Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1699
On the catalogue
5
Added in 7 days
7
Due within 7 days
358
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-28356Not specified7.5high
CVE-2026-27889Linuxfoundation Nats-Server7.5high
CVE-2026-27282Adobe Coldfusion7.5high
CVE-2026-26278Naturalintelligence Fast-Xml-Parser7.5high
CVE-2026-2614Lfprojects Mlflow7.5high
CVE-2026-23490Pyasn1 Pyasn17.5high
CVE-2026-21728Grafana Tempo7.5high
CVE-2026-21555Not specified7.5high
CVE-2026-21554Not specified7.5high
CVE-2026-21553Not specified7.5high
CVE-2026-21552Not specified7.5high
CVE-2026-21551Not specified7.5high
CVE-2026-21550Not specified7.5high
CVE-2026-21549Not specified7.5high
CVE-2026-21548Not specified7.5high
CVE-2026-21309Adobe Commerce7.5high
CVE-2026-21289Adobe Commerce B2b7.5high
CVE-2026-19082Not specified7.5high
CVE-2026-18946Not specified7.5high
CVE-2026-18470Not specified7.5high
CVE-2026-18464Not specified7.5high
CVE-2026-18357Not specified7.5high
CVE-2026-18050Not specified7.5high
CVE-2026-18032Not specified7.5high
CVE-2026-17542Not specified7.5high
Page 139 of 206 · 5143 entriesPreviousNext