Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-35616 | Fortinet FortiClient EMS | 2026-04-06 | 2026-04-09 | ||
| CVE-2026-3502 | TrueConf Client | 2026-04-02 | 2026-04-16 | ||
| CVE-2026-34926 | Trend Micro Apex One | 2026-05-21 | 2026-06-04 | ||
| CVE-2026-34910 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 | ||
| CVE-2026-34909 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 | ||
| CVE-2026-34908 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 | ||
| CVE-2026-34486 | Apache Tomcat | 2026-08-04 | 2026-08-07 | ||
| CVE-2026-34197 | Apache ActiveMQ | 2026-04-16 | 2026-04-30 | ||
| CVE-2026-33815 | Jackc Pgx | 9.8critical | — | — | |
| CVE-2026-33634 | Aquasecurity Trivy | 2026-03-26 | 2026-04-09 | ||
| CVE-2026-33278 | Nlnetlabs Unbound | 9.8critical | — | — | |
| CVE-2026-33017 | Langflow Langflow | 2026-03-25 | 2026-04-08 | ||
| CVE-2026-32202 | Microsoft Windows | 2026-04-28 | 2026-05-12 | ||
| CVE-2026-32201 | Microsoft SharePoint Server | 2026-04-14 | 2026-04-28 | ||
| CVE-2026-31431 | Linux Kernel | 2026-05-01 | 2026-05-15 | ||
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | 2026-04-02 | ||
| CVE-2026-28318 | SolarWinds Serv-U | 2026-06-05 | 2026-06-19 | ||
| CVE-2026-25108 | Soliton Systems K.K FileZen | 2026-02-24 | 2026-03-17 | ||
| CVE-2026-25089 | Fortinet FortiSandbox | 2026-07-16 | 2026-07-19 | ||
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 2026-01-30 | ||
| CVE-2026-2441 | Google Chromium | 2026-02-17 | 2026-03-10 | ||
| CVE-2026-24061 | GNU InetUtils | 2026-01-26 | 2026-02-16 | ||
| CVE-2026-22797 | Not specified | 9.9critical | — | — | |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | 2026-02-21 | ||
| CVE-2026-22719 | Broadcom VMware Aria Operations | 2026-03-03 | 2026-03-24 |