Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-42044Axios Axios6.5medium
CVE-2026-41607Apache Thrift6.5medium
CVE-2026-4135Lenovo Software Fix6.6medium
CVE-2026-40293Openfga Openfga6.5medium
CVE-2026-34756Vllm Vllm6.5medium
CVE-2026-34755Vllm Vllm6.5medium
CVE-2026-20097Cisco Unified Computing System6.5medium
CVE-2026-20096Cisco Enterprise Nfv Infrastructure Software6.5medium
CVE-2026-20095Cisco Enterprise Nfv Infrastructure Software6.5medium
CVE-2026-12993Redhat Build Of Apicurio Registry6.5medium
CVE-2025-5449Libssh Libssh6.5medium
CVE-2024-9355Not specified6.5medium
CVE-2024-45229Versa-Networks Versa Director6.6medium
CVE-2024-34517Neo4j Neo4j6.5medium
CVE-2024-11734Not specified6.5medium
CVE-2024-10270Not specified6.5medium
CVE-2023-43900Emudhra Emsigner6.5medium
CVE-2022-23437Apache Xerces-J6.5medium
CVE-2022-21467Oracle Agile Product Lifecycle Management6.5medium
CVE-2021-41184Jqueryui Jquery Ui6.5medium
CVE-2021-41183Jqueryui Jquery Ui6.5medium
CVE-2021-41182Jqueryui Jquery Ui6.5medium
CVE-2021-38629Microsoft Windows 106.5medium
CVE-2021-38624Microsoft Windows 106.5medium
CVE-2021-34507Microsoft Windows 106.5medium
Page 3 of 19 · 459 entriesPreviousNext