Sign in Sign up
JA · EN · FR
SecPulse

CISA KEV — Known Exploited Vulnerabilities

Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.

ID Image Title
CVE-2026-102764 KEV [KEV] Vulnerability in BeyondTrust Remote Support (CVE-2026-102764)
Vulnerability in BeyondTrust Remote Support (CVE-2026-102764). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-61624 KEV [KEV] Path Traversal in Fortinet Fortios (CVE-2025-61624)
Path traversal in Fortinet Fortios (CVE-2025-61624). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
CVE-2026-21589 KEV [KEV] Vulnerability in Atlassian Bitbucket Data Center (CVE-2026-21589)
Vulnerability in Atlassian Bitbucket Data Center (CVE-2026-21589). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-0322 KEV [KEV] Code Injection in Palo alto networks Pan Os (CVE-2026-0322)
Code injection in Palo alto networks Pan Os (CVE-2026-0322). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-76519 KEV [KEV] Vulnerability in Cisco Secure Email Gateway (CVE-2026-76519)
Vulnerability in Cisco Secure Email Gateway (CVE-2026-76519). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-105134 KEV [KEV] Command Injection in Ahsay AhsayCBS (CVE-2026-105134)
Command injection in Ahsay AhsayCBS (CVE-2026-105134). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-105133 KEV [KEV] Authentication Bypass in Ahsay AhsayCBS (CVE-2026-105133)
Authentication bypass in Ahsay AhsayCBS (CVE-2026-105133). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-96951 KEV [KEV] Command Injection in Microsoft Windows Shell (CVE-2026-96951)
Command injection in Microsoft Windows Shell (CVE-2026-96951). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-104935 KEV [KEV] Vulnerability in Ivanti Connect Secure (CVE-2026-104935)
Vulnerability in Ivanti Connect Secure (CVE-2026-104935). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2015-3306 KEV [KEV] Vulnerability in ProFTPD (CVE-2015-3306)
Vulnerability in ProFTPD (CVE-2015-3306). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2015-5477 KEV [KEV] Vulnerability in Isc Solaris (CVE-2015-5477)
Vulnerability in Isc Solaris (CVE-2015-5477). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-22894 KEV [KEV] Vulnerability in Strapi (CVE-2023-22894)
Vulnerability in Strapi (CVE-2023-22894). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2021-3199 KEV [KEV] Path Traversal in ONLYOFFICE Document Server (CVE-2021-3199)
Path traversal in ONLYOFFICE Document Server (CVE-2021-3199). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2016-3081 KEV [KEV] Command Injection in Apache Struts (CVE-2016-3081)
Command injection in Apache Struts (CVE-2016-3081). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-88779 KEV [KEV] Buffer Overflow in Citrix NetScaler (CVE-2026-88779)
Vulnerability in Citrix NetScaler (CVE-2026-88779). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-102489 KEV [KEV] Vulnerability in Zammad gmbh Zammad (CVE-2026-102489)
Vulnerability in Zammad gmbh Zammad (CVE-2026-102489). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-102490 KEV [KEV] Privilege Escalation in Zammad gmbh Zammad (CVE-2026-102490)
Vulnerability in Zammad gmbh Zammad (CVE-2026-102490). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-104286 KEV [KEV] Path Traversal in Fortinet FortiMail (CVE-2026-104286)
Path traversal in Fortinet FortiMail (CVE-2026-104286). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-76504 KEV [KEV] Vulnerability in Cisco Catalyst Sd Wan Manager (CVE-2026-76504)
Vulnerability in Cisco Catalyst Sd Wan Manager (CVE-2026-76504). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-86950 KEV [KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2026-86950)
Out-of-bounds write in Apple Multiple Products (CVE-2026-86950). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-88771 KEV [KEV] Vulnerability in Citrix ADC (CVE-2026-88771)
Vulnerability in Citrix ADC (CVE-2026-88771). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-88772 KEV [KEV] Buffer Overflow in Citrix ADC (CVE-2026-88772)
Vulnerability in Citrix ADC (CVE-2026-88772). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-87902 KEV [KEV] Vulnerability in WordPress Core (CVE-2026-87902)
Vulnerability in WordPress Core (CVE-2026-87902). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-67279 KEV [KEV] Vulnerability in Mikrotik Routeros (CVE-2026-67279)
Vulnerability in Mikrotik Routeros (CVE-2026-67279). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-65660 KEV [KEV] Code Injection in Microsoft Sharepoint Server (CVE-2026-65660)
