Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-2609 | Magnussolution Magnusbilling | 8.2high | — | — | |
| CVE-2022-24069 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2022-24031 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-45971 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-45970 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-45969 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-43615 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-43323 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-42554 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-42113 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-42060 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41841 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41840 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41839 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41838 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41837 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41164 | Ckeditor Ckeditor | 8.2high | — | — | |
| CVE-2021-34469 | Microsoft 365 Apps | 8.2high | — | — | |
| CVE-2021-33767 | Microsoft Open Enclave Software Development Kit | 8.2high | — | — | |
| CVE-2021-33627 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-2351 | Oracle Advanced Networking Option | 8.3high | — | — | |
| CVE-2020-3514 | Cisco Secure Firewall Management Center | 8.2high | — | — | |
| CVE-2019-12674 | Cisco Secure Firewall Threat Defense | 8.2high | — | — | |
| CVE-2018-0453 | Cisco Secure Firewall Threat Defense | 8.2high | — | — | |
| CVE-2026-9256 | F5 Nginx Open Source | 8.1high | — | — |