CVE Database
Every vulnerability CISA records as exploited in the wild — 1,665 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.
Showing 61–120 of 1,665.
| CVE | Vulnerability | Severity | EPSS | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2026-9082 |
Drupal Core SQL Injection Vulnerability
Drupal Core
|
— | 88.3% | 22 May 2026 | — |
| CVE-2025-34291 |
Langflow Origin Validation Error Vulnerability
Langflow Langflow
|
— | 83.8% | 21 May 2026 | — |
| CVE-2026-34926 |
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
Trend Micro Apex One
|
— | 12.7% | 21 May 2026 | — |
| CVE-2008-4250 |
Microsoft Windows Buffer Overflow Vulnerability
Microsoft Windows
|
— | 98.8% | 20 May 2026 | — |
| CVE-2009-1537 |
Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft DirectX
|
— | 51.2% | 20 May 2026 | — |
| CVE-2009-3459 |
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
Adobe Acrobat and Reader
|
— | 86.6% | 20 May 2026 | — |
| CVE-2010-0249 |
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer
|
— | 91.9% | 20 May 2026 | — |
| CVE-2010-0806 |
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer
|
— | 82.2% | 20 May 2026 | — |
| CVE-2026-41091 |
Microsoft Defender Link Following Vulnerability
Microsoft Defender
|
— | 9.6% | 20 May 2026 | — |
| CVE-2026-45498 |
Microsoft Defender Denial of Service Vulnerability
Microsoft Defender
|
— | 63.1% | 20 May 2026 | — |
| CVE-2026-42897 |
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft Microsoft
|
— | 70.3% | 15 May 2026 | — |
| CVE-2026-20182 |
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Cisco Catalyst SD-WAN
|
— | 90.3% | 14 May 2026 | — |
| CVE-2026-42208 |
BerriAI LiteLLM SQL Injection Vulnerability
BerriAI LiteLLM
|
— | 89.4% | 8 May 2026 | — |
| CVE-2026-6973 |
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti Endpoint Manager Mobile (EPMM)
|
— | 34.5% | 7 May 2026 | — |
| CVE-2026-0300 |
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
Palo Alto Networks PAN-OS
|
— | 32.1% | 6 May 2026 | — |
| CVE-2026-31431 |
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux Kernel
|
— | 99.9% | 1 May 2026 | — |
| CVE-2026-41940 |
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
WebPros cPanel & WHM and WP2 (WordPress Squared)
|
— | 97.9% | 30 Apr 2026 | CISA: known use |
| CVE-2024-1708 |
ConnectWise ScreenConnect Path Traversal Vulnerability
ConnectWise ScreenConnect
|
— | 87.6% | 28 Apr 2026 | CISA: known use |
| CVE-2026-32202 |
Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft Windows
|
— | 63.7% | 28 Apr 2026 | — |
| CVE-2025-29635 |
D-Link DIR-823X Command Injection Vulnerability
D-Link DIR-823X
|
— | 89.6% | 24 Apr 2026 | — |
| CVE-2024-7399 |
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server
|
— | 91.9% | 24 Apr 2026 | — |
| CVE-2024-57728 |
SimpleHelp Path Traversal Vulnerability
SimpleHelp SimpleHelp
|
— | 7% | 24 Apr 2026 | CISA: known use |
| CVE-2024-57726 |
SimpleHelp Missing Authorization Vulnerability
SimpleHelp SimpleHelp
|
— | 8.6% | 24 Apr 2026 | CISA: known use |
| CVE-2026-39987 |
Marimo Remote Code Execution Vulnerability
Marimo Marimo
|
— | 96.6% | 23 Apr 2026 | — |
| CVE-2026-33825 |
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft Defender
|
— | 6.7% | 22 Apr 2026 | CISA: known use |
| CVE-2026-20122 |
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
Cisco Catalyst SD-WAN Manger
|
— | 24.6% | 20 Apr 2026 | — |
| CVE-2026-20133 |
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Cisco Catalyst SD-WAN Manager
|
— | 31.4% | 20 Apr 2026 | — |
| CVE-2025-2749 |
Kentico Xperience Path Traversal Vulnerability
Kentico Xperience
|
— | 3.9% | 20 Apr 2026 | — |
| CVE-2023-27351 |
PaperCut NG/MF Improper Authentication Vulnerability
PaperCut NG/MF
|
— | 77.4% | 20 Apr 2026 | CISA: known use |
| CVE-2025-48700 |
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor Zimbra Collaboration Suite (ZCS)
