Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-27306 | Adobe Coldfusion | 8.4high | — | — | |
| CVE-2026-12975 | Redhat Build Of Apicurio Registry | 8.5high | — | — | |
| CVE-2026-0013 | Google Android | 8.4high | — | — | |
| CVE-2026-0011 | Google Android | 8.4high | — | — | |
| CVE-2026-0010 | Google Android | 8.4high | — | — | |
| CVE-2021-34450 | Microsoft Windows 10 | 8.5high | — | — | |
| CVE-2021-1493 | Cisco Secure Firewall Threat Defense | 8.5high | — | — | |
| CVE-2026-6266 | Not specified | 8.3high | — | — | |
| CVE-2026-45137 | Anchor-Lang Anchor | 8.2high | — | — | |
| CVE-2026-41604 | Apache Thrift | 8.2high | — | — | |
| CVE-2026-41326 | Katacontainers Confidential Containers | 8.2high | — | — | |
| CVE-2026-24842 | Isaacs Tar | 8.2high | — | — | |
| CVE-2025-2609 | Magnussolution Magnusbilling | 8.2high | — | — | |
| CVE-2022-24069 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2022-24031 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-45971 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-45970 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-45969 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-43615 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-43323 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-42554 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-42113 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-42060 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41841 | Insyde Insydeh2o | 8.2high | — | — | |
| CVE-2021-41840 | Insyde Insydeh2o | 8.2high | — | — |