1,656 totalEPSS avg 52.1%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,656 of 1,656 · page 1 of 34

CVEVendor / ProductTitleKEV addedEPSS
CVE-2026-20316Cisco / Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability2026-07-29
0.8%
CVE-2025-68686Fortinet / FortiOSFortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor V…2026-07-27
1.3%
CVE-2026-16812Arista / VeloCloud OrchestratorArista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability2026-07-27
0.9%
CVE-2026-16232Check Point / SmartConsoleCheck Point SmartConsole Improper Authentication Vulnerability2026-07-22
71.4%
CVE-2026-50522Microsoft / SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-22
75.8%
CVE-2021-27137DD-WRT / DD-WRTDD-WRT Stack-Based Buffer Overflow Vulnerability2026-07-21
16.5%
CVE-2026-0770Langflow / LangflowLangflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability2026-07-21
56.3%
CVE-2026-60137WordPress / CoreWordPress Core SQL Injection Vulnerability2026-07-21
79.0%
CVE-2026-63030WordPress / CoreWordPress Core Interpretation Conflict Vulnerability2026-07-21
98.4%
CVE-2026-25089Fortinet / FortiSandboxFortinet FortiSandbox OS Command Injection Vulnerability2026-07-16
69.8%
CVE-2026-39808Fortinet / FortiSandboxFortinet FortiSandbox OS Command Injection Vulnerability2026-07-16
89.7%
CVE-2026-58644Microsoft / SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability2026-07-16
6.0%
CVE-2023-4346KNX Association / KNX Protocol Connection Authorization Option 1KNX Association KNX Protocol Connection Authorization Option 1 Overly Restric…2026-07-15
0.9%
CVE-2026-46817Oracle / E-Business SuiteOracle E-Business Suite Improper Privilege Management Vulnerability2026-07-15
13.3%
CVE-2026-15409SonicWall / SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability2026-07-14
78.4%
CVE-2026-15410SonicWall / SMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection Vulnerability2026-07-14
76.3%
CVE-2026-56155Microsoft / Active Directory Federation ServicesMicrosoft Active Directory Federation Services Insufficient Granularity of Ac…2026-07-14
2.3%
CVE-2026-56164Microsoft / SharePoint ServerMicrosoft SharePoint Server Missing Authentication for Critical Function Vuln…2026-07-14
22.4%
CVE-2008-4128Cisco / IOSCisco IOS Cross-Site Request Forgery Vulnerability2026-07-13
33.0%
CVE-2026-48939iCagenda / iCagendaiCagenda Unrestricted Upload of File with Dangerous Type Vulnerability2026-07-10
24.3%
CVE-2026-56291Balbooa / FormsBalbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability2026-07-10
76.1%
CVE-2026-48282Adobe / ColdFusionAdobe ColdFusion Path Traversal Vulnerability2026-07-07
99.2%
CVE-2026-48908JoomShaper / SP Page BuilderJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vu…2026-07-07
88.1%
CVE-2026-55255Langflow / LangflowLangflow Authorization Bypass Through User-Controlled Key Vulnerability2026-07-07
29.1%
CVE-2026-56290Joomlack / Page BuilderJoomlack Page Builder Improper Access Control Vulnerability2026-07-07
83.3%
CVE-2026-45659Microsoft / SharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data Vulnerability2026-07-01
9.1%
CVE-2026-48558SimpleHelp / SimpleHelpSimpleHelp Authentication Bypass Vulnerability2026-06-29
11.5%
CVE-2026-12569PTC / Windchill and FlexPLMPTC Windchill and FlexPLM Improper Input Validation Vulnerability2026-06-25
30.2%
CVE-2026-20230Cisco / Unified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulne…2026-06-25
83.2%
CVE-2025-67038Lantronix / EDS5000Lantronix EDS5000 Code Injection Vulnerability2026-06-23
14.3%
CVE-2026-34908Ubiquiti / UniFi OSUbiquiti UniFi OS Improper Access Control Vulnerability2026-06-23
61.9%
CVE-2026-34909Ubiquiti / UniFi OSUbiquiti UniFi OS Path Traversal Vulnerability2026-06-23
62.8%
CVE-2026-34910Ubiquiti / UniFi OSUbiquiti UniFi OS Improper Input Validation Vulnerability2026-06-23
87.0%
CVE-2026-20253Splunk / EnterpriseSplunk Enterprise Missing Authentication for Critical Function Vulnerability2026-06-18
96.2%
CVE-2026-48907Widget Factory / Joomla Content Editor Widget Factory Joomla Content Editor Improper Access Control Vulnerability2026-06-16
55.9%
CVE-2026-20262Cisco / Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability2026-06-15
28.2%
CVE-2026-54420LiteSpeed / cPanel PluginLiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability2026-06-15
1.4%
CVE-2026-35273Oracle / PeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical …2026-06-12
95.5%
CVE-2026-10520Ivanti / SentryIvanti Sentry OS Command Injection Vulnerability2026-06-11
99.9%
CVE-2026-11645Google / Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability2026-06-09
2.2%
CVE-2026-20245Cisco / Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnera…2026-06-09
25.3%
CVE-2026-7473Arista / Extensible Operating SystemArista Extensible Operating System Incomplete Comparison with Missing Factors…2026-06-09
1.1%
CVE-2026-42271BerriAI / LiteLLMBerriAI LiteLLM Command Injection Vulnerability2026-06-08
83.0%
CVE-2026-50751Check Point / Security GatewayCheck Point Security Gateway Improper Authentication Vulnerability2026-06-08
82.6%
CVE-2026-28318SolarWinds / Serv-USolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability2026-06-05
8.4%
CVE-2026-45247Mirasvit / Mirasvit Full Page Cache WarmerMirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability2026-06-03
27.5%
CVE-2022-0492Linux / KernelLinux Kernel Improper Authentication Vulnerability2026-06-02
5.5%
CVE-2025-48595Android / FrameworkAndroid Framework Integer Overflow Vulnerability2026-06-02
1.7%
CVE-2024-21182Oracle / WebLogic ServerOracle WebLogic Server Unspecified Vulnerability2026-06-01
50.0%
CVE-2026-0257Palo Alto Networks / PAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability2026-05-29
93.9%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.