Active Exploitation
Vulnerabilities where credible sources (CISA KEV, NCSC, vendor advisories) report exploitation in the wild. Exploitation status is only shown when a source actually reports it.
| CVE / Item | Severity | Affected | Status | KEV | Published | Source | |
|---|---|---|---|---|---|---|---|
|
CVE-2026-96652
CVE-2026-96652 - Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (known
|
CRITICAL | Media Server | ACTIVELY EXPLOITED | KEV | 2026-10-20 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-96654
CVE-2026-96654 - Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web
|
CRITICAL | Media Server | ACTIVELY EXPLOITED | KEV | 2026-10-20 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-96655
CVE-2026-96655 - Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability (known
|
CRITICAL | Media Server | ACTIVELY EXPLOITED | KEV | 2026-10-20 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-96656
CVE-2026-96656 - Plex Media Server External Control of File Name or Path Vulnerability (kn
|
CRITICAL | Media Server | ACTIVELY EXPLOITED | KEV | 2026-10-20 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2025-61624
CVE-2025-61624 - Fortinet Multiple Products Path Traversal Vulnerability (known exploited)
|
CRITICAL | Multiple Products | ACTIVELY EXPLOITED | KEV | 2026-10-16 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-102764
CVE-2026-102764 - BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerabili
|
CRITICAL | Remote Support | ACTIVELY EXPLOITED | KEV | 2026-10-16 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-110936
CVE-2026-110936 - A vulnerability has been identified in Siemens Software Center (All vers
|
CRITICAL | Software Center | ACTIVELY EXPLOITED | KEV | 2026-10-15 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-106931
CVE-2026-106931 - SiteGuard Server Edition contains an OS command injection vulnerability,
|
CRITICAL | SiteGuard Server Edition | ACTIVELY EXPLOITED | KEV | 2026-10-14 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-0322
CVE-2026-0322 - Palo Alto Networks PAN-OS Code Injection Vulnerability (known exploited)
|
CRITICAL | palo alto PAN-OS | ACTIVELY EXPLOITED | KEV | 2026-10-14 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-76519
CVE-2026-76519 - Cisco Secure Email Gateway Relative Path Traversal Vulnerability (known e
|
CRITICAL | cisco Secure Email Gateway | ACTIVELY EXPLOITED | KEV | 2026-10-14 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-96951
CVE-2026-96951 - Microsoft Windows Command Injection Vulnerability (known exploited)
|
CRITICAL | microsoft Windows | ACTIVELY EXPLOITED | KEV | 2026-10-13 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-104935
CVE-2026-104935 - Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (k
|
CRITICAL | ivanti Connect Secure | ACTIVELY EXPLOITED | KEV | 2026-10-13 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2015-3306
CVE-2015-3306 - ProFTPD Improper Access Control Vulnerability (known exploited)
|
CRITICAL | ProFTPD | ACTIVELY EXPLOITED | KEV | 2026-10-08 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2021-3199
CVE-2021-3199 - ONLYOFFICE Docs Server Path Traversal Vulnerability (known exploited)
|
CRITICAL | Docs | ACTIVELY EXPLOITED | KEV | 2026-10-08 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2023-22894
CVE-2023-22894 - Strapi Cleartext Storage of Sensitive Information Vulnerability (known ex
|
CRITICAL | Strapi | ACTIVELY EXPLOITED | KEV | 2026-10-08 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2016-3081
CVE-2016-3081 - Apache Struts Command Injection Vulnerability (known exploited)
|
CRITICAL | apache Struts | ACTIVELY EXPLOITED | KEV | 2026-10-08 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2015-5477
CVE-2015-5477 - ISC BIND Data Processing Errors Vulnerability (known exploited)
|
CRITICAL | BIND | ACTIVELY EXPLOITED | KEV | 2026-10-08 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-21589
CVE-2026-21589 - h3. Summary
This is a vulnerability in Bitbucket Data Center, Confluence
|
CRITICAL | Multiple Products | ACTIVELY EXPLOITED | KEV | 2026-10-05 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-105134
CVE-2026-105134 - A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability
|
CRITICAL | AhsayCBS | ACTIVELY EXPLOITED | KEV | 2026-10-04 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-105133
CVE-2026-105133 - A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affect
|
CRITICAL | AhsayCBS | ACTIVELY EXPLOITED | KEV | 2026-10-04 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-88779
CVE-2026-88779 - Citrix NetScaler Improper Restriction of Operations within the Bounds of
|
CRITICAL | citrix NetScaler | ACTIVELY EXPLOITED | KEV | 2026-10-04 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-102489
CVE-2026-102489 - Zammad GmbH Zammad Session Fixation Vulnerability (known exploited)
|
CRITICAL | Zammad | ACTIVELY EXPLOITED | KEV | 2026-10-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-102490
CVE-2026-102490 - Zammad GmbH Zammad Improper Privilege Management Vulnerability (known ex
|
CRITICAL | Zammad | ACTIVELY EXPLOITED | KEV | 2026-10-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-104286
