CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 1–60 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability	SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability SonicWall SonicOS SSLVPN	—	—	6 Nov 2026	—
CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability	Apple Multiple Products Improper Authentication Vulnerability Apple Multiple Products	—	—	4 Nov 2026	—
CVE-2026-119977 WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability	WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability WordPress Core	—	—	3 Nov 2026	—
CVE-2026-118527 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability MEDIUM4.3	Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Ivanti Connect Secure	MEDIUM 4.3	0.8%	30 Oct 2026	—
CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability HIGH7	Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability Ivanti Connect Secure	HIGH 7	0.5%	30 Oct 2026	—
CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability CRITICAL10	GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability GitLab Community Edition and Enterprise Edition	CRITICAL 10	65.2%	29 Oct 2026	—
CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability HIGH8.6	Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Cisco Secure Firewall ASA Software and Cisco Secure FTD Software	HIGH 8.6	0.8%	29 Oct 2026	—
CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability LOW2.7	Broadcom VMWare ESX Insufficient Logging Vulnerability Broadcom VMware ESX	LOW 2.7	0.7%	28 Oct 2026	—
CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability HIGH7.8	Linux Kernel Missing Initialization of a Variable Vulnerability Linux Kernel	HIGH 7.8	16.1%	28 Oct 2026	—
CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL9.3	Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Adobe Commerce and Magento	CRITICAL 9.3	47.5%	27 Oct 2026	—
CVE-2026-111497 Google Brotli Unchecked Return Value Vulnerability CRITICAL9.8	Google Brotli Unchecked Return Value Vulnerability Google Brotli	CRITICAL 9.8	82.6%	27 Oct 2026	—
CVE-2026-109618 PHP Memory Corruption Vulnerability CRITICAL9.8	PHP Memory Corruption Vulnerability PHP Group PHP	CRITICAL 9.8	100%	26 Oct 2026	—
CVE-2026-109619 PHP Stale Internal Request-State Vulnerability HIGH8.1	PHP Stale Internal Request-State Vulnerability PHP Group PHP	HIGH 8.1	100%	26 Oct 2026	—
CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability CRITICAL9.9	Arista VeloCloud Orchestrator SQL Injection Vulnerability Arista VeloCloud Orchestrator	CRITICAL 9.9	1%	23 Oct 2026	—
CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability CRITICAL9.8	Collabora Online – Built-in CODE Server OS Command Injection Vulnerability Collabora Online – Built-in CODE Server	CRITICAL 9.8	73.3%	23 Oct 2026	—
CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability HIGH7.8	EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability EG Secure Solutions SiteGuard Server Edition	HIGH 7.8	2.5%	20 Oct 2026	—
CVE-2026-96656 Plex Media Server External Control of File Name or Path Vulnerability HIGH7.2	Plex Media Server External Control of File Name or Path Vulnerability Plex Media Server	HIGH 7.2	1.8%	20 Oct 2026	—
CVE-2026-96655 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability MEDIUM4.3	Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability Plex Media Server	MEDIUM 4.3	10.7%	20 Oct 2026	—
CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability MEDIUM6.5	Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability Plex Media Server	MEDIUM 6.5	1.9%	20 Oct 2026	—
CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability MEDIUM4.3	Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability Plex Media Server	MEDIUM 4.3	11.9%	20 Oct 2026	—
CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability MEDIUM6.7	Siemens Software Center Uncontrolled Search Path Element Vulnerability Siemens Software Center	MEDIUM 6.7	1%	20 Oct 2026	—
CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability CRITICAL9.8	BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability BeyondTrust Remote Support	CRITICAL 9.8	78%	16 Oct 2026	—
CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability MEDIUM6	Fortinet Multiple Products Path Traversal Vulnerability Fortinet Multiple Products	MEDIUM 6	1.3%	16 Oct 2026	—
CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability	Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Atlassian Multiple Products	—	99.7%	15 Oct 2026	—
CVE-2026-105134 Ahsay AhsayCBS Command Injection Vulnerability CRITICAL10	Ahsay AhsayCBS Command Injection Vulnerability Ahsay AhsayCBS	CRITICAL 10	81.8%	14 Oct 2026	—
CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CRITICAL9.8	Cisco Secure Email Gateway Relative Path Traversal Vulnerability Cisco Secure Email Gateway	CRITICAL 9.8	6.2%	14 Oct 2026	—
CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability HIGH7.3	Ahsay AhsayCBS Improper Authentication Vulnerability Ahsay AhsayCBS	HIGH 7.3	84.5%	14 Oct 2026	—
CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability HIGH7.2	Palo Alto Networks PAN-OS Code Injection Vulnerability Palo Alto Networks PAN-OS	HIGH 7.2	1.7%	14 Oct 2026	—
CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability HIGH8.6	Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability Ivanti Connect Secure	HIGH 8.6	88.9%	13 Oct 2026	—
