Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1705
- On the catalogue
- 10
- Added in 7 days
- 5
- Due within 7 days
- 360
- Used in ransomware
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-61792 | Not specified | 7.7high | Not scored | — | — | |
| CVE-2026-61704 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-61686 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-61617 | Not specified | 7.7high | Not scored | — | — | |
| CVE-2026-61397 | Apache Cloudstack | 7.5high | Not scored | — | — | |
| CVE-2026-61331 | Oracle E-Business Suite | 7.7high | Not scored | — | — | |
| CVE-2026-61296 | Oracle Enterprise Asset Management | 7.6high | Not scored | — | — | |
| CVE-2026-61227 | Oracle Webcenter Portal | 7.6high | Not scored | — | — | |
| CVE-2026-61199 | Oracle Webcenter Portal | 7.7high | Not scored | — | — | |
| CVE-2026-60983 | Oracle Webcenter Content | 7.7high | Not scored | — | — | |
| CVE-2026-60956 | Oracle Jd Edwards Enterpriseone Us Payroll | 7.5high | Not scored | — | — | |
| CVE-2026-60909 | Oracle Webcenter Content | 7.6high | Not scored | — | — | |
| CVE-2026-60906 | Oracle Webcenter Content | 7.5high | Not scored | — | — | |
| CVE-2026-60808 | Oracle Siebel Apps - Marketing | 7.5high | Not scored | — | — | |
| CVE-2026-60769 | Oracle General Ledger | 7.5high | Not scored | — | — | |
| CVE-2026-60765 | Oracle Siebel Apps - Marketing | 7.5high | Not scored | — | — | |
| CVE-2026-60748 | Oracle General Ledger | 7.6high | Not scored | — | — | |
| CVE-2026-60590 | Oracle Hospitality Simphony | 7.5high | Not scored | — | — | |
| CVE-2026-60393 | Oracle Hyperion Infrastructure Technology | 7.5high | Not scored | — | — | |
| CVE-2026-60391 | Oracle Hyperion Financial Management | 7.5high | Not scored | — | — | |
| CVE-2026-59902 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-59780 | Apache Cloudstack | 7.5high | Not scored | — | — | |
| CVE-2026-59765 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-59657 | Apache Cloudstack | 7.5high | Not scored | — | — | |
| CVE-2026-59655 | Apache Cloudstack | 7.5high | Not scored | — | — |