Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-35616Fortinet FortiClient EMS2026-04-062026-04-09
CVE-2026-3502TrueConf Client2026-04-022026-04-16
CVE-2026-34926Trend Micro Apex One2026-05-212026-06-04
CVE-2026-34910Ubiquiti UniFi OS2026-06-232026-06-26
CVE-2026-34909Ubiquiti UniFi OS2026-06-232026-06-26
CVE-2026-34908Ubiquiti UniFi OS2026-06-232026-06-26
CVE-2026-34486Apache Tomcat2026-08-042026-08-07
CVE-2026-34197Apache ActiveMQ2026-04-162026-04-30
CVE-2026-33815Jackc Pgx9.8critical
CVE-2026-33634Aquasecurity Trivy2026-03-262026-04-09
CVE-2026-33278Nlnetlabs Unbound9.8critical
CVE-2026-33017Langflow Langflow2026-03-252026-04-08
CVE-2026-32202Microsoft Windows2026-04-282026-05-12
CVE-2026-32201Microsoft SharePoint Server2026-04-142026-04-28
CVE-2026-31431Linux Kernel2026-05-012026-05-15
CVE-2026-3055Citrix NetScaler2026-03-302026-04-02
CVE-2026-28318SolarWinds Serv-U2026-06-052026-06-19
CVE-2026-25108Soliton Systems K.K FileZen2026-02-242026-03-17
CVE-2026-25089Fortinet FortiSandbox2026-07-162026-07-19
CVE-2026-24858Fortinet Multiple Products2026-01-272026-01-30
CVE-2026-2441Google Chromium2026-02-172026-03-10
CVE-2026-24061GNU InetUtils2026-01-262026-02-16
CVE-2026-22797Not specified9.9critical
CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs)2026-02-182026-02-21
CVE-2026-22719Broadcom VMware Aria Operations2026-03-032026-03-24
Page 19 of 114 · 2839 entriesPreviousNext