CVE-2026-104286 - Fortinet FortiMail Path Traversal Vulnerability (known exploited)
|
CRITICAL | fortinet FortiMail | ACTIVELY EXPLOITED | KEV | 2026-10-01 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-76504
CVE-2026-76504 - Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (known exploited
|
CRITICAL | cisco Catalyst SD-WAN Manager | ACTIVELY EXPLOITED | KEV | 2026-09-30 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-86950
CVE-2026-86950 - Apple Multiple Products Out-of-Bounds Write Vulnerability (known exploite
|
CRITICAL | apple Multiple Products | ACTIVELY EXPLOITED | KEV | 2026-09-29 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-88771
CVE-2026-88771 - Citrix NetScaler Improper Input Validation Vulnerability (known exploited
|
CRITICAL | citrix NetScaler | ACTIVELY EXPLOITED | KEV | 2026-09-27 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-88772
CVE-2026-88772 - Citrix NetScaler Improper Restriction of Operations within the Bounds of
|
CRITICAL | citrix NetScaler | ACTIVELY EXPLOITED | KEV | 2026-09-27 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-71362
CVE-2026-71362 - Adobe Commerce and Magento Incorrect Authorization Vulnerability (known
|
CRITICAL | adobe CommerceMagento | ACTIVELY EXPLOITED | KEV | 2026-09-24 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-5430
CVE-2026-5430 - WSO2 Multiple Products Path Traversal Vulnerability (known exploited)
|
CRITICAL | Multiple Products | ACTIVELY EXPLOITED | KEV | 2026-09-24 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-87902
CVE-2026-87902 - An unauthenticated attacker can make `get_page_template()` page-template
|
CRITICAL | wordpress Core | ACTIVELY EXPLOITED | KEV | 2026-09-22 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-93616
CVE-2026-93616 - A directory traversal and file upload vulnerability allows an unauthentic
|
CRITICAL | Multiple Products | ACTIVELY EXPLOITED | KEV | 2026-09-22 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-93952
CVE-2026-93952 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issu
|
CRITICAL | VeloCloud Orchestrator | ACTIVELY EXPLOITED | KEV | 2026-09-22 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-94127
CVE-2026-94127 - F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (known exploited)
|
CRITICAL | f5 BIG-IP APM | ACTIVELY EXPLOITED | KEV | 2026-09-22 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-7273
CVE-2026-7273 - Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (kn
|
CRITICAL | GS1900 Series Switches | ACTIVELY EXPLOITED | KEV | 2026-09-21 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2025-39682
CVE-2025-39682 - Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnera
|
CRITICAL | linux Kernel | ACTIVELY EXPLOITED | KEV | 2026-09-18 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2025-39964
CVE-2025-39964 - Linux Kernel Race Condition Vulnerability (known exploited)
|
CRITICAL | linux Kernel | ACTIVELY EXPLOITED | KEV | 2026-09-18 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-87886
CVE-2026-87886 - Acronis Backup Incorrect Default Permissions Vulnerability (known exploit
|
CRITICAL | linux Backup | ACTIVELY EXPLOITED | KEV | 2026-09-16 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-76460
CVE-2026-76460 - Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerabi
|
CRITICAL | cisco Identity Services Engine | ACTIVELY EXPLOITED | KEV | 2026-09-16 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-58704
CVE-2026-58704 - Google Pixel Improper Authorization Vulnerability (known exploited)
|
CRITICAL | google Pixel | ACTIVELY EXPLOITED | KEV | 2026-09-16 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-76461
CVE-2026-76461 - Cisco Secure Email Gateway SQL Injection Vulnerability (known exploited)
|
CRITICAL | cisco Secure Email Gateway | ACTIVELY EXPLOITED | KEV | 2026-09-14 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-85706
CVE-2026-85706 - GitLab Community Edition and Enterprise Edition Path Traversal Vulnerabil
|
CRITICAL | Community EditionEnterprise Edition | ACTIVELY EXPLOITED | KEV | 2026-09-11 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-42018
CVE-2026-42018 - JFrog Artifactory Improper Authentication Vulnerability (known exploited)
|
CRITICAL | Artifactory | ACTIVELY EXPLOITED | KEV | 2026-09-11 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-42016
CVE-2026-42016 - JFrog Artifactory Incorrect Authorization Vulnerability (known exploited)
|
CRITICAL | Artifactory | ACTIVELY EXPLOITED | KEV | 2026-09-11 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-84869
CVE-2026-84869 - ConnectWise ScreenConnect Improper Privilege Management and Missing Autho
|
CRITICAL | ScreenConnect | ACTIVELY EXPLOITED | KEV | 2026-09-11 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-85102
CVE-2026-85102 - Improper certificate trust validation during VPN negotiation in Check Poi
|
CRITICAL | Multiple Products | ACTIVELY EXPLOITED | KEV | 2026-09-09 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-20079
CVE-2026-20079 - Cisco Firewall Management Center Authentication Bypass Using an Alternate
|
