Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2018-0254 | Cisco Secure Firewall Threat Defense | 5.3medium | — | — | |
| CVE-2018-0138 | Cisco Secure Firewall Threat Defense | 5.3medium | — | — | |
| CVE-2017-3822 | Cisco Secure Firewall Threat Defense | 5.3medium | — | — | |
| CVE-2017-3806 | Cisco Secure Firewall Threat Defense | 5.3medium | — | — | |
| CVE-2025-0620 | Samba Samba | 4.9medium | — | — | |
| CVE-2024-11736 | Not specified | 4.9medium | — | — | |
| CVE-2021-34485 | Microsoft .Net | 5.0medium | — | — | |
| CVE-2020-3308 | Cisco Secure Firewall Threat Defense | 4.9medium | — | — | |
| CVE-2019-1961 | Cisco Enterprise Nfv Infrastructure Software | 4.9medium | — | — | |
| CVE-2026-52902 | Not specified | 4.7medium | — | — | |
| CVE-2026-47933 | Adobe Coldfusion | 4.8medium | — | — | |
| CVE-2026-42041 | Axios Axios | 4.8medium | — | — | |
| CVE-2026-41226 | Not specified | 4.7medium | — | — | |
| CVE-2026-34694 | Adobe Experience Manager | 4.8medium | — | — | |
| CVE-2026-34658 | Adobe Commerce | 4.8medium | — | — | |
| CVE-2026-34655 | Adobe Commerce | 4.8medium | — | — | |
| CVE-2026-21359 | Adobe Commerce | 4.7medium | — | — | |
| CVE-2026-21291 | Adobe Magento | 4.8medium | — | — | |
| CVE-2026-20090 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2026-20089 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2026-20088 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2026-20087 | Cisco Enterprise Nfv Infrastructure Software | 4.8medium | — | — | |
| CVE-2024-9666 | Not specified | 4.7medium | — | — | |
| CVE-2021-34791 | Cisco Adaptive Security Appliance | 4.7medium | — | — | |
| CVE-2021-34790 | Cisco Adaptive Security Appliance | 4.7medium | — | — |