Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 2026-07-25 | ||
| CVE-2026-48939 | iCagenda iCagenda | 2026-07-10 | 2026-07-13 | ||
| CVE-2026-48908 | JoomShaper SP Page Builder | 2026-07-07 | 2026-07-10 | ||
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 2026-06-16 | 2026-06-19 | ||
| CVE-2026-48558 | SimpleHelp SimpleHelp | 2026-06-29 | 2026-07-02 | ||
| CVE-2026-48303 | Adobe Campaign | 10.0critical | — | — | |
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 2026-07-10 | ||
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 2026-05-26 | 2026-05-29 | ||
| CVE-2026-47938 | Adobe Campaign | 10.0critical | — | — | |
| CVE-2026-47117 | Not specified | 9.8critical | — | — | |
| CVE-2026-47103 | Fgmacedo Python Statemachine | 9.8critical | — | — | |
| CVE-2026-46859 | Oracle Agile Product Lifecycle Management | 9.8critical | — | — | |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 2026-07-18 | ||
| CVE-2026-45498 | Microsoft Defender | 2026-05-20 | 2026-06-03 | ||
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 2026-06-03 | 2026-06-06 | ||
| CVE-2026-43125 | Linux Linux Kernel | 9.8critical | — | — | |
| CVE-2026-42897 | Microsoft Microsoft | 2026-05-15 | 2026-05-29 | ||
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | 2026-06-22 | ||
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | 2026-05-11 | ||
| CVE-2026-41586 | Hyperledger Fabric | 9.8critical | — | — | |
| CVE-2026-41091 | Microsoft Defender | 2026-05-20 | 2026-06-03 | ||
| CVE-2026-39987 | Marimo Marimo | 2026-04-23 | 2026-05-07 | ||
| CVE-2026-39808 | Fortinet FortiSandbox | 2026-07-16 | 2026-07-19 | ||
| CVE-2026-3910 | Google Chromium V8 | 2026-03-13 | 2026-03-27 | ||
| CVE-2026-3909 | Google Skia | 2026-03-13 | 2026-03-27 |