CVEs from 2026 known to be exploited
Entries169
Ransomware-linked18
Avg. lag0.0 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-88779 | Citrix NetScaler | 2026-10-04 | 0.5% | Unknown |
| CVE-2026-102490 | Zammad GmbH Zammad | 2026-10-02 | 0.5% | Unknown |
| CVE-2026-102489 | Zammad GmbH Zammad | 2026-10-02 | 1.2% | Unknown |
| CVE-2026-104286 | Fortinet FortiMail | 2026-10-01 | 2.2% | Unknown |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | 2026-09-30 | 1.8% | Unknown |
| CVE-2026-86950 | Apple Multiple Products | 2026-09-29 | 1.2% | Unknown |
| CVE-2026-88772 | Citrix NetScaler | 2026-09-27 | 1.3% | Unknown |
| CVE-2026-88771 | Citrix NetScaler | 2026-09-27 | 1.0% | Unknown |
| CVE-2026-87902 | WordPress Core | 2026-09-25 | 39.9% | Unknown |
| CVE-2026-67279 | MikroTik RouterOS | 2026-09-25 | 1.0% | Unknown |
| CVE-2026-65660 | Microsoft SharePoint | 2026-09-25 | 2.1% | Unknown |
| CVE-2026-71362 | Adobe Commerce and Magento | 2026-09-24 | 87.5% | Unknown |
| CVE-2026-5430 | WSO2 Multiple Products | 2026-09-24 | 0.5% | Unknown |
| CVE-2026-94127 | F5 BIG-IP APM | 2026-09-22 | 2.2% | Unknown |
| CVE-2026-93952 | Arista VeloCloud Orchestrator | 2026-09-22 | 1.0% | Unknown |
| CVE-2026-93616 | Check Point Multiple Products | 2026-09-22 | 19.6% | Unknown |
| CVE-2026-85102 | Check Point Multiple Products | 2026-09-22 | 7.5% | Unknown |
| CVE-2026-7273 | Zyxel GS1900 Series Switches | 2026-09-21 | 2.5% | Unknown |
| CVE-2026-53266 | Linux Kernel | 2026-09-18 | 0.8% | Unknown |
| CVE-2026-87886 | Acronis Backup | 2026-09-16 | 0.2% | Unknown |
| CVE-2026-76460 | Cisco Identity Services Engine | 2026-09-16 | 14.0% | Unknown |
| CVE-2026-58704 | Google Pixel | 2026-09-16 | 0.5% | Unknown |
| CVE-2026-76461 | Cisco Secure Email Gateway | 2026-09-14 | 28.2% | Unknown |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | 2026-09-11 | 92.9% | Unknown |
| CVE-2026-84869 | ConnectWise ScreenConnect | 2026-09-11 | 0.9% | Unknown |
| CVE-2026-42018 | JFrog Artifactory | 2026-09-11 | 9.8% | Unknown |
| CVE-2026-42016 | JFrog Artifactory | 2026-09-11 | 8.6% | Unknown |
| CVE-2026-86060 | MikroTik RouterOS | 2026-09-10 | 6.3% | Unknown |
| CVE-2026-67277 | MikroTik RouterOS | 2026-09-10 | 1.5% | Unknown |
| CVE-2026-87491 | Google Chromium V8 | 2026-09-09 | 3.1% | Unknown |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | 88.1% | Unknown |
| CVE-2026-19490 | Citrix NetScaler | 2026-09-09 | 23.1% | Unknown |
| CVE-2026-86218 | N-able N-central | 2026-09-08 | 12.9% | Unknown |
| CVE-2026-85880 | Microsoft Windows | 2026-09-08 | 3.6% | Unknown |
| CVE-2026-81963 | Microsoft Windows | 2026-09-08 | 0.3% | Unknown |
| CVE-2026-75650 | Adobe Commerce and Magento | 2026-09-08 | 3.9% | Unknown |
| CVE-2026-85046 | Google Chromium V8 | 2026-09-04 | 48.8% | Unknown |
| CVE-2026-9586 | Sangoma Switchvox | 2026-09-02 | 18.9% | Unknown |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 2026-09-02 | 10.7% | Unknown |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 2026-09-02 | 8.7% | Unknown |
| CVE-2026-82329 | JFrog Artifactory | 2026-09-02 | 14.1% | Unknown |
| CVE-2026-59822 | BerriAI LiteLLM | 2026-09-02 | 0.8% | Unknown |
| CVE-2026-49869 | Kestra Kestra OSS | 2026-09-02 | 2.0% | Unknown |
| CVE-2026-48710 | Kludex Starlette | 2026-09-02 | 7.0% | Unknown |
| CVE-2026-82078 | PaperCut NG/MF | 2026-08-31 | 63.5% | Unknown |
| CVE-2026-81578 | PaperCut NG/MF | 2026-08-31 | 85.5% | Unknown |
| CVE-2026-66384 | JFrog Artifactory | 2026-08-27 | 0.6% | Unknown |
| CVE-2026-53362 | Linux Kernel | 2026-08-27 | 0.7% | Unknown |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 2026-08-26 | 1.0% | Unknown |
| CVE-2026-60004 | Gitea Gitea | 2026-08-25 | 23.9% | Unknown |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 73.1% | Unknown |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 71.6% | Unknown |
| CVE-2026-72530 | TrueConf Server | 2026-08-20 | 1.6% | Unknown |
| CVE-2026-72529 | TrueConf Server | 2026-08-20 | 1.4% | Unknown |
| CVE-2026-64849 | MLflow MLflow | 2026-08-19 | 9.8% | Unknown |
| CVE-2026-65400 | Apple macOS | 2026-08-18 | 1.7% | Unknown |
| CVE-2026-59310 | Broadcom VMware vCenter | 2026-08-18 | 2.5% | Known |
