Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | 2026-08-21 | ||
| CVE-2026-53362 | Linux Kernel | 2026-08-27 | 2026-08-30 | ||
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | 2026-08-21 | ||
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 2026-08-14 | ||
| CVE-2025-62593 | Ray-Project Ray | 2026-08-17 | 2026-08-20 | ||
| CVE-2026-9198 | IBM Langflow | 2026-08-04 | 2026-08-07 | ||
| CVE-2026-9082 | Drupal Core | 2026-05-22 | 2026-05-27 | ||
| CVE-2026-8398 | Daemon Daemon Tools Lite | 2026-05-27 | 2026-05-30 | ||
| CVE-2026-8037 | Progress LoadMaster | 2026-08-07 | 2026-08-10 | ||
| CVE-2026-7473 | Arista Extensible Operating System | 2026-06-09 | 2026-06-23 | ||
| CVE-2026-7374 | Not specified | 9.9critical | — | — | |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2026-05-10 | ||
| CVE-2026-63077 | JetBrains TeamCity | 2026-08-05 | 2026-08-08 | ||
| CVE-2026-63030 | WordPress Core | 2026-07-21 | 2026-07-24 | ||
| CVE-2026-60137 | WordPress Core | 2026-07-21 | 2026-08-04 | ||
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 2026-07-19 | ||
| CVE-2026-56291 | Balbooa Forms | 2026-07-10 | 2026-07-13 | ||
| CVE-2026-56290 | Joomlack Page Builder | 2026-07-07 | 2026-07-10 | ||
| CVE-2026-56164 | Microsoft SharePoint Server | 2026-07-14 | 2026-07-17 | ||
| CVE-2026-56155 | Microsoft Active Directory Federation Services | 2026-07-14 | 2026-07-28 | ||
| CVE-2026-56121 | Not specified | 9.8critical | — | — | |
| CVE-2026-55255 | Langflow Langflow | 2026-07-07 | 2026-07-10 | ||
| CVE-2026-54420 | LiteSpeed cPanel Plugin | 2026-06-15 | 2026-06-18 | ||
| CVE-2026-52924 | Linux Linux Kernel | 9.8critical | — | — | |
| CVE-2026-5281 | Google Dawn | 2026-04-01 | 2026-04-15 |