Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1705
- On the catalogue
- 10
- Added in 7 days
- 7
- Due within 7 days
- 360
- Used in ransomware
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-72658 | Elastic Kibana | 7.3high | Not scored | — | — | |
| CVE-2026-72555 | Not specified | 8.1high | Not scored | — | — | |
| CVE-2026-71383 | Adobe Coldfusion | 7.3high | Not scored | — | — | |
| CVE-2026-71320 | Not specified | 8.1high | Not scored | — | — | |
| CVE-2026-71312 | Not specified | 8.0high | Not scored | — | — | |
| CVE-2026-71285 | Not specified | 8.1high | Not scored | — | — | |
| CVE-2026-71279 | Not specified | 8.0high | Not scored | — | — | |
| CVE-2026-71239 | Not specified | 8.1high | Not scored | — | — | |
| CVE-2026-71143 | Oracle Communications Unified Inventory Management | 7.4high | Not scored | — | — | |
| CVE-2026-71138 | Oracle Vm Virtualbox | 7.3high | Not scored | — | — | |
| CVE-2026-71136 | Oracle Vm Virtualbox | 7.3high | Not scored | — | — | |
| CVE-2026-71094 | Oracle Business Intelligence | 7.3high | Not scored | — | — | |
| CVE-2026-71009 | Oracle Commerce Experience Manager | 7.4high | Not scored | — | — | |
| CVE-2026-70898 | Oracle Hyperion Data Relationship Management | 7.4high | Not scored | — | — | |
| CVE-2026-70823 | Oracle Hyperion Financial Management | 7.4high | Not scored | — | — | |
| CVE-2026-70800 | Oracle Service Delivery Platform Number Portability | 7.3high | Not scored | — | — | |
| CVE-2026-70790 | Oracle Telecommunications Billing Integrator | 7.4high | Not scored | — | — | |
| CVE-2026-70783 | Oracle Service Contracts | 7.4high | Not scored | — | — | |
| CVE-2026-70779 | Oracle Isupplier Portal | 7.4high | Not scored | — | — | |
| CVE-2026-70734 | Oracle Autonomous Health Framework | 7.4high | Not scored | — | — | |
| CVE-2026-70699 | Oracle Payments | 7.4high | Not scored | — | — | |
| CVE-2026-70672 | Oracle Reports Developer | 7.4high | Not scored | — | — | |
| CVE-2026-70634 | Timescale Timescaledb | 8.1high | Not scored | — | — | |
| CVE-2026-70494 | Not specified | 8.1high | Not scored | — | — | |
| CVE-2026-70482 | Not specified | 8.1high | Not scored | — | — |