Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-18577 | N-able N-central | 2026-08-03 | 2026-08-06 | ||
| CVE-2026-18556 | N-able N-central | 2026-08-04 | 2026-08-07 | ||
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 2026-07-27 | 2026-07-30 | ||
| CVE-2026-16232 | Check Point SmartConsole | 2026-07-22 | 2026-07-25 | ||
| CVE-2026-1615 | Not specified | 9.8critical | — | — | |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | 2026-03-23 | ||
| CVE-2026-1524 | Neo4j Neo4j | 9.8critical | — | — | |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | 2026-04-11 | ||
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 2026-02-01 | ||
| CVE-2026-11645 | Google Chromium V8 | 2026-06-09 | 2026-06-23 | ||
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | 2026-06-14 | ||
| CVE-2026-0770 | Langflow Langflow | 2026-07-21 | 2026-07-24 | ||
| CVE-2026-0545 | Lfprojects Mlflow | 9.8critical | — | — | |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 2026-05-06 | 2026-05-09 | ||
| CVE-2025-9377 | TP-Link Multiple Routers | 2025-09-03 | 2025-09-24 | ||
| CVE-2025-9242 | WatchGuard Firebox | 2025-11-12 | 2025-12-03 | ||
| CVE-2025-8876 | N-able N-Central | 2025-08-13 | 2025-08-20 | ||
| CVE-2025-8875 | N-able N-Central | 2025-08-13 | 2025-08-20 | ||
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 2026-02-02 | ||
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 2025-08-28 | ||
| CVE-2025-68794 | Not specified | 9.8critical | — | — | |
| CVE-2025-68686 | Fortinet FortiOS | 2026-07-27 | 2026-08-10 | ||
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 2026-02-12 | ||
| CVE-2025-68613 | n8n n8n | 2026-03-11 | 2026-03-25 | ||
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 2026-03-13 |