Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-55040Microsoft SharePoint2026-08-182026-08-21
CVE-2026-53362Linux Kernel2026-08-272026-08-30
CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions2026-08-182026-08-21
CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)2026-08-112026-08-14
CVE-2025-62593Ray-Project Ray2026-08-172026-08-20
CVE-2026-9198IBM Langflow2026-08-042026-08-07
CVE-2026-9082Drupal Core2026-05-222026-05-27
CVE-2026-8398Daemon Daemon Tools Lite2026-05-272026-05-30
CVE-2026-8037Progress LoadMaster2026-08-072026-08-10
CVE-2026-7473Arista Extensible Operating System2026-06-092026-06-23
CVE-2026-7374Not specified9.9critical
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM)2026-05-072026-05-10
CVE-2026-63077JetBrains TeamCity2026-08-052026-08-08
CVE-2026-63030WordPress Core2026-07-212026-07-24
CVE-2026-60137WordPress Core2026-07-212026-08-04
CVE-2026-58644Microsoft SharePoint2026-07-162026-07-19
CVE-2026-56291Balbooa Forms2026-07-102026-07-13
CVE-2026-56290Joomlack Page Builder2026-07-072026-07-10
CVE-2026-56164Microsoft SharePoint Server2026-07-142026-07-17
CVE-2026-56155Microsoft Active Directory Federation Services2026-07-142026-07-28
CVE-2026-56121Not specified9.8critical
CVE-2026-55255Langflow Langflow2026-07-072026-07-10
CVE-2026-54420LiteSpeed cPanel Plugin2026-06-152026-06-18
CVE-2026-52924Linux Linux Kernel9.8critical
CVE-2026-5281Google Dawn2026-04-012026-04-15
Page 17 of 114 · 2839 entriesPreviousNext