Exploited Vulnerabilities DailyVulnerabilities added to KEV in April 2026
Added31
Ransomware-linked9
Vendors19
By vendor
8
3
2
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 98.5% | Known |
| CVE-2026-32202 | Microsoft Windows | 2026-04-28 | 4.9% | Unknown |
| CVE-2024-1708 | ConnectWise ScreenConnect | 2026-04-28 | 95.4% | Known |
| CVE-2025-29635 | D-Link DIR-823X | 2026-04-24 | 87.9% | Unknown |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | 2026-04-24 | 91.9% | Unknown |
| CVE-2024-57728 | SimpleHelp SimpleHelp | 2026-04-24 | 64.6% | Known |
| CVE-2024-57726 | SimpleHelp SimpleHelp | 2026-04-24 | 66.6% | Known |
| CVE-2026-39987 | Marimo Marimo | 2026-04-23 | 37.8% | Unknown |
| CVE-2026-33825 | Microsoft Defender | 2026-04-22 | 0.3% | Known |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 31.8% | Unknown |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 7.0% | Unknown |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | 2026-04-20 | 24.9% | Unknown |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 1.7% | Unknown |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | 2026-04-20 | 2.4% | Unknown |
| CVE-2025-2749 | Kentico Kentico Xperience | 2026-04-20 | 4.0% | Unknown |
| CVE-2024-27199 | JetBrains TeamCity | 2026-04-20 | 99.9% | Known |
| CVE-2023-27351 | PaperCut NG/MF | 2026-04-20 | 78.0% | Known |
| CVE-2026-34197 | Apache ActiveMQ | 2026-04-16 | 15.4% | Unknown |
| CVE-2026-32201 | Microsoft SharePoint Server | 2026-04-14 | 43.3% | Unknown |
| CVE-2009-0238 | Microsoft Office | 2026-04-14 | 43.2% | Unknown |
| CVE-2026-34621 | Adobe Acrobat and Reader | 2026-04-13 | 2.1% | Unknown |
| CVE-2026-21643 | Fortinet FortiClient EMS | 2026-04-13 | 93.8% | Unknown |
| CVE-2025-60710 | Microsoft Windows | 2026-04-13 | 4.5% | Known |
| CVE-2023-36424 | Microsoft Windows | 2026-04-13 | 12.1% | Unknown |
| CVE-2023-21529 | Microsoft Exchange Server | 2026-04-13 | 59.2% | Known |
| CVE-2020-9715 | Adobe Acrobat | 2026-04-13 | 48.5% | Unknown |
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | 2026-04-13 | 21.0% | Unknown |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | 98.6% | Unknown |
| CVE-2026-35616 | Fortinet FortiClient EMS | 2026-04-06 | 9.0% | Unknown |
| CVE-2026-3502 | TrueConf Client | 2026-04-02 | 0.3% | Unknown |
| CVE-2026-5281 | Google Dawn | 2026-04-01 | 0.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.