Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
1
Added in 7 days
5
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-46384Not specified7.5high
CVE-2026-44902Opentelemetry Opentelemetry\/Auto-Instrumentations-Node7.5high
CVE-2026-44488Axios Axios7.5high
CVE-2026-44487Axios Axios7.5high
CVE-2026-44486Axios Axios7.5high
CVE-2026-44432Python Urllib37.5high
CVE-2026-44289Protobufjs Project Protobufjs7.5high
CVE-2026-44020Docling Docling7.5high
CVE-2026-44017Docling Docling7.5high
CVE-2026-42944Nlnetlabs Unbound7.5high
CVE-2026-42570Svelte Devalue7.5high
CVE-2026-41992Gnu Gzip7.5high
CVE-2026-41675Not specified7.5high
CVE-2026-41674Not specified7.5high
CVE-2026-41673Not specified7.5high
CVE-2026-41672Not specified7.5high
CVE-2026-41602Apache Thrift7.5high
CVE-2026-41292Nlnetlabs Unbound7.5high
CVE-2026-40938Linuxfoundation Tekton Pipelines7.5high
CVE-2026-39458F5 Big-Ip Access Policy Manager7.5high
CVE-2026-39363Vitejs Vite7.5high
CVE-2026-34713Adobe C2pa7.5high
CVE-2026-34712Adobe C2pa7.5high
CVE-2026-34711Adobe C2pa7.5high
CVE-2026-34665Adobe C2pa7.5high
Page 89 of 114 · 2839 entriesPreviousNext