Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-59700 | Entrust Nshield 5c Firmware | 3.9low | — | — | |
| CVE-2026-3184 | Kernel Util-Linux | 3.7low | — | — | |
| CVE-2025-10939 | Not specified | 3.7low | — | — | |
| CVE-2026-48289 | Adobe Experience Manager | 3.5low | — | — | |
| CVE-2026-48288 | Adobe Experience Manager | 3.5low | — | — | |
| CVE-2026-34685 | Adobe Commerce | 3.4low | — | — | |
| CVE-2025-59696 | Entrust Nshield 5c Firmware | 3.2low | — | — | |
| CVE-2026-21295 | Adobe Commerce | 3.1low | — | — | |
| CVE-2026-45186 | Libexpat Project Libexpat | 2.9low | — | — | |
| CVE-2025-69873 | Not specified | 2.9low | — | — | |
| CVE-2026-42188 | Geysermc Geyser | 2.4low | — | — | |
| CVE-2026-27308 | Adobe Coldfusion | 2.4low | — | — | |
| CVE-2026-27307 | Adobe Coldfusion | 2.4low | — | — | |
| CVE-2025-12945 | Netgear R7000p Firmware | 2.4low | — | — | |
| CVE-2025-43955 | Convertigo Convertigo | 2.2low | — | — |