Exploited Vulnerabilities DailyVulnerabilities added to KEV in February 2026
Added28
Ransomware-linked2
Vendors16
By vendor
8
2
2
2
2
2
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | 2026-02-25 | 88.4% | Unknown |
| CVE-2022-20775 | Cisco SD-WAN | 2026-02-25 | 12.4% | Unknown |
| CVE-2026-25108 | Soliton Systems K.K FileZen | 2026-02-24 | 5.1% | Unknown |
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 26.8% | Unknown |
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 98.9% | Unknown |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | 13.3% | Unknown |
| CVE-2021-22175 | GitLab GitLab | 2026-02-18 | 53.3% | Unknown |
| CVE-2026-2441 | Google Chromium | 2026-02-17 | 55.1% | Unknown |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | 2026-02-17 | 1.7% | Unknown |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | 2026-02-17 | 84.4% | Unknown |
| CVE-2008-0015 | Microsoft Windows | 2026-02-17 | 76.5% | Unknown |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 90.8% | Known |
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 1.3% | Unknown |
| CVE-2025-40536 | SolarWinds Web Help Desk | 2026-02-12 | 73.5% | Unknown |
| CVE-2025-15556 | Notepad++ Notepad++ | 2026-02-12 | 1.7% | Unknown |
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 81.0% | Unknown |
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 4.1% | Unknown |
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 4.8% | Unknown |
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2.4% | Unknown |
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 1.6% | Unknown |
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 15.8% | Unknown |
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 24.5% | Unknown |
| CVE-2026-24423 | SmarterTools SmarterMail | 2026-02-05 | 88.1% | Known |
| CVE-2025-11953 | React Native Community CLI | 2026-02-05 | 93.9% | Unknown |
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 84.6% | Unknown |
| CVE-2025-40551 | SolarWinds Web Help Desk | 2026-02-03 | 84.1% | Unknown |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | 2026-02-03 | 36.1% | Unknown |
| CVE-2019-19006 | Sangoma FreePBX | 2026-02-03 | 55.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.