CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2025-43510 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2025-43510)
Vulnerability in Apple Multiple Products (CVE-2025-43510). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-54068 KEV |
[KEV] Code Injection in Laravel Livewire (CVE-2025-54068)
Code injection in Laravel Livewire (CVE-2025-54068). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-32432 KEV |
[KEV] Code Injection in Craft CMS (CVE-2025-32432)
Code injection in Craft CMS (CVE-2025-32432). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-20131 KEV |
[KEV] Unsafe Deserialization in Cisco Secure Firewall Management Center (FMC) (CVE-2026-20131)
Vulnerability in Cisco Secure Firewall Management Center (FMC) (CVE-2026-20131). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-20963 KEV |
[KEV] Unsafe Deserialization in Microsoft SharePoint (CVE-2026-20963)
Vulnerability in Microsoft SharePoint (CVE-2026-20963). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-66376 KEV |
[KEV] Cross-Site Scripting (XSS) in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2025-66376)
Cross-site scripting in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2025-66376). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-47813 KEV |
[KEV] Vulnerability in Wing FTP Server (CVE-2025-47813)
Vulnerability in Wing FTP Server (CVE-2025-47813). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-3909 KEV |
[KEV] Out-of-Bounds Write in Google Skia (CVE-2026-3909)
Out-of-bounds write in Google Skia (CVE-2026-3909). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-3910 KEV |
[KEV] Buffer Overflow in Google Chromium V8 (CVE-2026-3910)
Vulnerability in Google Chromium V8 (CVE-2026-3910). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-68613 KEV |
[KEV] Vulnerability in n8n (CVE-2025-68613)
Vulnerability in n8n (CVE-2025-68613). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-1603 KEV |
[KEV] Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2026-1603)
Vulnerability in Ivanti Endpoint Manager (EPM) (CVE-2026-1603). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-26399 KEV |
[KEV] Unsafe Deserialization in SolarWinds Web Help Desk (CVE-2025-26399)
Vulnerability in SolarWinds Web Help Desk (CVE-2025-26399). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22054 KEV |
[KEV] SSRF (Server-Side Request Forgery) in Omnissa Workspace One UEM (CVE-2021-22054)
SSRF in Omnissa Workspace One UEM (CVE-2021-22054). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-41974 KEV |
[KEV] Use-After-Free in Apple iOS and iPadOS (CVE-2023-41974)
Vulnerability in Apple iOS and iPadOS (CVE-2023-41974). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30952 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2021-30952)
Vulnerability in Apple Multiple Products (CVE-2021-30952). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-43000 KEV |
[KEV] Use-After-Free in Apple Multiple Products (CVE-2023-43000)
Vulnerability in Apple Multiple Products (CVE-2023-43000). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22681 KEV |
[KEV] Vulnerability in Rockwell Multiple Products (CVE-2021-22681)
Vulnerability in Rockwell Multiple Products (CVE-2021-22681). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-7921 KEV |
[KEV] Authentication Bypass in Hikvision Multiple Products (CVE-2017-7921)
Authentication bypass in Hikvision Multiple Products (CVE-2017-7921). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-21385 KEV |
[KEV] Vulnerability in Qualcomm Multiple Chipsets (CVE-2026-21385)
Vulnerability in Qualcomm Multiple Chipsets (CVE-2026-21385). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-22719 KEV |
[KEV] Command Injection in Broadcom VMware Aria Operations (CVE-2026-22719)
Command injection in Broadcom VMware Aria Operations (CVE-2026-22719). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-20127 KEV |
[KEV] Authentication Bypass in Cisco Catalyst SD-WAN Controller and Manager (CVE-2026-20127)
Authentication bypass in Cisco Catalyst SD-WAN Controller and Manager (CVE-2026-20127). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-20775 KEV |
[KEV] Vulnerability in Cisco SD-WAN (CVE-2022-20775)
Vulnerability in Cisco SD-WAN (CVE-2022-20775). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-25108 KEV |
[KEV] OS Command Injection in Soliton Systems K.K FileZen (CVE-2026-25108)
OS command injection in Soliton Systems K.K FileZen (CVE-2026-25108). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-68461 KEV |
[KEV] Cross-Site Scripting (XSS) in Roundcube Webmail (CVE-2025-68461)
Cross-site scripting in Roundcube Webmail (CVE-2025-68461). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-49113 KEV |
[KEV] Unsafe Deserialization in Roundcube Webmail (CVE-2025-49113)
Vulnerability in Roundcube Webmail (CVE-2025-49113). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-22769 KEV |