|
— | 1.8% | 20 Apr 2026 | — |
| CVE-2026-20128 |
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Cisco Catalyst SD-WAN Manager
|
— | 6.9% | 20 Apr 2026 | — |
| CVE-2025-32975 |
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
Quest KACE Systems Management Appliance (SMA)
|
— | 2.4% | 20 Apr 2026 | — |
| CVE-2024-27199 |
JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains TeamCity
|
— | 100% | 20 Apr 2026 | CISA: known use |
| CVE-2026-34197 |
Apache ActiveMQ Improper Input Validation Vulnerability
Apache ActiveMQ
|
— | 97.2% | 16 Apr 2026 | — |
| CVE-2009-0238 |
Microsoft Office Remote Code Execution
Microsoft Office
|
— | 43.1% | 14 Apr 2026 | — |
| CVE-2026-32201 |
Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft SharePoint Server
|
— | 22.8% | 14 Apr 2026 | — |
| CVE-2012-1854 |
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft Visual Basic for Applications (VBA)
|
— | 21% | 13 Apr 2026 | — |
| CVE-2025-60710 |
Microsoft Windows Link Following Vulnerability
Microsoft Windows
|
— | 4.6% | 13 Apr 2026 | — |
| CVE-2023-21529 |
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server
|
— | 62.1% | 13 Apr 2026 | CISA: known use |
| CVE-2023-36424 |
Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft Windows
|
— | 12.2% | 13 Apr 2026 | — |
| CVE-2020-9715 |
Adobe Acrobat Use-After-Free Vulnerability
Adobe Acrobat
|
— | 48.4% | 13 Apr 2026 | — |
| CVE-2026-21643 |
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet FortiClient EMS
|
— | 94.1% | 13 Apr 2026 | — |
| CVE-2026-34621 |
Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe Acrobat and Reader
|
— | 7.1% | 13 Apr 2026 | — |
| CVE-2026-1340 |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti Endpoint Manager Mobile (EPMM)
|
— | 84% | 8 Apr 2026 | — |
| CVE-2026-35616 |
Fortinet FortiClient EMS Improper Access Control Vulnerability
Fortinet FortiClient EMS
|
— | 88.9% | 6 Apr 2026 | — |
| CVE-2026-3502 |
TrueConf Client Download of Code Without Integrity Check Vulnerability
TrueConf Client
|
— | 5.8% | 2 Apr 2026 | — |
| CVE-2026-5281 |
Google Dawn Use-After-Free Vulnerability
Google Dawn
|
— | 5% | 1 Apr 2026 | — |
| CVE-2026-3055 |
Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix NetScaler
|
— | 84.5% | 30 Mar 2026 | — |
| CVE-2025-53521 |
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
F5 BIG-IP
|
— | 2.2% | 27 Mar 2026 | — |
| CVE-2026-33634 |
Aquasecurity Trivy Embedded Malicious Code Vulnerability
Aquasecurity Trivy
|
— | 59.2% | 26 Mar 2026 | — |
| CVE-2026-33017 |
Langflow Code Injection Vulnerability
Langflow Langflow
|
— | 99.8% | 25 Mar 2026 | — |
| CVE-2025-32432 |
Craft CMS Code Injection Vulnerability
Craft CMS Craft CMS
|
— | 99.8% | 20 Mar 2026 | — |
| CVE-2025-54068 |
Laravel Livewire Code Injection Vulnerability
Laravel Livewire
|
— | 95.8% | 20 Mar 2026 | — |
| CVE-2025-43510 |
Apple Multiple Products Improper Locking Vulnerability
Apple Multiple Products
|
— | 0.4% | 20 Mar 2026 | — |
| CVE-2025-43520 |
Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple Multiple Products
|
— | 0.4% | 20 Mar 2026 | — |
| CVE-2025-31277 |
Apple Multiple Products Buffer Overflow Vulnerability
Apple Multiple Products
|
— | 1.5% | 20 Mar 2026 | — |
| CVE-2026-20131 |
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrust
Cisco Secure Firewall Management Center (FMC)
|
— | 28.2% | 19 Mar 2026 | CISA: known use |
| CVE-2025-66376 |
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor Zimbra Collaboration Suite (ZCS)
|
— | 22% | 18 Mar 2026 | — |
| CVE-2026-20963 |
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint
|
— | 31.1% | 18 Mar 2026 | — |
| CVE-2025-47813 |
Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server Wing FTP Server
|
— | 61.3% | 16 Mar 2026 | — |
Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.