Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-0545Lfprojects Mlflow9.8critical
CVE-2025-68794Not specified9.8critical
CVE-2025-59695Entrust Nshield 5c Firmware9.8critical
CVE-2025-59693Entrust Nshield 5c Firmware9.8critical
CVE-2025-56005Dabeaz Ply9.8critical
CVE-2025-40074Not specified9.8critical
CVE-2025-10230Not specified10.0critical
CVE-2024-31823Ecommerce-Codeigniter-Bootstrap Project Ecommerce-Codeigniter-Bootstrap9.8critical
CVE-2023-43902Emudhra Emsigner9.8critical
CVE-2021-34458Microsoft Windows Server 20169.9critical
CVE-2021-30120Kaseya Vsa9.9critical
CVE-2021-26432Microsoft Windows 109.8critical
CVE-2021-26424Microsoft Windows 109.9critical
CVE-2020-9548Fasterxml Jackson-Databind9.8critical
CVE-2020-9546Fasterxml Jackson-Databind9.8critical
CVE-2020-10683Dom4j Project Dom4j9.8critical
CVE-2019-1971Cisco Enterprise Nfv Infrastructure Software9.8critical
CVE-2019-1895Cisco Enterprise Nfv Infrastructure Software9.8critical
CVE-2018-9206Jquery File Upload Project Jquery File Upload9.8critical
CVE-2018-0101Cisco Adaptive Security Appliance Software10.0critical
CVE-2026-5241Huggingface Transformers9.6critical
CVE-2026-47928Adobe Coldfusion9.6critical
CVE-2026-42557Jupyter Jupyterlab9.6critical
CVE-2026-34659Adobe Connect Desktop Application9.6critical
CVE-2026-33211Linuxfoundation Tekton Pipelines9.6critical
Page 3 of 4 · 87 entriesPreviousNext