Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1699
On the catalogue
5
Added in 7 days
6
Due within 7 days
358
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-39458F5 Big-Ip Access Policy Manager7.5high
CVE-2026-39363Vitejs Vite7.5high
CVE-2026-34713Adobe C2pa7.5high
CVE-2026-34712Adobe C2pa7.5high
CVE-2026-34711Adobe C2pa7.5high
CVE-2026-34665Adobe C2pa7.5high
CVE-2026-34652Adobe Commerce7.5high
CVE-2026-34651Adobe Commerce7.5high
CVE-2026-34650Adobe Commerce7.5high
CVE-2026-34649Adobe Commerce7.5high
CVE-2026-34648Adobe Commerce7.5high
CVE-2026-34646Adobe Commerce7.5high
CVE-2026-34645Adobe Commerce7.5high
CVE-2026-34619Adobe Coldfusion7.7high
CVE-2026-34070Langchain Langchain Core7.5high
CVE-2026-33487Goxmldsig Project Goxmldsig7.5high
CVE-2026-33218Linuxfoundation Nats-Server7.5high
CVE-2026-33079Not specified7.5high
CVE-2026-32286Jackc Pgproto37.5high
CVE-2026-29785Linuxfoundation Nats-Server7.5high
CVE-2026-28356Not specified7.5high
CVE-2026-27889Linuxfoundation Nats-Server7.5high
CVE-2026-27282Adobe Coldfusion7.5high
CVE-2026-26278Naturalintelligence Fast-Xml-Parser7.5high
CVE-2026-2614Lfprojects Mlflow7.5high
Page 148 of 226 · 5643 entriesPreviousNext