CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2026-21509 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2026-21509)
Vulnerability in Microsoft Office (CVE-2026-21509). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-24061 KEV |
[KEV] Vulnerability in Gnu Inetutils (CVE-2026-24061)
Vulnerability in Gnu Inetutils (CVE-2026-24061). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-23760 KEV |
[KEV] Vulnerability in SmarterTools SmarterMail (CVE-2026-23760)
Vulnerability in SmarterTools SmarterMail (CVE-2026-23760). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-52691 KEV |
[KEV] Unrestricted File Upload in SmarterTools SmarterMail (CVE-2025-52691)
Vulnerability in SmarterTools SmarterMail (CVE-2025-52691). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-14634 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2018-14634)
Vulnerability in Linux Kernel (CVE-2018-14634). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2024-37079 KEV |
[KEV] Out-of-Bounds Write in Broadcom VMware vCenter Server (CVE-2024-37079)
Out-of-bounds write in Broadcom VMware vCenter Server (CVE-2024-37079). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-54313 KEV |
[KEV] Vulnerability in eslint-config-prettier (CVE-2025-54313)
Vulnerability in eslint-config-prettier (CVE-2025-54313). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-31125 KEV |
[KEV] Information Disclosure in Vitejs (CVE-2025-31125)
Vulnerability in Vitejs (CVE-2025-31125). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-34026 KEV |
[KEV] Vulnerability in Versa Concerto (CVE-2025-34026)
Vulnerability in Versa Concerto (CVE-2025-34026). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-68645 KEV |
[KEV] Vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2025-68645)
Vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2025-68645). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-20045 KEV |
[KEV] Code Injection in Cisco Unified Communications Manager (CVE-2026-20045)
Code injection in Cisco Unified Communications Manager (CVE-2026-20045). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2026-20805 KEV |
[KEV] Information Disclosure in Microsoft Windows (CVE-2026-20805)
Vulnerability in Microsoft Windows (CVE-2026-20805). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-8110 KEV |
[KEV] Path Traversal in Gogs (CVE-2025-8110)
Path traversal in Gogs (CVE-2025-8110). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-37164 KEV |
[KEV] Code Injection in Hewlett Packard Enterprise (HPE) OneView (CVE-2025-37164)
Code injection in Hewlett Packard Enterprise (HPE) OneView (CVE-2025-37164). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-0556 KEV |
[KEV] Code Injection in Microsoft Office (CVE-2009-0556)
Code injection in Microsoft Office (CVE-2009-0556). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-14847 KEV |
[KEV] Vulnerability in MongoDB and MongoDB Server (CVE-2025-14847)
Vulnerability in MongoDB and MongoDB Server (CVE-2025-14847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2023-52163 KEV |
[KEV] Vulnerability in Digiever DS-2105 Pro (CVE-2023-52163)
Vulnerability in Digiever DS-2105 Pro (CVE-2023-52163). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-14733 KEV |
[KEV] Out-of-Bounds Write in WatchGuard Firebox (CVE-2025-14733)
Out-of-bounds write in WatchGuard Firebox (CVE-2025-14733). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-20393 KEV |
[KEV] Vulnerability in Cisco Multiple Products (CVE-2025-20393)
Vulnerability in Cisco Multiple Products (CVE-2025-20393). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-40602 KEV |
[KEV] Vulnerability in SonicWall SMA1000 appliance (CVE-2025-40602)
Vulnerability in SonicWall SMA1000 appliance (CVE-2025-40602). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-59374 KEV |
[KEV] Vulnerability in ASUS Live Update (CVE-2025-59374)
Vulnerability in ASUS Live Update (CVE-2025-59374). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-59718 KEV |
[KEV] Vulnerability in Fortinet Multiple Products (CVE-2025-59718)
Vulnerability in Fortinet Multiple Products (CVE-2025-59718). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-43529 KEV |
[KEV] Use-After-Free in Apple Multiple Products (CVE-2025-43529)
Vulnerability in Apple Multiple Products (CVE-2025-43529). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-14611 KEV |
[KEV] Vulnerability in Gladinet CentreStack and Triofox (CVE-2025-14611)
Vulnerability in Gladinet CentreStack and Triofox (CVE-2025-14611). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-14174 KEV |
[KEV] Out-of-Bounds Write in Google Chromium (CVE-2025-14174)
Out-of-bounds write in Google Chromium (CVE-2025-14174). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-4063 KEV |
