CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 241–300 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability HIGH7.8	Cisco SD-WAN Path Traversal Vulnerability Cisco SD-WAN	HIGH 7.8	12%	25 Feb 2026	—
CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability CRITICAL10	Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco Catalyst SD-WAN Controller and Manager	CRITICAL 10	87.6%	25 Feb 2026	—
CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability HIGH8.8	Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K FileZen	HIGH 8.8	5.2%	24 Feb 2026	—
CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability CRITICAL9.9	RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube Webmail	CRITICAL 9.9	99.5%	20 Feb 2026	—
CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability HIGH7.2	RoundCube Webmail Cross-site Scripting Vulnerability Roundcube Webmail	HIGH 7.2	27.4%	20 Feb 2026	—
CVE-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability MEDIUM6.8	GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab GitLab	MEDIUM 6.8	53.4%	18 Feb 2026	—
CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability CRITICAL10	Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell RecoverPoint for Virtual Machines (RP4VMs)	CRITICAL 10	13.5%	18 Feb 2026	—
CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability CRITICAL9.8	Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Synacor Zimbra Collaboration Suite	CRITICAL 9.8	93.6%	17 Feb 2026	—
CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability HIGH7.2	TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 ThreatSonar Anti-Ransomware	HIGH 7.2	1.8%	17 Feb 2026	—
CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability HIGH8.8	Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft Windows	HIGH 8.8	76.6%	17 Feb 2026	—
CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability HIGH8.8	Google Chromium CSS Use-After-Free Vulnerability Google Chromium	HIGH 8.8	55%	17 Feb 2026	—
CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability CRITICAL9.8	BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)	CRITICAL 9.8	93.9%	13 Feb 2026	Medusa
CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability HIGH7.8	Apple Multiple Buffer Overflow Vulnerability Apple Multiple Products	HIGH 7.8	1.7%	12 Feb 2026	—
CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability CRITICAL9.8	Microsoft Configuration Manager SQL Injection Vulnerability Microsoft Configuration Manager	CRITICAL 9.8	81%	12 Feb 2026	—
CVE-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability HIGH7.5	Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ Notepad++	HIGH 7.5	1.7%	12 Feb 2026	—
CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability HIGH8.1	SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds Web Help Desk	HIGH 8.1	73.6%	12 Feb 2026	—
CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability HIGH8.8	Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft Windows	HIGH 8.8	15.9%	10 Feb 2026	—
CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability MEDIUM6.2	Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft Windows	MEDIUM 6.2	5%	10 Feb 2026	—
CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability HIGH8.8	Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft Windows	HIGH 8.8	61.2%	10 Feb 2026	—
CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability HIGH7.8	Microsoft Windows Improper Privilege Management Vulnerability Microsoft Windows	HIGH 7.8	4.3%	10 Feb 2026	—
CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability HIGH7.8	Microsoft Windows Type Confusion Vulnerability Microsoft Windows	HIGH 7.8	2.6%	10 Feb 2026	—
CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability HIGH7.8	Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft Office	HIGH 7.8	1.6%	10 Feb 2026	—
CVE-2025-11953 React Native Community CLI OS Command Injection Vulnerability CRITICAL9.8	React Native Community CLI OS Command Injection Vulnerability React Native Community CLI	CRITICAL 9.8	94%	5 Feb 2026	—
CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL9.8	SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools SmarterMail	CRITICAL 9.8	88.2%	5 Feb 2026	Qilin
CVE-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability MEDIUM6.8	GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab Community and Enterprise Editions	MEDIUM 6.8	36.1%	3 Feb 2026	—
CVE-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability HIGH7.2	Sangoma FreePBX OS Command Injection Vulnerability Sangoma FreePBX	HIGH 7.2	84.6%	3 Feb 2026	—
CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability CRITICAL9.8	Sangoma FreePBX Improper Authentication Vulnerability Sangoma FreePBX	CRITICAL 9.8	54.7%	3 Feb 2026	—
CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL9.8	SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds Web Help Desk	CRITICAL 9.8	84.2%	3 Feb 2026	Warlock
CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CRITICAL9.8	Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile (EPMM)	CRITICAL 9.8	98.7%	29 Jan 2026	—
CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL9.8	Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet Multiple Products	CRITICAL 9.8	86.6%	27 Jan 2026	—
CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability HIGH7.8	Linux Kernel Integer Overflow Vulnerability Linux Kernel	HIGH 7.8	14.7%	26 Jan 2026	—
CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL10	SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools SmarterMail	CRITICAL 10	85.7%	26 Jan 2026	CISA: known use
CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL9.8	SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools SmarterMail	CRITICAL 9.8	96.4%	26 Jan 2026	Warlock
CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability CRITICAL9.8	GNU InetUtils Argument Injection Vulnerability GNU InetUtils	CRITICAL 9.8	99%	26 Jan 2026	Qilin
CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH7.8	Microsoft Office Security Feature Bypass Vulnerability Microsoft Office	HIGH 7.8	70.8%	26 Jan 2026	—
CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL9.8	Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom VMware vCenter Server	CRITICAL 9.8	22.4%	23 Jan 2026	—
CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability HIGH8.8	Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	HIGH 8.8	48.9%	22 Jan 2026	—
CVE-2025-34026 Versa Concerto Improper Authentication Vulnerability HIGH7.5	Versa Concerto Improper Authentication Vulnerability Versa Concerto	HIGH 7.5	81.8%	22 Jan 2026	—
CVE-2025-31125 Vite Vitejs Improper Access Control Vulnerability MEDIUM5.3	Vite Vitejs Improper Access Control Vulnerability Vite Vitejs	MEDIUM 5.3	74.9%	22 Jan 2026	—
CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability HIGH7.5	Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier eslint-config-prettier	HIGH 7.5	5.1%	22 Jan 2026	—
CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability HIGH8.2	Cisco Unified Communications Products Code Injection Vulnerability Cisco Unified Communications Manager	HIGH 8.2	4.5%	21 Jan 2026	Shinyhunters
CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability MEDIUM5.5	Microsoft Windows Information Disclosure Vulnerability Microsoft Windows	MEDIUM 5.5	7.5%	13 Jan 2026	—
CVE-2025-8110 Gogs Path Traversal Vulnerability HIGH8.8	Gogs Path Traversal Vulnerability Gogs Gogs	HIGH 8.8	85.2%	12 Jan 2026	—
CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability HIGH8.8	Microsoft Office PowerPoint Code Injection Vulnerability Microsoft Office	HIGH 8.8	67.3%	7 Jan 2026	—
CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability CRITICAL10	Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) OneView	CRITICAL 10	90.2%	7 Jan 2026	—
CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability HIGH7.5	MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB and MongoDB Server	HIGH 7.5	83.2%	29 Dec 2025	—
CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability HIGH8.8	Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever DS-2105 Pro	HIGH 8.8	96.9%	22 Dec 2025	—
CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability CRITICAL9.8	WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard Firebox	CRITICAL 9.8	29.4%	19 Dec 2025	Qilin
CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability CRITICAL9.8	ASUS Live Update Embedded Malicious Code Vulnerability ASUS Live Update	CRITICAL 9.8	1.2%	17 Dec 2025	—
CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability MEDIUM6.6	SonicWall SMA1000 Missing Authorization Vulnerability SonicWall SMA1000 appliance	MEDIUM 6.6	2.8%	17 Dec 2025	—
CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability CRITICAL10	Cisco Multiple Products Improper Input Validation Vulnerability Cisco Multiple Products	CRITICAL 10	32.4%	17 Dec 2025	—
CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability CRITICAL9.8	Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet Multiple Products	CRITICAL 9.8	68.3%	16 Dec 2025	Qilin
CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability CRITICAL9.8	Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet CentreStack and Triofox	CRITICAL 9.8	53.3%	15 Dec 2025	Warlock
CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability HIGH8.8	Apple Multiple Products Use-After-Free WebKit Vulnerability Apple Multiple Products	HIGH 8.8	25.7%	15 Dec 2025	—
CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability HIGH8.8	Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability Sierra Wireless AirLink ALEOS	HIGH 8.8	27.3%	12 Dec 2025	—
CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability HIGH8.8	Google Chromium Out of Bounds Memory Access Vulnerability Google Chromium	HIGH 8.8	55.3%	12 Dec 2025	—
CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability HIGH8.2	OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo GeoServer	HIGH 8.2	61.2%	11 Dec 2025	—
CVE-2025-6218 RARLAB WinRAR Path Traversal Vulnerability HIGH7.8	RARLAB WinRAR Path Traversal Vulnerability RARLAB WinRAR	HIGH 7.8	90.5%	9 Dec 2025	—
CVE-2025-62221 Microsoft Windows Use After Free Vulnerability HIGH7.8	Microsoft Windows Use After Free Vulnerability Microsoft Windows	HIGH 7.8	2.5%	9 Dec 2025	—
CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability CRITICAL9.8	D-Link Routers Buffer Overflow Vulnerability D-Link Routers	CRITICAL 9.8	55.5%	8 Dec 2025	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.