Exploited Vulnerabilities DailyVulnerabilities added to KEV in March 2026
Added26
Ransomware-linked2
Vendors20
By vendor
6
2
1
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | 4.0% | Unknown |
| CVE-2025-53521 | F5 BIG-IP | 2026-03-27 | 2.2% | Unknown |
| CVE-2026-33634 | Aquasecurity Trivy | 2026-03-26 | 1.6% | Unknown |
| CVE-2026-33017 | Langflow Langflow | 2026-03-25 | 24.7% | Unknown |
| CVE-2025-54068 | Laravel Livewire | 2026-03-20 | 97.3% | Unknown |
| CVE-2025-43520 | Apple Multiple Products | 2026-03-20 | 0.4% | Unknown |
| CVE-2025-43510 | Apple Multiple Products | 2026-03-20 | 0.3% | Unknown |
| CVE-2025-32432 | Craft CMS Craft CMS | 2026-03-20 | 99.7% | Unknown |
| CVE-2025-31277 | Apple Multiple Products | 2026-03-20 | 1.6% | Unknown |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | 2026-03-19 | 43.1% | Known |
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 29.5% | Unknown |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 20.2% | Unknown |
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | 2026-03-16 | 63.1% | Unknown |
| CVE-2026-3910 | Google Chromium V8 | 2026-03-13 | 1.0% | Unknown |
| CVE-2026-3909 | Google Skia | 2026-03-13 | 2.3% | Unknown |
| CVE-2025-68613 | n8n n8n | 2026-03-11 | 98.9% | Unknown |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | 88.3% | Unknown |
| CVE-2025-26399 | SolarWinds Web Help Desk | 2026-03-09 | 89.5% | Known |
| CVE-2021-22054 | Omnissa Workspace One UEM | 2026-03-09 | 99.6% | Unknown |
| CVE-2023-43000 | Apple Multiple Products | 2026-03-05 | 4.0% | Unknown |
| CVE-2023-41974 | Apple iOS and iPadOS | 2026-03-05 | 1.9% | Unknown |
| CVE-2021-30952 | Apple Multiple Products | 2026-03-05 | 6.9% | Unknown |
| CVE-2021-22681 | Rockwell Multiple Products | 2026-03-05 | 63.6% | Unknown |
| CVE-2017-7921 | Hikvision Multiple Products | 2026-03-05 | 99.9% | Unknown |
| CVE-2026-22719 | Broadcom VMware Aria Operations | 2026-03-03 | 17.7% | Unknown |
| CVE-2026-21385 | Qualcomm Multiple Chipsets | 2026-03-03 | 1.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.