Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2024-55956 | Cleo Multiple Products | 2024-12-17 | 2025-01-07 | ransomware | |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy | 2025-01-14 | 2025-01-21 | ransomware | |
| CVE-2024-55550 | Mitel MiCollab | 2025-01-07 | 2025-01-28 | ransomware | |
| CVE-2024-53704 | SonicWall SonicOS | 2025-02-18 | 2025-03-11 | ransomware | |
| CVE-2024-51567 | CyberPersons CyberPanel | 2024-11-07 | 2024-11-28 | ransomware | |
| CVE-2024-51378 | CyberPersons CyberPanel | 2024-12-04 | 2024-12-25 | ransomware | |
| CVE-2024-50623 | Cleo Multiple Products | 2024-12-13 | 2025-01-03 | ransomware | |
| CVE-2024-49039 | Microsoft Windows | 2024-11-12 | 2024-12-03 | ransomware | |
| CVE-2024-4577 | PHP Group PHP | 2024-06-12 | 2024-07-03 | ransomware | |
| CVE-2024-41713 | Mitel MiCollab | 2025-01-07 | 2025-01-28 | ransomware | |
| CVE-2024-40766 | SonicWall SonicOS | 2024-09-09 | 2024-09-30 | ransomware | |
| CVE-2024-40711 | Veeam Backup & Replication | 2024-10-17 | 2024-11-07 | ransomware | |
| CVE-2024-38094 | Microsoft SharePoint | 2024-10-22 | 2024-11-12 | ransomware | |
| CVE-2024-37085 | VMware ESXi | 2024-07-30 | 2024-08-20 | ransomware | |
| CVE-2024-3400 | Palo Alto Networks PAN-OS | 2024-04-12 | 2024-04-19 | ransomware | |
| CVE-2024-30088 | Microsoft Windows | 2024-10-15 | 2024-11-05 | ransomware | |
| CVE-2024-30051 | Microsoft DWM Core Library | 2024-05-14 | 2024-06-04 | ransomware | |
| CVE-2024-27199 | JetBrains TeamCity | 2026-04-20 | 2026-05-04 | ransomware | |
| CVE-2024-27198 | JetBrains TeamCity | 2024-03-07 | 2024-03-28 | ransomware | |
| CVE-2024-26169 | Microsoft Windows | 2024-06-13 | 2024-07-04 | ransomware | |
| CVE-2024-24919 | Check Point Quantum Security Gateways | 2024-05-30 | 2024-06-20 | ransomware | |
| CVE-2024-23897 | Jenkins Jenkins Command Line Interface (CLI) | 2024-08-19 | 2024-09-09 | ransomware | |
| CVE-2024-23692 | Rejetto HTTP File Server | 2024-07-09 | 2024-07-30 | ransomware | |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | 2024-01-31 | 2024-02-02 | ransomware | |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 2024-01-22 | ransomware |