Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-48907Widget Factory Joomla Content Editor2026-06-162026-06-19
CVE-2026-48558SimpleHelp SimpleHelp2026-06-292026-07-02
CVE-2026-48282Adobe ColdFusion2026-07-072026-07-10
CVE-2026-48172LiteSpeed cPanel Plugin2026-05-262026-05-29
CVE-2026-46817Oracle E-Business Suite2026-07-152026-07-18
CVE-2026-45498Microsoft Defender2026-05-202026-06-03
CVE-2026-45247Mirasvit Mirasvit Full Page Cache Warmer2026-06-032026-06-06
CVE-2026-42897Microsoft Microsoft2026-05-152026-05-29
CVE-2026-42271BerriAI LiteLLM2026-06-082026-06-22
CVE-2026-42208BerriAI LiteLLM2026-05-082026-05-11
CVE-2026-41091Microsoft Defender2026-05-202026-06-03
CVE-2026-39987Marimo Marimo2026-04-232026-05-07
CVE-2026-39808Fortinet FortiSandbox2026-07-162026-07-19
CVE-2026-3910Google Chromium V82026-03-132026-03-27
CVE-2026-3909Google Skia2026-03-132026-03-27
CVE-2026-35616Fortinet FortiClient EMS2026-04-062026-04-09
CVE-2026-3502TrueConf Client2026-04-022026-04-16
CVE-2026-34926Trend Micro Apex One2026-05-212026-06-04
CVE-2026-34910Ubiquiti UniFi OS2026-06-232026-06-26
CVE-2026-34909Ubiquiti UniFi OS2026-06-232026-06-26
CVE-2026-34908Ubiquiti UniFi OS2026-06-232026-06-26
CVE-2026-34486Apache Tomcat2026-08-042026-08-07
CVE-2026-34197Apache ActiveMQ2026-04-162026-04-30
CVE-2026-33634Aquasecurity Trivy2026-03-262026-04-09
CVE-2026-33017Langflow Langflow2026-03-252026-04-08
Page 18 of 68 · 1695 entriesPreviousNext