Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | 2025-07-11 | ransomware | |
| CVE-2025-55182 | Meta React Server Components | 2025-12-05 | 2025-12-12 | ransomware | |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 2025-07-21 | ransomware | |
| CVE-2025-52691 | SmarterTools SmarterMail | 2026-01-26 | 2026-02-16 | ransomware | |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 2025-07-23 | ransomware | |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 2025-07-23 | ransomware | |
| CVE-2025-42999 | SAP NetWeaver | 2025-05-15 | 2025-06-05 | ransomware | |
| CVE-2025-3248 | Langflow Langflow | 2025-05-05 | 2025-05-26 | ransomware | |
| CVE-2025-31324 | SAP NetWeaver | 2025-04-29 | 2025-05-20 | ransomware | |
| CVE-2025-31161 | CrushFTP CrushFTP | 2025-04-07 | 2025-04-28 | ransomware | |
| CVE-2025-29824 | Microsoft Windows | 2025-04-08 | 2025-04-29 | ransomware | |
| CVE-2025-26633 | Microsoft Windows | 2025-03-11 | 2025-04-01 | ransomware | |
| CVE-2025-26399 | SolarWinds Web Help Desk | 2026-03-09 | 2026-03-12 | ransomware | |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy | 2025-03-18 | 2025-04-08 | ransomware | |
| CVE-2025-23006 | SonicWall SMA1000 Appliances | 2025-01-24 | 2025-02-14 | ransomware | |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | 2025-04-11 | ransomware | |
| CVE-2025-22225 | VMware ESXi | 2025-03-04 | 2025-03-25 | ransomware | |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | 2025-10-20 | ransomware | |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | 2025-01-15 | ransomware | |
| CVE-2024-9680 | Mozilla Firefox | 2024-10-15 | 2024-11-05 | ransomware | |
| CVE-2024-9474 | Palo Alto Networks PAN-OS | 2024-11-18 | 2024-12-09 | ransomware | |
| CVE-2024-6670 | Progress WhatsUp Gold | 2024-09-16 | 2024-10-07 | ransomware | |
| CVE-2024-57728 | SimpleHelp SimpleHelp | 2026-04-24 | 2026-05-08 | ransomware | |
| CVE-2024-57727 | SimpleHelp SimpleHelp | 2025-02-13 | 2025-03-06 | ransomware | |
| CVE-2024-57726 | SimpleHelp SimpleHelp | 2026-04-24 | 2026-05-08 | ransomware |