CVE-2026-96951 Microsoft Windows Command Injection Vulnerability HIGH8.8	Microsoft Windows Command Injection Vulnerability Microsoft Windows	HIGH 8.8	9.8%	13 Oct 2026	—
CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability HIGH7.5	ISC BIND Data Processing Errors Vulnerability ISC BIND	HIGH 7.5	99.6%	8 Oct 2026	—
CVE-2016-3081 Apache Struts Command Injection Vulnerability HIGH8.1	Apache Struts Command Injection Vulnerability Apache Struts	HIGH 8.1	96.5%	8 Oct 2026	—
CVE-2023-22894 Strapi Cleartext Storage of Sensitive Information Vulnerability MEDIUM4.9	Strapi Cleartext Storage of Sensitive Information Vulnerability Strapi Strapi	MEDIUM 4.9	4.1%	8 Oct 2026	—
CVE-2021-3199 ONLYOFFICE Docs Server Path Traversal Vulnerability CRITICAL9.8	ONLYOFFICE Docs Server Path Traversal Vulnerability ONLYOFFICE Docs	CRITICAL 9.8	30.2%	8 Oct 2026	—
CVE-2015-3306 ProFTPD Improper Access Control Vulnerability CRITICAL10	ProFTPD Improper Access Control Vulnerability ProFTPD ProFTPD	CRITICAL 10	99.5%	8 Oct 2026	—
CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability HIGH7.5	Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix NetScaler	HIGH 7.5	11.4%	4 Oct 2026	—
CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability CRITICAL9.8	Zammad GmbH Zammad Improper Privilege Management Vulnerability Zammad GmbH Zammad	CRITICAL 9.8	10.9%	2 Oct 2026	—
CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CRITICAL9.8	Zammad GmbH Zammad Session Fixation Vulnerability Zammad GmbH Zammad	CRITICAL 9.8	49.9%	2 Oct 2026	—
CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability CRITICAL9.8	Fortinet FortiMail Path Traversal Vulnerability Fortinet FortiMail	CRITICAL 9.8	4.6%	1 Oct 2026	—
CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CRITICAL9.8	Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Cisco Catalyst SD-WAN Manager	CRITICAL 9.8	38.9%	30 Sep 2026	—
CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability HIGH8.8	Apple Multiple Products Out-of-Bounds Write Vulnerability Apple Multiple Products	HIGH 8.8	26.2%	29 Sep 2026	—
CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability HIGH8.1	Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix NetScaler	HIGH 8.1	76.6%	27 Sep 2026	—
CVE-2026-88771 Citrix NetScaler Improper Input Validation Vulnerability CRITICAL9.8	Citrix NetScaler Improper Input Validation Vulnerability Citrix NetScaler	CRITICAL 9.8	81.9%	27 Sep 2026	—
CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability MEDIUM6.5	Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability MikroTik RouterOS	MEDIUM 6.5	2.3%	25 Sep 2026	—
CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability HIGH8.8	Microsoft SharePoint Code Injection Vulnerability Microsoft SharePoint	HIGH 8.8	9.9%	25 Sep 2026	—
CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability HIGH8.1	WordPress Core Remote File Inclusion Vulnerability WordPress Core	HIGH 8.1	95.8%	25 Sep 2026	—
CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability CRITICAL10	WSO2 Multiple Products Path Traversal Vulnerability WSO2 Multiple Products	CRITICAL 10	22.4%	24 Sep 2026	—
CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL9.1	Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe Commerce and Magento	CRITICAL 9.1	90.5%	24 Sep 2026	—
CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CRITICAL10	Arista VeloCloud Orchestrator Improper Input Validation Vulnerability Arista VeloCloud Orchestrator	CRITICAL 10	1.4%	22 Sep 2026	—
CVE-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CRITICAL9.8	F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability F5 BIG-IP APM	CRITICAL 9.8	26.6%	22 Sep 2026	—
CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability CRITICAL9.8	Check Point Multiple Products Path Traversal Vulnerability Check Point Multiple Products	CRITICAL 9.8	91.6%	22 Sep 2026	—
CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability CRITICAL9.8	Check Point Multiple Products Improper Certificate Validation Vulnerability Check Point Multiple Products	CRITICAL 9.8	54.1%	22 Sep 2026	—
CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability HIGH8.8	Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Zyxel GS1900 Series Switches	HIGH 8.8	2.7%	21 Sep 2026	—
CVE-2025-39964 Linux Kernel Race Condition Vulnerability HIGH7.8	Linux Kernel Race Condition Vulnerability Linux Kernel	HIGH 7.8	1.6%	18 Sep 2026	—
CVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability HIGH8.8	Linux Kernel Out-of-Bounds Write Vulnerability Linux Kernel	HIGH 8.8	0.9%	18 Sep 2026	—
CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CRITICAL9.8	Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability Linux Kernel	CRITICAL 9.8	3.2%	18 Sep 2026	—
CVE-2026-58704 Google Pixel Improper Authorization Vulnerability HIGH8.8	Google Pixel Improper Authorization Vulnerability Google Pixel	HIGH 8.8	0.6%	16 Sep 2026	—
CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CRITICAL10	Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Cisco Identity Services Engine	CRITICAL 10	75.6%	16 Sep 2026	—
CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerability HIGH7.8	Acronis Backup Incorrect Default Permissions Vulnerability Acronis Backup	HIGH 7.8	0.2%	16 Sep 2026	—
CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability CRITICAL9.8	Cisco Secure Email Gateway SQL Injection Vulnerability Cisco Secure Email Gateway	CRITICAL 9.8	40.2%	14 Sep 2026	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.