Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-41674Not specified7.5high
CVE-2026-41673Not specified7.5high
CVE-2026-41672Not specified7.5high
CVE-2026-41602Apache Thrift7.5high
CVE-2026-41292Nlnetlabs Unbound7.5high
CVE-2026-40938Linuxfoundation Tekton Pipelines7.5high
CVE-2026-39458F5 Big-Ip Access Policy Manager7.5high
CVE-2026-39363Vitejs Vite7.5high
CVE-2026-34713Adobe C2pa7.5high
CVE-2026-34712Adobe C2pa7.5high
CVE-2026-34711Adobe C2pa7.5high
CVE-2026-34665Adobe C2pa7.5high
CVE-2026-34652Adobe Commerce7.5high
CVE-2026-34651Adobe Commerce7.5high
CVE-2026-34650Adobe Commerce7.5high
CVE-2026-34649Adobe Commerce7.5high
CVE-2026-34648Adobe Commerce7.5high
CVE-2026-34646Adobe Commerce7.5high
CVE-2026-34645Adobe Commerce7.5high
CVE-2026-34619Adobe Coldfusion7.7high
CVE-2026-34070Langchain Langchain Core7.5high
CVE-2026-33487Goxmldsig Project Goxmldsig7.5high
CVE-2026-33218Linuxfoundation Nats-Server7.5high
CVE-2026-33079Not specified7.5high
CVE-2026-32286Jackc Pgproto37.5high
Page 22 of 28 · 684 entriesPreviousNext