Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-67038 | Lantronix EDS5000 | 2026-06-23 | 2026-06-26 | ||
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 2025-12-29 | ||
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 2026-04-01 | ||
| CVE-2025-6558 | Google Chromium | 2025-07-22 | 2025-08-12 | ||
| CVE-2025-6554 | Google Chromium V8 | 2025-07-02 | 2025-07-23 | ||
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | 2025-07-21 | ||
| CVE-2025-64446 | Fortinet FortiWeb | 2025-11-14 | 2025-11-21 | ||
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 2026-02-24 | ||
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2025-12-30 | ||
| CVE-2025-62215 | Microsoft Windows | 2025-11-12 | 2025-12-03 | ||
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 2025-12-30 | ||
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 2025-11-18 | ||
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 2025-11-18 | ||
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager | 2025-10-22 | 2025-11-12 | ||
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 2025-12-12 | ||
| CVE-2025-59718 | Fortinet Multiple Products | 2025-12-16 | 2025-12-23 | ||
| CVE-2025-59695 | Entrust Nshield 5c Firmware | 9.8critical | — | — | |
| CVE-2025-59693 | Entrust Nshield 5c Firmware | 9.8critical | — | — | |
| CVE-2025-59689 | Libraesva Email Security Gateway | 2025-09-29 | 2025-10-20 | ||
| CVE-2025-59374 | ASUS Live Update | 2025-12-17 | 2026-01-07 | ||
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 2025-11-14 | ||
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2025-11-04 | ||
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | 2026-01-01 | ||
| CVE-2025-58034 | Fortinet FortiWeb | 2025-11-18 | 2025-11-25 | ||
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 2025-09-19 |