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | 69.5% | Unknown |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | 1.6% | Unknown |
| CVE-2026-72898 | Metabase Metabase | 2026-08-11 | 19.0% | Unknown |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | 2026-08-11 | 0.3% | Unknown |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 1.0% | Unknown |
| CVE-2026-8037 | Progress LoadMaster | 2026-08-07 | 77.3% | Unknown |
| CVE-2026-63077 | JetBrains TeamCity | 2026-08-05 | 89.5% | Known |
| CVE-2026-9198 | IBM Langflow | 2026-08-04 | 28.6% | Unknown |
| CVE-2026-34486 | Apache Tomcat | 2026-08-04 | 6.5% | Unknown |
| CVE-2026-18556 | N-able N-central | 2026-08-04 | 7.8% | Unknown |
| CVE-2026-18577 | N-able N-central | 2026-08-03 | 14.6% | Unknown |
| CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | 2026-07-29 | 35.0% | Known |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 2026-07-27 | 1.0% | Unknown |
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 3.0% | Unknown |
| CVE-2026-16232 | Check Point SmartConsole | 2026-07-22 | 77.9% | Unknown |
| CVE-2026-63030 | WordPress Core | 2026-07-21 | 10.6% | Unknown |
| CVE-2026-60137 | WordPress Core | 2026-07-21 | 5.3% | Unknown |
| CVE-2026-0770 | Langflow Langflow | 2026-07-21 | 63.0% | Unknown |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 15.8% | Unknown |
| CVE-2026-39808 | Fortinet FortiSandbox | 2026-07-16 | 47.3% | Unknown |
| CVE-2026-25089 | Fortinet FortiSandbox | 2026-07-16 | 76.1% | Unknown |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 0.8% | Unknown |
| CVE-2026-56164 | Microsoft SharePoint Server | 2026-07-14 | 1.0% | Unknown |
| CVE-2026-56155 | Microsoft Active Directory Federation Services | 2026-07-14 | 0.3% | Unknown |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | 2026-07-14 | 11.7% | Known |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | 2026-07-14 | 6.7% | Known |
| CVE-2026-56291 | Balbooa Forms | 2026-07-10 | 14.8% | Unknown |
| CVE-2026-48939 | iCagenda iCagenda | 2026-07-10 | 20.0% | Unknown |
| CVE-2026-56290 | Joomlack Page Builder | 2026-07-07 | 30.8% | Unknown |
| CVE-2026-55255 | Langflow Langflow | 2026-07-07 | 0.8% | Unknown |
| CVE-2026-48908 | JoomShaper SP Page Builder | 2026-07-07 | 88.5% | Unknown |
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 42.3% | Unknown |
| CVE-2026-45659 | Microsoft SharePoint Server | 2026-07-01 | 2.7% | Known |
| CVE-2026-48558 | SimpleHelp SimpleHelp | 2026-06-29 | 5.7% | Unknown |
| CVE-2026-20230 | Cisco Unified Communications Manager | 2026-06-25 | 88.2% | Unknown |
| CVE-2026-12569 | PTC Windchill and FlexPLM | 2026-06-25 | 46.0% | Known |
| CVE-2026-34910 | Ubiquiti UniFi OS | 2026-06-23 | 45.7% | Unknown |
| CVE-2026-34909 | Ubiquiti UniFi OS | 2026-06-23 | 1.7% | Unknown |
| CVE-2026-34908 | Ubiquiti UniFi OS | 2026-06-23 | 15.2% | Unknown |
| CVE-2026-20253 | Splunk Enterprise | 2026-06-18 | 96.9% | Unknown |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 2026-06-16 | 16.1% | Unknown |
| CVE-2026-54420 | LiteSpeed cPanel Plugin | 2026-06-15 | 0.8% | Unknown |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | 2026-06-15 | 28.1% | Unknown |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 9.4% | Known |
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | 99.9% | Unknown |
| CVE-2026-7473 | Arista Extensible Operating System | 2026-06-09 | 0.6% | Unknown |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | 2026-06-09 | 25.3% | Unknown |
| CVE-2026-11645 | Google Chromium V8 | 2026-06-09 | 2.4% | Unknown |
| CVE-2026-50751 | Check Point Security Gateway | 2026-06-08 | 85.3% | Known |
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | 92.5% | Unknown |
| CVE-2026-28318 | SolarWinds Serv-U | 2026-06-05 | 1.9% | Unknown |
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 2026-06-03 | 2.0% | Unknown |
| CVE-2026-0257 | Palo Alto Networks PAN-OS | 2026-05-29 | 96.8% | Known |
| CVE-2026-8398 | Daemon Daemon Tools Lite | 2026-05-27 | 0.9% | Unknown |
| CVE-2026-48027 | Nx Nx Console | 2026-05-27 | 1.3% | Known |
