Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1699
- On the catalogue
- 5
- Added in 7 days
- 6
- Due within 7 days
- 358
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-4134 | Lenovo Software Fix | 7.3high | — | — | |
| CVE-2026-40542 | Apache Httpclient | 7.3high | — | — | |
| CVE-2026-3593 | Isc Bind | 7.4high | — | — | |
| CVE-2026-34647 | Adobe Commerce | 7.4high | — | — | |
| CVE-2026-33247 | Linuxfoundation Nats-Server | 7.4high | — | — | |
| CVE-2026-19783 | Ibm Vios | 6.7medium | — | — | |
| CVE-2026-19697 | Not specified | 6.8medium | — | — | |
| CVE-2026-19615 | Not specified | 6.8medium | — | — | |
| CVE-2026-19321 | Ibm Power System S1122 \(9824-22a\) Firmware | 6.7medium | — | — | |
| CVE-2026-19093 | Not specified | 6.8medium | — | — | |
| CVE-2026-18681 | Ibm Power System S922 \(9009-22g\) Firmware | 6.8medium | — | — | |
| CVE-2026-18636 | Not specified | 6.8medium | — | — | |
| CVE-2026-18202 | Not specified | 6.8medium | — | — | |
| CVE-2026-17007 | Ibm Vios | 6.7medium | — | — | |
| CVE-2026-16959 | Not specified | 6.8medium | — | — | |
| CVE-2026-16951 | Ibm Vios | 6.7medium | — | — | |
| CVE-2026-16944 | Ibm Vios | 6.7medium | — | — | |
| CVE-2026-16260 | Not specified | 6.8medium | — | — | |
| CVE-2026-15253 | Not specified | 6.8medium | — | — | |
| CVE-2026-14838 | Not specified | 7.4high | — | — | |
| CVE-2026-14601 | Not specified | 6.8medium | — | — | |
| CVE-2026-14290 | Not specified | 6.8medium | — | — | |
| CVE-2026-12992 | Redhat Build Of Apicurio Registry | 7.4high | — | — | |
| CVE-2026-11837 | Not specified | 7.3high | — | — | |
| CVE-2022-20866 | Cisco Adaptive Security Appliance Software | 7.4high | — | — |