Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 2026-02-02 | ||
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 2025-08-28 | ||
| CVE-2025-68686 | Fortinet FortiOS | 2026-07-27 | 2026-08-10 | ||
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 2026-02-12 | ||
| CVE-2025-68613 | n8n n8n | 2026-03-11 | 2026-03-25 | ||
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 2026-03-13 | ||
| CVE-2025-67038 | Lantronix EDS5000 | 2026-06-23 | 2026-06-26 | ||
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 2025-12-29 | ||
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 2026-04-01 | ||
| CVE-2025-6558 | Google Chromium | 2025-07-22 | 2025-08-12 | ||
| CVE-2025-6554 | Google Chromium V8 | 2025-07-02 | 2025-07-23 | ||
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | 2025-07-21 | ||
| CVE-2025-64446 | Fortinet FortiWeb | 2025-11-14 | 2025-11-21 | ||
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 2026-02-24 | ||
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2025-12-30 | ||
| CVE-2025-62215 | Microsoft Windows | 2025-11-12 | 2025-12-03 | ||
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 2025-12-30 | ||
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 2025-11-18 | ||
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 2025-11-18 | ||
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager | 2025-10-22 | 2025-11-12 | ||
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 2025-12-12 | ||
| CVE-2025-59718 | Fortinet Multiple Products | 2025-12-16 | 2025-12-23 | ||
| CVE-2025-59689 | Libraesva Email Security Gateway | 2025-09-29 | 2025-10-20 | ||
| CVE-2025-59374 | ASUS Live Update | 2025-12-17 | 2026-01-07 | ||
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 2025-11-14 |