Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-21660 | Johnsoncontrols Frick Controls Quantum Hd Firmware | 9.8critical | — | — | |
| CVE-2026-21643 | Fortinet FortiClient EMS | 2026-04-13 | 2026-04-16 | ||
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 2026-02-16 | ||
| CVE-2026-21385 | Qualcomm Multiple Chipsets | 2026-03-03 | 2026-03-24 | ||
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 2026-03-21 | ||
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 2026-02-03 | ||
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 2026-03-05 | ||
| CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | 2026-07-29 | 2026-08-01 | ||
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | 2026-06-15 | 2026-06-29 | ||
| CVE-2026-20253 | Splunk Enterprise | 2026-06-18 | 2026-06-21 | ||
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | 2026-06-09 | 2026-06-23 | ||
| CVE-2026-20230 | Cisco Unified Communications Manager | 2026-06-25 | 2026-06-28 | ||
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 2026-05-14 | 2026-05-17 | ||
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | ||
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | ||
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | 2026-02-25 | 2026-02-27 | ||
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | 2026-04-20 | 2026-04-23 | ||
| CVE-2026-20079 | Not specified | 10.0critical | — | — | |
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 2026-02-11 |