[KEV] Unrestricted File Upload in Sierra Wireless AirLink ALEOS (CVE-2018-4063)
Vulnerability in Sierra Wireless AirLink ALEOS (CVE-2018-4063). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-58360 KEV |
[KEV] XXE (XML External Entity) in OSGeo GeoServer (CVE-2025-58360)
Vulnerability in OSGeo GeoServer (CVE-2025-58360). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-62221 KEV |
[KEV] Use-After-Free in Microsoft Windows (CVE-2025-62221)
Vulnerability in Microsoft Windows (CVE-2025-62221). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-6218 KEV |
[KEV] Path Traversal in RARLAB WinRAR (CVE-2025-6218)
Path traversal in RARLAB WinRAR (CVE-2025-6218). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-66644 KEV |
[KEV] OS Command Injection in Array Networks ArrayOS AG (CVE-2025-66644)
OS command injection in Array Networks ArrayOS AG (CVE-2025-66644). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-37055 KEV |
[KEV] Vulnerability in D-Link Routers (CVE-2022-37055)
Vulnerability in D-Link Routers (CVE-2022-37055). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-55182 KEV |
[KEV] Unsafe Deserialization in Meta React Server Components (CVE-2025-55182)
Vulnerability in Meta React Server Components (CVE-2025-55182). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26828 KEV |
[KEV] Unrestricted File Upload in OpenPLC ScadaBR (CVE-2021-26828)
Vulnerability in OpenPLC ScadaBR (CVE-2021-26828). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-48572 KEV |
[KEV] Vulnerability in Android Framework (CVE-2025-48572)
Vulnerability in Android Framework (CVE-2025-48572). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to 14:2025-12-01 or later.
|
|
| CVE-2025-48633 KEV |
[KEV] Vulnerability in Android Framework (CVE-2025-48633)
Vulnerability in Android Framework (CVE-2025-48633). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26829 KEV |
[KEV] Cross-Site Scripting (XSS) in OpenPLC ScadaBR (CVE-2021-26829)
Cross-site scripting in OpenPLC ScadaBR (CVE-2021-26829). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-61757 KEV |
[KEV] Vulnerability in Oracle Fusion Middleware (CVE-2025-61757)
Vulnerability in Oracle Fusion Middleware (CVE-2025-61757). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-13223 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2025-13223)
Vulnerability in Google Chromium V8 (CVE-2025-13223). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-58034 KEV |
[KEV] OS Command Injection in Fortinet FortiWeb (CVE-2025-58034)
OS command injection in Fortinet FortiWeb (CVE-2025-58034). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-64446 KEV |
[KEV] Vulnerability in Fortinet FortiWeb (CVE-2025-64446)
Vulnerability in Fortinet FortiWeb (CVE-2025-64446). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-9242 KEV |
[KEV] Out-of-Bounds Write in WatchGuard Firebox (CVE-2025-9242)
Out-of-bounds write in WatchGuard Firebox (CVE-2025-9242). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-62215 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2025-62215)
Vulnerability in Microsoft Windows (CVE-2025-62215). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-12480 KEV |
[KEV] Vulnerability in Gladinet Triofox (CVE-2025-12480)
Vulnerability in Gladinet Triofox (CVE-2025-12480). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-21042 KEV |
[KEV] Out-of-Bounds Write in Samsung Mobile Devices (CVE-2025-21042)
Out-of-bounds write in Samsung Mobile Devices (CVE-2025-21042). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-11371 KEV |
[KEV] Vulnerability in Gladinet CentreStack and Triofox (CVE-2025-11371)
Vulnerability in Gladinet CentreStack and Triofox (CVE-2025-11371). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-48703 KEV |
[KEV] OS Command Injection in CWP Control Web Panel (CVE-2025-48703)
OS command injection in CWP Control Web Panel (CVE-2025-48703). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-24893 KEV |
[KEV] Vulnerability in XWiki Platform (CVE-2025-24893)
Vulnerability in XWiki Platform (CVE-2025-24893). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-41244 KEV |
[KEV] Vulnerability in Broadcom VMware Aria Operations and VMware Tools (CVE-2025-41244)
Vulnerability in Broadcom VMware Aria Operations and VMware Tools (CVE-2025-41244). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-6205 KEV |
[KEV] Vulnerability in Dassault Systèmes DELMIA Apriso (CVE-2025-6205)
Vulnerability in Dassault Systèmes DELMIA Apriso (CVE-2025-6205). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2025-6204 KEV |
[KEV] Code Injection in Dassault Systèmes DELMIA Apriso (CVE-2025-6204)
Code injection in Dassault Systèmes DELMIA Apriso (CVE-2025-6204). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