Code injection in Microsoft Sharepoint Server (CVE-2026-65660). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-71362 KEV [KEV] Authorization Flaw in Adobe Commerce (CVE-2026-71362)
Vulnerability in Adobe Commerce (CVE-2026-71362). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-5430 KEV [KEV] Vulnerability in Wso2 Api Control Plane (CVE-2026-5430)
Vulnerability in Wso2 Api Control Plane (CVE-2026-5430). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-85102 KEV [KEV] Vulnerability in Check Point Quantum Security Gateway (CVE-2026-85102)
Vulnerability in Check Point Quantum Security Gateway (CVE-2026-85102). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-93616 KEV [KEV] Path Traversal in Check point Checkpoint (CVE-2026-93616)
Path traversal in Check point Checkpoint (CVE-2026-93616). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-94127 KEV [KEV] Vulnerability in F5 Big Ip Access Policy Manager (CVE-2026-94127)
Vulnerability in F5 Big Ip Access Policy Manager (CVE-2026-94127). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-93952 KEV [KEV] Vulnerability in Arista (CVE-2026-93952)
Vulnerability in Arista (CVE-2026-93952). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-7273 KEV [KEV] Vulnerability in Zyxel GS1900-48HPv2 firmware (CVE-2026-7273)
Vulnerability in Zyxel GS1900-48HPv2 firmware (CVE-2026-7273). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-39964 KEV [KEV] Vulnerability in Linux kernel (CVE-2025-39964)
Vulnerability in Linux kernel (CVE-2025-39964). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-53266 KEV [KEV] Out-of-Bounds Write in Linux kernel (CVE-2026-53266)
Out-of-bounds write in Linux kernel (CVE-2026-53266). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-39682 KEV [KEV] Vulnerability in Linux kernel (CVE-2025-39682)
Vulnerability in Linux kernel (CVE-2025-39682). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-87886 KEV [KEV] Vulnerability in Acronis Backup (CVE-2026-87886)
Vulnerability in Acronis Backup (CVE-2026-87886). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-76460 KEV [KEV] Vulnerability in Cisco Identity Services Engine (CVE-2026-76460)
Vulnerability in Cisco Identity Services Engine (CVE-2026-76460). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-58704 KEV [KEV] Vulnerability in Google (CVE-2026-58704)
Vulnerability in Google (CVE-2026-58704). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-76461 KEV [KEV] SQL Injection in Cisco AsyncOS Software for Cisco Secure Email Gateway (CVE-2026-76461)
SQL injection in Cisco AsyncOS Software for Cisco Secure Email Gateway (CVE-2026-76461). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-85706 KEV [KEV] Path Traversal in Gitlab (CVE-2026-85706)
Path traversal in Gitlab (CVE-2026-85706). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-84869 KEV [KEV] Privilege Escalation in Connectwise Screenconnect (CVE-2026-84869)
Vulnerability in Connectwise Screenconnect (CVE-2026-84869). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-42018 KEV [KEV] Authentication Bypass in Jfrog (CVE-2026-42018)
Authentication bypass in Jfrog (CVE-2026-42018). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-42016 KEV [KEV] Authorization Flaw in JFrog Artifactory (CVE-2026-42016)
Vulnerability in JFrog Artifactory (CVE-2026-42016). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-86060 KEV [KEV] Vulnerability in Mikrotik Routeros (CVE-2026-86060)
Vulnerability in Mikrotik Routeros (CVE-2026-86060). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-67277 KEV [KEV] Vulnerability in Mikrotik Routeros (CVE-2026-67277)
Vulnerability in Mikrotik Routeros (CVE-2026-67277). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-87491 KEV [KEV] Out-of-Bounds Write in Google Chrome (CVE-2026-87491)
Out-of-bounds write in Google Chrome (CVE-2026-87491). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-19490 KEV [KEV] Vulnerability in Citrix ADC (CVE-2026-19490)
Vulnerability in Citrix ADC (CVE-2026-19490). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-20079 KEV [KEV] Vulnerability in Cisco Secure Firewall Management Center (FMC) Software (CVE-2026-20079)
Vulnerability in Cisco Secure Firewall Management Center (FMC) Software (CVE-2026-20079). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2025-25249 KEV [KEV] Vulnerability in Fortinet Fortios (CVE-2025-25249)
Vulnerability in Fortinet Fortios (CVE-2025-25249). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-85880 KEV [KEV] Vulnerability in Microsoft Windows ALPC (CVE-2026-85880)
Vulnerability in Microsoft Windows ALPC (CVE-2026-85880). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details