Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | 2025-12-12 | 2026-01-02 | ||
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 2022-09-29 | ||
| CVE-2018-20062 | ThinkPHP noneCms | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-19410 | Paessler PRTG Network Monitor | 2025-02-04 | 2025-02-25 | ||
| CVE-2018-18809 | TIBCO JasperReports | 2022-12-29 | 2023-01-19 | ||
| CVE-2018-18325 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-17480 | Google Chromium V8 | 2022-06-08 | 2022-06-22 | ||
| CVE-2018-17463 | Google Chromium V8 | 2022-06-08 | 2022-06-22 | ||
| CVE-2018-15961 | Adobe ColdFusion | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-15811 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-15133 | Laravel Laravel Framework | 2024-01-16 | 2024-02-06 | ||
| CVE-2018-14933 | NUUO NVRmini Devices | 2024-12-18 | 2025-01-08 | ||
| CVE-2018-14847 | MikroTik RouterOS | 2021-12-01 | 2022-06-01 | ||
| CVE-2018-14839 | LG N1A1 NAS | 2022-03-25 | 2022-04-15 | ||
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework | 2023-09-28 | 2023-10-19 | ||
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | 2026-02-16 | ||
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-11776 | Apache Struts | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-10561 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 2022-04-21 | ||
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | 2022-02-10 | 2022-08-10 | ||
| CVE-2018-0824 | Microsoft Windows | 2024-08-05 | 2024-08-26 | ||
| CVE-2018-0798 | Microsoft Office | 2021-11-03 | 2022-05-03 | ||
| CVE-2018-0180 | Cisco IOS Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0179 | Cisco IOS Software | 2022-03-03 | 2022-03-17 | ||
| CVE-2018-0175 | Cisco IOS, XR, and XE Software | 2022-03-03 | 2022-03-17 |