Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite | 6.1medium | 2022-04-19 | 2022-05-10 | ransomware |
| CVE-2018-19953 | Qnap Qts | 6.1medium | 2022-05-24 | 2022-06-14 | ransomware |
| CVE-2013-0431 | Oracle Jre | 5.3medium | 2022-05-25 | 2022-06-15 | ransomware |
| CVE-2010-0738 | Redhat Jboss Enterprise Application Platform | 5.3medium | 2022-05-25 | 2022-06-15 | ransomware |
| CVE-2021-20023 | Sonicwall Email Security | 4.9medium | 2021-11-03 | 2021-11-17 | ransomware |
| CVE-2018-13374 | Fortinet Fortiadc | 4.3medium | 2022-09-08 | 2022-09-29 | ransomware |
| CVE-2026-50751 | Check Point Security Gateway | 2026-06-08 | 2026-06-11 | ransomware | |
| CVE-2026-48027 | Nx Nx Console | 2026-05-27 | 2026-06-10 | ransomware | |
| CVE-2026-45659 | Microsoft SharePoint Server | 2026-07-01 | 2026-07-04 | ransomware | |
| CVE-2026-45321 | TanStack TanStack | 2026-05-27 | 2026-06-10 | ransomware | |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 2026-05-03 | ransomware | |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 | ransomware | |
| CVE-2026-33825 | Microsoft Defender | 2026-04-22 | 2026-05-06 | ransomware | |
| CVE-2026-24423 | SmarterTools SmarterMail | 2026-02-05 | 2026-02-26 | ransomware | |
| CVE-2026-23760 | SmarterTools SmarterMail | 2026-01-26 | 2026-02-16 | ransomware | |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | 2026-03-19 | 2026-03-22 | ransomware | |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 2026-02-16 | ransomware | |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | 2026-07-14 | 2026-07-17 | ransomware | |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | 2026-07-14 | 2026-07-17 | ransomware | |
| CVE-2026-12569 | PTC Windchill and FlexPLM | 2026-06-25 | 2026-06-28 | ransomware | |
| CVE-2026-0257 | Palo Alto Networks PAN-OS | 2026-05-29 | 2026-06-01 | ransomware | |
| CVE-2025-8088 | RARLAB WinRAR | 2025-08-12 | 2025-09-02 | ransomware | |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | 2025-11-10 | ransomware | |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | 2025-10-27 | ransomware | |
| CVE-2025-60710 | Microsoft Windows | 2026-04-13 | 2026-04-27 | ransomware |