Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1705
- On the catalogue
- 10
- Added in 7 days
- 5
- Due within 7 days
- 360
- Used in ransomware
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2021-34469 | Microsoft 365 Apps | 8.2high | 3.7% · top 11% | — | — | |
| CVE-2021-33767 | Microsoft Open Enclave Software Development Kit | 8.2high | under 1% · top 42% | — | — | |
| CVE-2021-33627 | Insyde Insydeh2o | 8.2high | under 1% · top 74% | — | — | |
| CVE-2021-2351 | Oracle Advanced Networking Option | 8.3high | 2.4% · top 17% | — | — | |
| CVE-2020-37267 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2020-3514 | Cisco Secure Firewall Management Center | 8.2high | under 1% · top 69% | — | — | |
| CVE-2019-25766 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2019-12674 | Cisco Secure Firewall Threat Defense | 8.2high | under 1% · top 46% | — | — | |
| CVE-2018-0453 | Cisco Secure Firewall Threat Defense | 8.2high | under 1% · top 65% | — | — | |
| CVE-2026-9277 | Not specified | 8.1high | Not scored | — | — | |
| CVE-2026-9256 | F5 Nginx Open Source | 8.1high | Not scored | — | — | |
| CVE-2026-86098 | Not specified | 7.4high | Not scored | — | — | |
| CVE-2026-85512 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85403 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85398 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85397 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85380 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85379 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85225 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85208 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85187 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85138 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85137 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-85105 | Not specified | 7.3high | Not scored | — | — | |
| CVE-2026-84841 | Not specified | 7.3high | Not scored | — | — |