Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-32202 | Microsoft Windows | 2026-04-28 | 2026-05-12 | ||
| CVE-2026-32201 | Microsoft SharePoint Server | 2026-04-14 | 2026-04-28 | ||
| CVE-2026-31431 | Linux Kernel | 2026-05-01 | 2026-05-15 | ||
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | 2026-04-02 | ||
| CVE-2026-28318 | SolarWinds Serv-U | 2026-06-05 | 2026-06-19 | ||
| CVE-2026-25108 | Soliton Systems K.K FileZen | 2026-02-24 | 2026-03-17 | ||
| CVE-2026-25089 | Fortinet FortiSandbox | 2026-07-16 | 2026-07-19 | ||
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 2026-01-30 | ||
| CVE-2026-2441 | Google Chromium | 2026-02-17 | 2026-03-10 | ||
| CVE-2026-24061 | GNU InetUtils | 2026-01-26 | 2026-02-16 | ||
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | 2026-02-21 | ||
| CVE-2026-22719 | Broadcom VMware Aria Operations | 2026-03-03 | 2026-03-24 | ||
| CVE-2026-21643 | Fortinet FortiClient EMS | 2026-04-13 | 2026-04-16 | ||
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 2026-03-03 | ||
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 2026-02-16 | ||
| CVE-2026-21385 | Qualcomm Multiple Chipsets | 2026-03-03 | 2026-03-24 | ||
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 2026-03-21 | ||
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 2026-02-03 | ||
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 2026-03-05 | ||
| CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | 2026-07-29 | 2026-08-01 |