — | — | |
| CVE-2025-15675 | Not specified | 4.8medium | — | — | |
| CVE-2025-15669 | Not specified | 4.8medium | — | — |