Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2025-47827IGEL IGEL OS2025-10-142025-11-04
CVE-2025-47813Wing FTP Server Wing FTP Server2026-03-162026-03-30
CVE-2025-47812Wing FTP Server Wing FTP Server2025-07-142025-08-04
CVE-2025-47729TeleMessage TM SGNL2025-05-122025-06-02
CVE-2025-4632Samsung MagicINFO 9 Server2025-05-222025-06-12
CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM)2025-05-192025-06-09
CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM)2025-05-192025-06-09
CVE-2025-43529Apple Multiple Products2025-12-152026-01-05
CVE-2025-43520Apple Multiple Products2026-03-202026-04-03
CVE-2025-43510Apple Multiple Products2026-03-202026-04-03
CVE-2025-43300Apple iOS, iPadOS, and macOS2025-08-212025-09-11
CVE-2025-43200Apple Multiple Products2025-06-162025-07-07
CVE-2025-42599Qualitia Active! Mail2025-04-282025-05-19
CVE-2025-41244Broadcom VMware Aria Operations and VMware Tools2025-10-302025-11-20
CVE-2025-40602SonicWall SMA1000 appliance2025-12-172025-12-24
CVE-2025-40551SolarWinds Web Help Desk2026-02-032026-02-06
CVE-2025-40536SolarWinds Web Help Desk2026-02-122026-02-15
CVE-2025-4008Smartbedded Meteobridge2025-10-022025-10-23
CVE-2025-3935ConnectWise ScreenConnect2025-06-022025-06-23
CVE-2025-3928Commvault Web Server2025-04-282025-05-19
CVE-2025-38352Linux Kernel2025-09-042025-09-25
CVE-2025-37164Hewlett Packard Enterprise (HPE) OneView2026-01-072026-01-28
CVE-2025-35939Craft CMS Craft CMS2025-06-022025-06-23
CVE-2025-34291Langflow Langflow2026-05-212026-06-04
CVE-2025-34028Commvault Command Center2025-05-022025-05-23
Page 23 of 68 · 1695 entriesPreviousNext