Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2012-1710 | Oracle Fusion Middleware | 2022-05-25 | 2022-06-15 | ransomware | |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2009-3960 | Adobe BlazeDS | 2022-03-07 | 2022-09-07 | ransomware | |
| CVE-2008-2992 | Adobe Acrobat and Reader | 2022-03-03 | 2022-03-24 | ransomware | |
| CVE-2026-9586 | Sangoma Switchvox | 2026-09-02 | 2026-09-05 | ||
| CVE-2026-85046 | Google Chromium V8 | 2026-09-04 | 2026-09-18 | ||
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 2026-09-02 | 2026-09-05 | ||
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 2026-09-02 | 2026-09-05 | ||
| CVE-2026-82329 | JFrog Artifactory | 2026-09-02 | 2026-09-05 | ||
| CVE-2026-59822 | BerriAI LiteLLM | 2026-09-02 | 2026-09-16 | ||
| CVE-2026-49869 | Kestra Kestra OSS | 2026-09-02 | 2026-09-05 | ||
| CVE-2026-48710 | Kludex Starlette | 2026-09-02 | 2026-09-16 | ||
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 2026-08-26 | 2026-08-29 | ||
| CVE-2026-82078 | PaperCut NG/MF | 2026-08-31 | 2026-09-14 | ||
| CVE-2026-81578 | PaperCut NG/MF | 2026-08-31 | 2026-09-14 | ||
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 2026-08-24 | ||
| CVE-2026-72898 | Metabase Metabase | 2026-08-11 | 2026-08-14 | ||
| CVE-2026-72530 | TrueConf Server | 2026-08-20 | 2026-09-03 | ||
| CVE-2026-72529 | TrueConf Server | 2026-08-20 | 2026-08-23 | ||
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | 2026-08-11 | 2026-08-25 | ||
| CVE-2026-66384 | JFrog Artifactory | 2026-08-27 | 2026-09-10 | ||
| CVE-2026-65400 | Apple macOS | 2026-08-18 | 2026-08-21 | ||
| CVE-2026-64849 | MLflow MLflow | 2026-08-19 | 2026-09-02 | ||
| CVE-2026-60004 | Gitea Gitea | 2026-08-25 | 2026-08-28 | ||
| CVE-2026-59310 | Broadcom VMware vCenter | 2026-08-18 | 2026-08-21 |