CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 181–240 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability HIGH7.2	Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti Endpoint Manager Mobile (EPMM)	HIGH 7.2	34.5%	7 May 2026	—
CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability CRITICAL9.8	Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks PAN-OS	CRITICAL 9.8	41.7%	6 May 2026	—
CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability HIGH7.8	Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux Kernel	HIGH 7.8	98.1%	1 May 2026	—
CVE-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability CRITICAL9.8	WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros cPanel & WHM and WP2 (WordPress Squared)	CRITICAL 9.8	98.5%	30 Apr 2026	Thegentlemen
CVE-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability HIGH8.4	ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise ScreenConnect	HIGH 8.4	95.4%	28 Apr 2026	Rhysida Spacebears +3
CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability MEDIUM4.3	Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft Windows	MEDIUM 4.3	70.9%	28 Apr 2026	—
CVE-2025-29635 D-Link DIR-823X Command Injection Vulnerability HIGH7.2	D-Link DIR-823X Command Injection Vulnerability D-Link DIR-823X	HIGH 7.2	87.9%	24 Apr 2026	—
CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability HIGH8.8	Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung MagicINFO 9 Server	HIGH 8.8	91.9%	24 Apr 2026	—
CVE-2024-57728 SimpleHelp Path Traversal Vulnerability HIGH7.2	SimpleHelp Path Traversal Vulnerability SimpleHelp SimpleHelp	HIGH 7.2	64.5%	24 Apr 2026	Dragonforce
CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability CRITICAL9.9	SimpleHelp Missing Authorization Vulnerability SimpleHelp SimpleHelp	CRITICAL 9.9	66.4%	24 Apr 2026	Dragonforce
CVE-2026-39987 Marimo Remote Code Execution Vulnerability CRITICAL9.8	Marimo Remote Code Execution Vulnerability Marimo Marimo	CRITICAL 9.8	99.7%	23 Apr 2026	—
CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability HIGH7.8	Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft Defender	HIGH 7.8	6.7%	22 Apr 2026	CISA: known use
CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability MEDIUM5.4	Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco Catalyst SD-WAN Manger	MEDIUM 5.4	25.8%	20 Apr 2026	—
CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability MEDIUM6.5	Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco Catalyst SD-WAN Manager	MEDIUM 6.5	35.3%	20 Apr 2026	—
CVE-2025-2749 Kentico Xperience Path Traversal Vulnerability HIGH7.2	Kentico Xperience Path Traversal Vulnerability Kentico Xperience	HIGH 7.2	4%	20 Apr 2026	—
CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability HIGH7.5	PaperCut NG/MF Improper Authentication Vulnerability PaperCut NG/MF	HIGH 7.5	78.1%	20 Apr 2026	Clop
CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability MEDIUM6.1	Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	MEDIUM 6.1	1.7%	20 Apr 2026	—
CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability HIGH7.5	Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco Catalyst SD-WAN Manager	HIGH 7.5	8.3%	20 Apr 2026	—
CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability CRITICAL10	Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest KACE Systems Management Appliance (SMA)	CRITICAL 10	2.5%	20 Apr 2026	—
CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability HIGH7.3	JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains TeamCity	HIGH 7.3	100%	20 Apr 2026	CISA: known use
CVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability HIGH8.8	Apache ActiveMQ Improper Input Validation Vulnerability Apache ActiveMQ	HIGH 8.8	98.3%	16 Apr 2026	—
CVE-2009-0238 Microsoft Office Remote Code Execution HIGH8.8	Microsoft Office Remote Code Execution Microsoft Office	HIGH 8.8	42.9%	14 Apr 2026	—
CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability MEDIUM6.5	Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft SharePoint Server	MEDIUM 6.5	43.4%	14 Apr 2026	—
CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability HIGH7.8	Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft Visual Basic for Applications (VBA)	HIGH 7.8	20.9%	13 Apr 2026	—
CVE-2025-60710 Microsoft Windows Link Following Vulnerability HIGH7.8	Microsoft Windows Link Following Vulnerability Microsoft Windows	HIGH 7.8	4.6%	13 Apr 2026	Rhysida Spacebears +2
CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability HIGH8.8	Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft Exchange Server	HIGH 8.8	59.3%	13 Apr 2026	Rhysida Spacebears +3
CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability HIGH7.8	Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft Windows	HIGH 7.8	12.1%	13 Apr 2026	—
CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability HIGH7.8	Adobe Acrobat Use-After-Free Vulnerability Adobe Acrobat	HIGH 7.8	33.3%	13 Apr 2026	—
CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability CRITICAL9.8	Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClient EMS	CRITICAL 9.8	97.7%	13 Apr 2026	—
CVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability HIGH8.6	Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe Acrobat and Reader	HIGH 8.6	7.2%	13 Apr 2026	—
CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL9.8	Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile (EPMM)	CRITICAL 9.8	98.6%	8 Apr 2026	—
CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability CRITICAL9.8	Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet FortiClient EMS	CRITICAL 9.8	94%	6 Apr 2026	Thegentlemen
CVE-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability HIGH7.8	TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf Client	HIGH 7.8	5.8%	2 Apr 2026	—
CVE-2026-5281 Google Dawn Use-After-Free Vulnerability HIGH8.8	Google Dawn Use-After-Free Vulnerability Google Dawn	HIGH 8.8	13.7%	1 Apr 2026	—
CVE-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability CRITICAL9.8	Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix NetScaler	CRITICAL 9.8	91.5%	30 Mar 2026	—
CVE-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability CRITICAL9.8	F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 BIG-IP	CRITICAL 9.8	2.3%	27 Mar 2026	—
CVE-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability HIGH8.8	Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity Trivy	HIGH 8.8	59.7%	26 Mar 2026	—
CVE-2026-33017 Langflow Code Injection Vulnerability CRITICAL9.8	Langflow Code Injection Vulnerability Langflow Langflow	CRITICAL 9.8	96.4%	25 Mar 2026	—
CVE-2025-32432 Craft CMS Code Injection Vulnerability CRITICAL10	Craft CMS Code Injection Vulnerability Craft CMS Craft CMS	CRITICAL 10	99.8%	20 Mar 2026	—
CVE-2025-54068 Laravel Livewire Code Injection Vulnerability CRITICAL9.8	Laravel Livewire Code Injection Vulnerability Laravel Livewire	CRITICAL 9.8	96.3%	20 Mar 2026	—
CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability HIGH7.8	Apple Multiple Products Improper Locking Vulnerability Apple Multiple Products	HIGH 7.8	0.4%	20 Mar 2026	—
CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability MEDIUM5.5	Apple Multiple Products Classic Buffer Overflow Vulnerability Apple Multiple Products	MEDIUM 5.5	0.4%	20 Mar 2026	—
CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability HIGH8.8	Apple Multiple Products Buffer Overflow Vulnerability Apple Multiple Products	HIGH 8.8	1.7%	20 Mar 2026	—
CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrust CRITICAL10	Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrust Cisco Secure Firewall Management Center (FMC)	CRITICAL 10	44.4%	19 Mar 2026	Interlock Panzer
CVE-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability HIGH7.2	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	HIGH 7.2	20.2%	18 Mar 2026	—
CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint	CRITICAL 9.8	29.2%	18 Mar 2026	—
CVE-2025-47813 Wing FTP Server Information Disclosure Vulnerability MEDIUM4.3	Wing FTP Server Information Disclosure Vulnerability Wing FTP Server Wing FTP Server	MEDIUM 4.3	62.5%	16 Mar 2026	—
CVE-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability HIGH8.8	Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google Chromium V8	HIGH 8.8	2.7%	13 Mar 2026	—
CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability HIGH8.8	Google Skia Out-of-Bounds Write Vulnerability Google Skia	HIGH 8.8	2.3%	13 Mar 2026	—
CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability CRITICAL9.9	n8n Improper Control of Dynamically-Managed Code Resources Vulnerability n8n n8n	CRITICAL 9.9	99%	11 Mar 2026	—
CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery HIGH7.5	Omnissa Workspace ONE Server-Side Request Forgery Omnissa Workspace One UEM	HIGH 7.5	99.7%	9 Mar 2026	—
CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL9.8	SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk	CRITICAL 9.8	90.6%	9 Mar 2026	CISA: known use
CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability HIGH8.6	Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti Endpoint Manager (EPM)	HIGH 8.6	88.3%	9 Mar 2026	—
CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability CRITICAL9.8	Hikvision Multiple Products Improper Authentication Vulnerability Hikvision Multiple Products	CRITICAL 9.8	100%	5 Mar 2026	—
CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability CRITICAL9.8	Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwell Multiple Products	CRITICAL 9.8	63.6%	5 Mar 2026	—
CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability HIGH8.8	Apple Multiple products Use-After-Free Vulnerability Apple Multiple Products	HIGH 8.8	4%	5 Mar 2026	—
CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability HIGH7.8	Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple Multiple Products	HIGH 7.8	7%	5 Mar 2026	—
CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability HIGH7.8	Apple iOS and iPadOS Use-After-Free Vulnerability Apple iOS and iPadOS	HIGH 7.8	2%	5 Mar 2026	—
CVE-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability HIGH8.1	Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom VMware Aria Operations	HIGH 8.1	18.3%	3 Mar 2026	—
CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability HIGH7.8	Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm Multiple Chipsets	HIGH 7.8	1.3%	3 Mar 2026	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.