Exploited Vulnerabilities DailyVulnerabilities added to KEV in May 2026
Added21
Ransomware-linked3
Vendors14
By vendor
7
2
1
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-0257 | Palo Alto Networks PAN-OS | 2026-05-29 | 96.8% | Known |
| CVE-2026-8398 | Daemon Daemon Tools Lite | 2026-05-27 | 0.9% | Unknown |
| CVE-2026-48027 | Nx Nx Console | 2026-05-27 | 1.3% | Known |
| CVE-2026-45321 | TanStack TanStack | 2026-05-27 | 1.0% | Known |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 2026-05-26 | 1.0% | Unknown |
| CVE-2026-9082 | Drupal Core | 2026-05-22 | 15.7% | Unknown |
| CVE-2026-34926 | Trend Micro Apex One | 2026-05-21 | 0.5% | Unknown |
| CVE-2025-34291 | Langflow Langflow | 2026-05-21 | 92.8% | Unknown |
| CVE-2026-45498 | Microsoft Defender | 2026-05-20 | 1.2% | Unknown |
| CVE-2026-41091 | Microsoft Defender | 2026-05-20 | 0.4% | Unknown |
| CVE-2010-0806 | Microsoft Internet Explorer | 2026-05-20 | 82.2% | Unknown |
| CVE-2010-0249 | Microsoft Internet Explorer | 2026-05-20 | 91.9% | Unknown |
| CVE-2009-3459 | Adobe Acrobat and Reader | 2026-05-20 | 86.5% | Unknown |
| CVE-2009-1537 | Microsoft DirectX | 2026-05-20 | 51.2% | Unknown |
| CVE-2008-4250 | Microsoft Windows | 2026-05-20 | 98.7% | Unknown |
| CVE-2026-42897 | Microsoft Microsoft | 2026-05-15 | 0.5% | Unknown |
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 2026-05-14 | 91.5% | Unknown |
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | 5.7% | Unknown |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2.5% | Unknown |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 2026-05-06 | 31.7% | Unknown |
| CVE-2026-31431 | Linux Kernel | 2026-05-01 | 3.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.