Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-42044 | Axios Axios | 6.5medium | — | — | |
| CVE-2026-41607 | Apache Thrift | 6.5medium | — | — | |
| CVE-2026-4135 | Lenovo Software Fix | 6.6medium | — | — | |
| CVE-2026-40293 | Openfga Openfga | 6.5medium | — | — | |
| CVE-2026-34756 | Vllm Vllm | 6.5medium | — | — | |
| CVE-2026-34755 | Vllm Vllm | 6.5medium | — | — | |
| CVE-2026-20097 | Cisco Unified Computing System | 6.5medium | — | — | |
| CVE-2026-20096 | Cisco Enterprise Nfv Infrastructure Software | 6.5medium | — | — | |
| CVE-2026-20095 | Cisco Enterprise Nfv Infrastructure Software | 6.5medium | — | — | |
| CVE-2026-12993 | Redhat Build Of Apicurio Registry | 6.5medium | — | — | |
| CVE-2025-5449 | Libssh Libssh | 6.5medium | — | — | |
| CVE-2024-9355 | Not specified | 6.5medium | — | — | |
| CVE-2024-45229 | Versa-Networks Versa Director | 6.6medium | — | — | |
| CVE-2024-34517 | Neo4j Neo4j | 6.5medium | — | — | |
| CVE-2024-11734 | Not specified | 6.5medium | — | — | |
| CVE-2024-10270 | Not specified | 6.5medium | — | — | |
| CVE-2023-43900 | Emudhra Emsigner | 6.5medium | — | — | |
| CVE-2022-23437 | Apache Xerces-J | 6.5medium | — | — | |
| CVE-2022-21467 | Oracle Agile Product Lifecycle Management | 6.5medium | — | — | |
| CVE-2021-41184 | Jqueryui Jquery Ui | 6.5medium | — | — | |
| CVE-2021-41183 | Jqueryui Jquery Ui | 6.5medium | — | — | |
| CVE-2021-41182 | Jqueryui Jquery Ui | 6.5medium | — | — | |
| CVE-2021-38629 | Microsoft Windows 10 | 6.5medium | — | — | |
| CVE-2021-38624 | Microsoft Windows 10 | 6.5medium | — | — | |
| CVE-2021-34507 | Microsoft Windows 10 | 6.5medium | — | — |