Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 2026-06-16 | 2026-06-19 | ||
| CVE-2026-48558 | SimpleHelp SimpleHelp | 2026-06-29 | 2026-07-02 | ||
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 2026-07-10 | ||
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 2026-05-26 | 2026-05-29 | ||
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 2026-07-18 | ||
| CVE-2026-45498 | Microsoft Defender | 2026-05-20 | 2026-06-03 | ||
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 2026-06-03 | 2026-06-06 | ||
| CVE-2026-42897 | Microsoft Microsoft | 2026-05-15 | 2026-05-29 | ||
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | 2026-06-22 | ||
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | 2026-05-11 | ||
| CVE-2026-41091 | Microsoft Defender | 2026-05-20 | 2026-06-03 | ||
| CVE-2026-39987 | Marimo Marimo | 2026-04-23 | 2026-05-07 | ||
| CVE-2026-39808 | Fortinet FortiSandbox | 2026-07-16 | 2026-07-19 | ||
| CVE-2026-3910 | Google Chromium V8 | 2026-03-13 | 2026-03-27 | ||
| CVE-2026-3909 | Google Skia | 2026-03-13 | 2026-03-27 | ||
| CVE-2026-35616 | Fortinet FortiClient EMS | 2026-04-06 | 2026-04-09 | ||
| CVE-2026-3502 | TrueConf Client | 2026-04-02 | 2026-04-16 | ||
| CVE-2026-34926 | Trend Micro Apex One | 2026-05-21 | 2026-06-04 | ||
| CVE-2026-34910 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 | ||
| CVE-2026-34909 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 | ||
| CVE-2026-34908 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 | ||
| CVE-2026-34486 | Apache Tomcat | 2026-08-04 | 2026-08-07 | ||
| CVE-2026-34197 | Apache ActiveMQ | 2026-04-16 | 2026-04-30 | ||
| CVE-2026-33634 | Aquasecurity Trivy | 2026-03-26 | 2026-04-09 | ||
| CVE-2026-33017 | Langflow Langflow | 2026-03-25 | 2026-04-08 |