Exploited Vulnerabilities DailyVulnerabilities added to KEV in June 2026
Added23
Ransomware-linked3
Vendors18
By vendor
3
3
2
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-48558 | SimpleHelp SimpleHelp | 2026-06-29 | 5.7% | Unknown |
| CVE-2026-20230 | Cisco Unified Communications Manager | 2026-06-25 | 88.2% | Unknown |
| CVE-2026-12569 | PTC Windchill and FlexPLM | 2026-06-25 | 46.0% | Known |
| CVE-2026-34910 | Ubiquiti UniFi OS | 2026-06-23 | 45.7% | Unknown |
| CVE-2026-34909 | Ubiquiti UniFi OS | 2026-06-23 | 1.7% | Unknown |
| CVE-2026-34908 | Ubiquiti UniFi OS | 2026-06-23 | 15.2% | Unknown |
| CVE-2025-67038 | Lantronix EDS5000 | 2026-06-23 | 19.9% | Unknown |
| CVE-2026-20253 | Splunk Enterprise | 2026-06-18 | 96.9% | Unknown |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 2026-06-16 | 16.1% | Unknown |
| CVE-2026-54420 | LiteSpeed cPanel Plugin | 2026-06-15 | 0.8% | Unknown |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | 2026-06-15 | 28.1% | Unknown |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 9.4% | Known |
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | 99.9% | Unknown |
| CVE-2026-7473 | Arista Extensible Operating System | 2026-06-09 | 0.6% | Unknown |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | 2026-06-09 | 25.3% | Unknown |
| CVE-2026-11645 | Google Chromium V8 | 2026-06-09 | 2.4% | Unknown |
| CVE-2026-50751 | Check Point Security Gateway | 2026-06-08 | 85.3% | Known |
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | 92.5% | Unknown |
| CVE-2026-28318 | SolarWinds Serv-U | 2026-06-05 | 1.9% | Unknown |
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 2026-06-03 | 2.0% | Unknown |
| CVE-2025-48595 | Android Framework | 2026-06-02 | 1.7% | Unknown |
| CVE-2022-0492 | Linux Kernel | 2026-06-02 | 5.5% | Unknown |
| CVE-2024-21182 | Oracle WebLogic Server | 2026-06-01 | 74.1% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.