CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 61–120 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability CRITICAL9.9	ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability ConnectWise ScreenConnect	CRITICAL 9.9	0.9%	11 Sep 2026	—
CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability HIGH8.1	JFrog Artifactory Incorrect Authorization Vulnerability JFrog Artifactory	HIGH 8.1	8.6%	11 Sep 2026	—
CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability HIGH7.5	JFrog Artifactory Improper Authentication Vulnerability JFrog Artifactory	HIGH 7.5	10%	11 Sep 2026	—
CVE-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability CRITICAL10	GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability GitLab Community Edition and Enterprise Edition	CRITICAL 10	97.4%	11 Sep 2026	—
CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CRITICAL9.8	MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability MikroTik RouterOS	CRITICAL 9.8	6.4%	10 Sep 2026	—
CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability HIGH8.2	MikroTik RouterOS Missing Authentication for Critical Function Vulnerability MikroTik RouterOS	HIGH 8.2	1.6%	10 Sep 2026	—
CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL9.8	Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Citrix NetScaler	CRITICAL 9.8	32.7%	9 Sep 2026	—
CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability HIGH8.1	Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Fortinet Multiple Products	HIGH 8.1	3.7%	9 Sep 2026	—
CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability HIGH8.8	Google Chromium V8 Out of Bounds Write Vulnerability Google Chromium V8	HIGH 8.8	3.5%	9 Sep 2026	—
CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL10	Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management	CRITICAL 10	88.7%	9 Sep 2026	Qilin
CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL10	Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Adobe Commerce and Magento	CRITICAL 10	99.4%	8 Sep 2026	—
CVE-2026-81963 Microsoft Windows Link Following Vulnerability HIGH7.8	Microsoft Windows Link Following Vulnerability Microsoft Windows	HIGH 7.8	0.4%	8 Sep 2026	—
CVE-2026-86218 N-able N-central Static Code Injection Vulnerability CRITICAL9.8	N-able N-central Static Code Injection Vulnerability N-able N-central	CRITICAL 9.8	15.4%	8 Sep 2026	—
CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability HIGH7.8	Microsoft Windows Heap-Based Buffer Overflow Vulnerability Microsoft Windows	HIGH 7.8	0.4%	8 Sep 2026	—
CVE-2026-85046 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	1.8%	4 Sep 2026	—
CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability HIGH8.2	BerriAI LiteLLM Improper Authentication Vulnerability BerriAI LiteLLM	HIGH 8.2	0.8%	2 Sep 2026	—
CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability MEDIUM6.5	Kludex Starlette HTTP Request/Response Smuggling Vulnerability Kludex Starlette	MEDIUM 6.5	70.3%	2 Sep 2026	—
CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CRITICAL10	Kestra OSS OS Command Injection Vulnerability Kestra OSS	CRITICAL 10	2.1%	2 Sep 2026	—
CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CRITICAL9.8	JFrog Artifactory Improper Authentication Vulnerability JFrog Artifactory	CRITICAL 9.8	14.4%	2 Sep 2026	—
CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CRITICAL9.8	Sangoma Switchvox SQL Injection Vulnerability Sangoma Switchvox	CRITICAL 9.8	19%	2 Sep 2026	—
CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL10	SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall SMA1000 Appliances	CRITICAL 10	8%	2 Sep 2026	—
CVE-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability HIGH7.8	SonicWall SMA1000 Appliances OS Command Injection Vulnerability SonicWall SMA1000 Appliances	HIGH 7.8	9.9%	2 Sep 2026	—
CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability CRITICAL9.1	PaperCut NG/MF Unsafe Reflection Vulnerability PaperCut NG/MF	CRITICAL 9.1	63%	31 Aug 2026	—
CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CRITICAL9.8	PaperCut NG/MF Missing Authentication for Critical Function Vulnerability PaperCut NG/MF	CRITICAL 9.8	84.7%	31 Aug 2026	—
CVE-2023-49105 ownCloud Improper Authentication Vulnerability CRITICAL9.8	ownCloud Improper Authentication Vulnerability ownCloud ownCloud	CRITICAL 9.8	43.2%	27 Aug 2026	—
CVE-2026-53362 Linux Kernel Unspecified Vulnerability HIGH7.8	Linux Kernel Unspecified Vulnerability Linux Kernel	HIGH 7.8	0.7%	27 Aug 2026	—
CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability MEDIUM5.3	JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability JFrog Artifactory	MEDIUM 5.3	0.7%	27 Aug 2026	—
CVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability HIGH8.1	Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Ajax.NET Professional Ajax.NET Professional	HIGH 8.1	82.6%	26 Aug 2026	—
CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability MEDIUM5.1	Red Hat Libuser Race Condition Vulnerability Red Hat Libuser	MEDIUM 5.1	8.5%	26 Aug 2026	—
CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability HIGH7.8	Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Red Hat Automatic Bug Reporting Tool	HIGH 7.8	5%	26 Aug 2026	—
CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability HIGH7.8	Linux Kernel Out-of-Bounds Write Vulnerability Linux Kernel	HIGH 7.8	8.9%	26 Aug 2026	—
CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL9.8	Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix NetScaler ADC and NetScaler Gateway	CRITICAL 9.8	1%	26 Aug 2026	—
CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability HIGH8.8	Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server	HIGH 8.8	57.3%	26 Aug 2026	—
CVE-2026-60004 Gitea Code Injection Vulnerability CRITICAL9.8	Gitea Code Injection Vulnerability Gitea Gitea	CRITICAL 9.8	24%	25 Aug 2026	—
CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL10	Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in	CRITICAL 10	73.2%	24 Aug 2026	—
CVE-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability HIGH8.9	Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	HIGH 8.9	71.7%	21 Aug 2026	—
CVE-2026-72530 TrueConf Server Code Injection Vulnerability CRITICAL9	TrueConf Server Code Injection Vulnerability TrueConf Server	CRITICAL 9	1.7%	20 Aug 2026	—
CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability CRITICAL9.8	TrueConf Server Missing Authentication for Critical Function Vulnerability TrueConf Server	CRITICAL 9.8	1.5%	20 Aug 2026	—
CVE-2026-64849 MLflow Server-Side Request Forgery Vulnerability CRITICAL9.3	MLflow Server-Side Request Forgery Vulnerability MLflow MLflow	CRITICAL 9.3	10%	19 Aug 2026	—
CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability CRITICAL9.8	Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft Internet Key Exchange (IKE) Service Extensions	CRITICAL 9.8	77.1%	18 Aug 2026	—
CVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL9.8	Broadcom VMware vCenter Path Traversal Vulnerability Broadcom VMware vCenter	CRITICAL 9.8	61.7%	18 Aug 2026	CISA: known use
CVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CRITICAL9.1	Microsoft SharePoint Weak Authentication Vulnerability Microsoft SharePoint	CRITICAL 9.1	69.5%	18 Aug 2026	—
CVE-2026-65400 Apple macOS Improper Authentication Vulnerability CRITICAL9.8	Apple macOS Improper Authentication Vulnerability Apple macOS	CRITICAL 9.8	1.7%	18 Aug 2026	—
CVE-2025-62593 Ray-Project Ray Code Injection Vulnerability HIGH8.8	Ray-Project Ray Code Injection Vulnerability Ray-Project Ray	HIGH 8.8	60.2%	17 Aug 2026	—
CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability HIGH8.6	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)	HIGH 8.6	1%	11 Aug 2026	—
CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability HIGH7	Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft Windows Ancillary Function Driver for WinSock	HIGH 7	8.6%	11 Aug 2026	—
CVE-2026-72898 Metabase SQL Injection Vulnerability CRITICAL10	Metabase SQL Injection Vulnerability Metabase Metabase	CRITICAL 10	98.8%	11 Aug 2026	—
CVE-2026-8037 Progress LoadMaster Command Injection Vulnerability CRITICAL9.6	Progress LoadMaster Command Injection Vulnerability Progress LoadMaster	CRITICAL 9.6	99.8%	7 Aug 2026	—
CVE-2026-63077 JetBrains TeamCity Deserialization of Untrusted Data Vulnerability CRITICAL9.8	JetBrains TeamCity Deserialization of Untrusted Data Vulnerability JetBrains TeamCity	CRITICAL 9.8	94.9%	5 Aug 2026	CISA: known use
CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH7.4	N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central	HIGH 7.4	7.9%	4 Aug 2026	—
CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability HIGH7.5	Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apache Tomcat	HIGH 7.5	98.5%	4 Aug 2026	—
CVE-2026-9198 IBM Langflow Code Injection Vulnerability CRITICAL9.8	IBM Langflow Code Injection Vulnerability IBM Langflow	CRITICAL 9.8	28.7%	4 Aug 2026	—
CVE-2026-18577 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH8.1	N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able N-central	HIGH 8.1	14.6%	3 Aug 2026	—
CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability MEDIUM5.3	Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Cisco Secure Firewall Management Center (FMC)	MEDIUM 5.3	35.1%	29 Jul 2026	CISA: known use
CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability MEDIUM5.9	Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Fortinet FortiOS	MEDIUM 5.9	29.5%	27 Jul 2026	—
CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability CRITICAL10	Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista VeloCloud Orchestrator	CRITICAL 10	1.8%	27 Jul 2026	—
CVE-2026-16232 Check Point SmartConsole Improper Authentication Vulnerability CRITICAL9.8	Check Point SmartConsole Improper Authentication Vulnerability Check Point SmartConsole	CRITICAL 9.8	3.5%	22 Jul 2026	—
CVE-2026-50522 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint	CRITICAL 9.8	3%	22 Jul 2026	—
CVE-2026-60137 WordPress Core SQL Injection Vulnerability MEDIUM5.9	WordPress Core SQL Injection Vulnerability WordPress Core	MEDIUM 5.9	5.3%	21 Jul 2026	—
CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability CRITICAL9.8	WordPress Core Interpretation Conflict Vulnerability WordPress Core	CRITICAL 9.8	10.6%	21 Jul 2026	Thegentlemen

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.