Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1705
- On the catalogue
- 10
- Added in 7 days
- 7
- Due within 7 days
- 360
- Used in ransomware
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-14163 | Octopus Octopus Server | 7.5high | Not scored | — | — | |
| CVE-2026-13610 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-12984 | Not specified | 8.2high | Not scored | — | — | |
| CVE-2026-11810 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-10849 | Zephyrproject Zephyr | 8.2high | Not scored | — | — | |
| CVE-2026-0966 | Libssh Libssh | 8.2high | Not scored | — | — | |
| CVE-2026-0301 | Paloaltonetworks Cloud Ngfw | 7.5high | Not scored | — | — | |
| CVE-2025-68825 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2025-61164 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2025-61162 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2025-6032 | Not specified | 8.3high | Not scored | — | — | |
| CVE-2025-59327 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2025-59325 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2025-59322 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2025-36255 | Ibm Ds8900f Firmware | 7.5high | Not scored | — | — | |
| CVE-2025-2609 | Magnussolution Magnusbilling | 8.2high | Not scored | — | — | |
| CVE-2024-7837 | Not specified | 8.2high | Not scored | — | — | |
| CVE-2024-52011 | Not specified | 8.3high | Not scored | — | — | |
| CVE-2024-3727 | Not specified | 8.3high | Not scored | — | — | |
| CVE-2024-13942 | Not specified | 7.6high | Not scored | — | — | |
| CVE-2022-24069 | Insyde Insydeh2o | 8.2high | Not scored | — | — | |
| CVE-2022-24031 | Insyde Insydeh2o | 8.2high | Not scored | — | — | |
| CVE-2021-45971 | Insyde Insydeh2o | 8.2high | Not scored | — | — | |
| CVE-2021-45970 | Insyde Insydeh2o | 8.2high | Not scored | — | — | |
| CVE-2021-45969 | Insyde Insydeh2o | 8.2high | Not scored | — | — |