Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | 2026-06-15 | 2026-06-29 | ||
| CVE-2026-20253 | Splunk Enterprise | 2026-06-18 | 2026-06-21 | ||
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | 2026-06-09 | 2026-06-23 | ||
| CVE-2026-20230 | Cisco Unified Communications Manager | 2026-06-25 | 2026-06-28 | ||
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 2026-05-14 | 2026-05-17 | ||
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | ||
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 | ||
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | 2026-02-25 | 2026-02-27 | ||
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | 2026-04-20 | 2026-04-23 | ||
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 2026-02-11 | ||
| CVE-2026-18577 | N-able N-central | 2026-08-03 | 2026-08-06 | ||
| CVE-2026-18556 | N-able N-central | 2026-08-04 | 2026-08-07 | ||
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 2026-07-27 | 2026-07-30 | ||
| CVE-2026-16232 | Check Point SmartConsole | 2026-07-22 | 2026-07-25 | ||
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | 2026-03-23 | ||
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | 2026-04-11 | ||
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 2026-02-01 | ||
| CVE-2026-11645 | Google Chromium V8 | 2026-06-09 | 2026-06-23 | ||
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | 2026-06-14 | ||
| CVE-2026-0770 | Langflow Langflow | 2026-07-21 | 2026-07-24 | ||
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 2026-05-06 | 2026-05-09 | ||
| CVE-2025-9377 | TP-Link Multiple Routers | 2025-09-03 | 2025-09-24 | ||
| CVE-2025-9242 | WatchGuard Firebox | 2025-11-12 | 2025-12-03 | ||
| CVE-2025-8876 | N-able N-Central | 2025-08-13 | 2025-08-20 | ||
| CVE-2025-8875 | N-able N-Central | 2025-08-13 | 2025-08-20 |