| CVE-2026-45321 | TanStack TanStack | 2026-05-27 | 1.0% | Known |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 2026-05-26 | 1.0% | Unknown |
| CVE-2026-9082 | Drupal Core | 2026-05-22 | 15.7% | Unknown |
| CVE-2026-34926 | Trend Micro Apex One | 2026-05-21 | 0.5% | Unknown |
| CVE-2026-45498 | Microsoft Defender | 2026-05-20 | 1.2% | Unknown |
| CVE-2026-41091 | Microsoft Defender | 2026-05-20 | 0.4% | Unknown |
| CVE-2026-42897 | Microsoft Microsoft | 2026-05-15 | 0.5% | Unknown |
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 2026-05-14 | 91.5% | Unknown |
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | 5.7% | Unknown |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2.5% | Unknown |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 2026-05-06 | 31.7% | Unknown |
| CVE-2026-31431 | Linux Kernel | 2026-05-01 | 3.4% | Unknown |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 98.5% | Known |
| CVE-2026-32202 | Microsoft Windows | 2026-04-28 | 4.9% | Unknown |
| CVE-2026-39987 | Marimo Marimo | 2026-04-23 | 37.8% | Unknown |
| CVE-2026-33825 | Microsoft Defender | 2026-04-22 | 0.3% | Known |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 31.8% | Unknown |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 7.0% | Unknown |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | 2026-04-20 | 24.9% | Unknown |
| CVE-2026-34197 | Apache ActiveMQ | 2026-04-16 | 15.4% | Unknown |
| CVE-2026-32201 | Microsoft SharePoint Server | 2026-04-14 | 43.3% | Unknown |
| CVE-2026-34621 | Adobe Acrobat and Reader | 2026-04-13 | 2.1% | Unknown |
| CVE-2026-21643 | Fortinet FortiClient EMS | 2026-04-13 | 93.8% | Unknown |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | 98.6% | Unknown |
| CVE-2026-35616 | Fortinet FortiClient EMS | 2026-04-06 | 9.0% | Unknown |
| CVE-2026-3502 | TrueConf Client | 2026-04-02 | 0.3% | Unknown |
| CVE-2026-5281 | Google Dawn | 2026-04-01 | 0.7% | Unknown |
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | 4.0% | Unknown |
| CVE-2026-33634 | Aquasecurity Trivy | 2026-03-26 | 1.6% | Unknown |
| CVE-2026-33017 | Langflow Langflow | 2026-03-25 | 24.7% | Unknown |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | 2026-03-19 | 43.1% | Known |
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 29.5% | Unknown |
| CVE-2026-3910 | Google Chromium V8 | 2026-03-13 | 1.0% | Unknown |
| CVE-2026-3909 | Google Skia | 2026-03-13 | 2.3% | Unknown |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | 88.3% | Unknown |
| CVE-2026-22719 | Broadcom VMware Aria Operations | 2026-03-03 | 17.7% | Unknown |
| CVE-2026-21385 | Qualcomm Multiple Chipsets | 2026-03-03 | 1.2% | Unknown |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | 2026-02-25 | 88.4% | Unknown |
| CVE-2026-25108 | Soliton Systems K.K FileZen | 2026-02-24 | 5.1% | Unknown |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | 13.3% | Unknown |
| CVE-2026-2441 | Google Chromium | 2026-02-17 | 55.1% | Unknown |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 90.8% | Known |
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 1.3% | Unknown |
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 4.1% | Unknown |
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 4.8% | Unknown |
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2.4% | Unknown |
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 1.6% | Unknown |
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 15.8% | Unknown |
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 24.5% | Unknown |
| CVE-2026-24423 | SmarterTools SmarterMail | 2026-02-05 | 88.1% | Known |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 98.6% | Unknown |
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 85.7% | Unknown |
| CVE-2026-24061 | GNU InetUtils | 2026-01-26 | 98.9% | Unknown |
| CVE-2026-23760 | SmarterTools SmarterMail | 2026-01-26 | 96.5% | Known |
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 70.7% | Unknown |
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 4.5% | Unknown |
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 7.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
169 CVE-2026 vulnerabilities are in KEV; on average they were listed 0.0 years after the CVE year.