Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1705
- On the catalogue
- 10
- Added in 7 days
- 3
- Due within 7 days
- 360
- Used in ransomware
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-71257 | Apache Wicket | 7.5high | Not scored | — | — | |
| CVE-2026-71252 | Not specified | 8.2high | under 1% · top 79% | — | — | |
| CVE-2026-71242 | Not specified | 8.3high | under 1% · top 88% | — | — | |
| CVE-2026-71206 | Not specified | 8.3high | under 1% · top 80% | — | — | |
| CVE-2026-71160 | Oracle Helidon | 7.5high | Not scored | — | — | |
| CVE-2026-71158 | Oracle Helidon | 7.5high | Not scored | — | — | |
| CVE-2026-71153 | Oracle Helidon | 7.5high | Not scored | — | — | |
| CVE-2026-71142 | Oracle Communications Unified Inventory Management | 7.5high | Not scored | — | — | |
| CVE-2026-71141 | Oracle Vm Virtualbox | 7.7high | Not scored | — | — | |
| CVE-2026-71117 | Oracle Hyperion Financial Management | 7.5high | Not scored | — | — | |
| CVE-2026-71116 | Oracle Vm Virtualbox | 7.5high | Not scored | — | — | |
| CVE-2026-71113 | Oracle Vm Virtualbox | 7.5high | Not scored | — | — | |
| CVE-2026-71107 | Oracle Business Intelligence | 7.5high | Not scored | — | — | |
| CVE-2026-71092 | Oracle Peoplesoft Lease Administration | 7.5high | Not scored | — | — | |
| CVE-2026-71069 | Oracle Agile Plm Mcad Connector | 7.5high | Not scored | — | — | |
| CVE-2026-71061 | Oracle Business Intelligence | 7.5high | Not scored | — | — | |
| CVE-2026-71056 | Oracle Business Intelligence | 7.7high | Not scored | — | — | |
| CVE-2026-71048 | Oracle Product Lifecycle Analytics | 7.6high | Not scored | — | — | |
| CVE-2026-71043 | Oracle Agile Product Lifecycle Management | 7.5high | Not scored | — | — | |
| CVE-2026-71034 | Oracle Commerce Experience Manager | 7.5high | Not scored | — | — | |
| CVE-2026-71027 | Oracle Commerce Experience Manager | 7.6high | Not scored | — | — | |
| CVE-2026-71023 | Oracle Commerce Experience Manager | 7.5high | Not scored | — | — | |
| CVE-2026-71022 | Oracle Commerce Experience Manager | 7.6high | Not scored | — | — | |
| CVE-2026-71021 | Oracle Commerce Experience Manager | 7.6high | Not scored | — | — | |
| CVE-2026-71020 | Oracle Commerce Experience Manager | 7.6high | Not scored | — | — |