[KEV] Vulnerability in Dell RecoverPoint for Virtual Machines (RP4VMs) (CVE-2026-22769)
Vulnerability in Dell RecoverPoint for Virtual Machines (RP4VMs) (CVE-2026-22769). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22175 KEV |
[KEV] SSRF (Server-Side Request Forgery) in GitLab (CVE-2021-22175)
SSRF in GitLab (CVE-2021-22175). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-2441 KEV |
[KEV] Use-After-Free in Google Chromium (CVE-2026-2441)
Vulnerability in Google Chromium (CVE-2026-2441). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2008-0015 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2008-0015)
Vulnerability in Microsoft Windows (CVE-2008-0015). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-7694 KEV |
[KEV] Unrestricted File Upload in TeamT5 ThreatSonar Anti-Ransomware (CVE-2024-7694)
Vulnerability in TeamT5 ThreatSonar Anti-Ransomware (CVE-2024-7694). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-7796 KEV |
[KEV] SSRF (Server-Side Request Forgery) in Synacor Zimbra Collaboration Suite (CVE-2020-7796)
SSRF in Synacor Zimbra Collaboration Suite (CVE-2020-7796). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-1731 KEV |
[KEV] OS Command Injection in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) (CVE-2026-1731)
OS command injection in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) (CVE-2026-1731). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-40536 KEV |
[KEV] Vulnerability in SolarWinds Web Help Desk (CVE-2025-40536)
Vulnerability in SolarWinds Web Help Desk (CVE-2025-40536). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-15556 KEV |
[KEV] Vulnerability in Notepad++ (CVE-2025-15556)
Vulnerability in Notepad++ (CVE-2025-15556). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-43468 KEV |
[KEV] SQL Injection in Microsoft Configuration Manager (CVE-2024-43468)
SQL injection in Microsoft Configuration Manager (CVE-2024-43468). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-20700 KEV |
[KEV] Buffer Overflow in Apple Multiple Products (CVE-2026-20700)
Vulnerability in Apple Multiple Products (CVE-2026-20700). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-21514 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2026-21514)
Vulnerability in Microsoft Office (CVE-2026-21514). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-21519 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2026-21519)
Vulnerability in Microsoft Windows (CVE-2026-21519). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-21533 KEV |
[KEV] Privilege Escalation in Microsoft Windows (CVE-2026-21533)
Vulnerability in Microsoft Windows (CVE-2026-21533). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-21510 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2026-21510)
Vulnerability in Microsoft Windows (CVE-2026-21510). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-21525 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2026-21525)
Vulnerability in Microsoft Windows (CVE-2026-21525). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-21513 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2026-21513)
Vulnerability in Microsoft Windows (CVE-2026-21513). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-24423 KEV |
[KEV] Vulnerability in SmarterTools SmarterMail (CVE-2026-24423)
Vulnerability in SmarterTools SmarterMail (CVE-2026-24423). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-11953 KEV |
[KEV] OS Command Injection in React Native Community CLI (CVE-2025-11953)
OS command injection in React Native Community CLI (CVE-2025-11953). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-40551 KEV |
[KEV] Unsafe Deserialization in SolarWinds Web Help Desk (CVE-2025-40551)
Vulnerability in SolarWinds Web Help Desk (CVE-2025-40551). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-19006 KEV |
[KEV] Authentication Bypass in Sangoma Freepbx (CVE-2019-19006)
Authentication bypass in Sangoma Freepbx (CVE-2019-19006). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-64328 KEV |
[KEV] OS Command Injection in Sangoma FreePBX (CVE-2025-64328)
OS command injection in Sangoma FreePBX (CVE-2025-64328). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-39935 KEV |
[KEV] SSRF (Server-Side Request Forgery) in GitLab Community and Enterprise Editions (CVE-2021-39935)
SSRF in GitLab Community and Enterprise Editions (CVE-2021-39935). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-1281 KEV |
[KEV] Code Injection in Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281)
Code injection in Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-24858 KEV |
[KEV] Vulnerability in Fortinet Multiple Products (CVE-2026-24858)
Vulnerability in Fortinet Multiple Products (CVE-2026-24858). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