CRITICAL | cisco Secure Firewall Management Center (FMC)Security Cloud Control (SCC) Firewall Management | ACTIVELY EXPLOITED | KEV | 2026-09-09 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-87491
CVE-2026-87491 - Google Chromium V8 Out of Bounds Write Vulnerability (known exploited)
|
CRITICAL | microsoftgoogle Chromium V8 | ACTIVELY EXPLOITED | KEV | 2026-09-09 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2025-25249
CVE-2025-25249 - Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability (know
|
CRITICAL | fortinet Multiple Products | ACTIVELY EXPLOITED | KEV | 2026-09-09 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-81963
CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability
|
CRITICAL | microsoft Windows | ACTIVELY EXPLOITED | KEV | 2026-09-08 | Microsoft Security Response Center - Update Guide | Details |
|
CVE-2026-85880
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnera
|
CRITICAL | microsoft Windows | ACTIVELY EXPLOITED | KEV | 2026-09-08 | Microsoft Security Response Center - Update Guide | Details |
|
CVE-2026-75650
CVE-2026-75650 - Adobe Commerce is affected by an Improper Neutralization of Special Eleme
|
CRITICAL | adobe CommerceMagento | ACTIVELY EXPLOITED | KEV | 2026-09-07 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-86218
CVE-2026-86218 - N-central is vulnerable to a pre-auth remote code execution This issue af
|
CRITICAL | N-central | ACTIVELY EXPLOITED | KEV | 2026-09-06 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-86060
CVE-2026-86060 - RouterOS contains an argument-handling flaw in the SSH login
path involvi
|
CRITICAL | RouterOS | ACTIVELY EXPLOITED | KEV | 2026-09-05 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-67279
CVE-2026-67279 - RouterOS SSH enters the connection protocol after a client-requested reke
|
CRITICAL | RouterOS | ACTIVELY EXPLOITED | KEV | 2026-09-05 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-67277
CVE-2026-67277 - RouterOS accepts a "related" btest connection before the corresponding pr
|
CRITICAL | RouterOS | ACTIVELY EXPLOITED | KEV | 2026-09-05 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-85046
CVE-2026-85046 - Google Chromium V8 Type Confusion Vulnerability (known exploited)
|
CRITICAL | microsoftgoogle Chromium V8 | ACTIVELY EXPLOITED | KEV | 2026-09-04 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-83549
CVE-2026-83549 - SonicWall SMA1000 Appliances OS Command Injection Vulnerability (known ex
|
CRITICAL | SMA1000 Appliances | ACTIVELY EXPLOITED | KEV | 2026-09-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-83548
CVE-2026-83548 - SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (k
|
CRITICAL | SMA1000 Appliances | ACTIVELY EXPLOITED | KEV | 2026-09-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-9586
CVE-2026-9586 - Sangoma Switchvox SQL Injection Vulnerability (known exploited)
|
CRITICAL | Switchvox | ACTIVELY EXPLOITED | KEV | 2026-09-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-49869
CVE-2026-49869 - Kestra OSS OS Command Injection Vulnerability (known exploited)
|
CRITICAL | Kestra OSS | ACTIVELY EXPLOITED | KEV | 2026-09-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-48710
CVE-2026-48710 - Kludex Starlette HTTP Request/Response Smuggling Vulnerability (known exp
|
CRITICAL | Starlette | ACTIVELY EXPLOITED | KEV | 2026-09-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-59822
CVE-2026-59822 - BerriAI LiteLLM Improper Authentication Vulnerability (known exploited)
|
CRITICAL | LiteLLM | ACTIVELY EXPLOITED | KEV | 2026-09-02 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-82329
CVE-2026-82329 - JFrog Artifactory contains an authentication weakness that, under default
|
CRITICAL | Artifactory | ACTIVELY EXPLOITED | KEV | 2026-08-28 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-82078
CVE-2026-82078 - An unsafe dynamic class loading vulnerability exists in the database conn
|
CRITICAL | NG/MF | ACTIVELY EXPLOITED | KEV | 2026-08-28 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-81578
CVE-2026-81578 - An improper access control vulnerability exists in the web management int
|
CRITICAL | NG/MF | ACTIVELY EXPLOITED | KEV | 2026-08-28 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-66384
CVE-2026-66384 - JFrog Artifactory Improper Limitation of a Pathname to a Restricted Direc
|
CRITICAL | Artifactory | ACTIVELY EXPLOITED | KEV | 2026-08-27 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-53362
CVE-2026-53362 - Linux Kernel Unspecified Vulnerability (known exploited)
|
CRITICAL | linux Kernel | ACTIVELY EXPLOITED | KEV | 2026-08-27 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2023-49105
CVE-2023-49105 - ownCloud Improper Authentication Vulnerability (known exploited)
|
CRITICAL | ownCloud | ACTIVELY EXPLOITED | KEV | 2026-08-27 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2019-1068
CVE-2019-1068 - Microsoft SQL Server Remote Code Execution Vulnerability (known exploited)
|
CRITICAL | microsoft SQL Server | ACTIVELY EXPLOITED | KEV | 2026-08-26 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-8452
CVE-2026-8452 - Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operati
|
CRITICAL | citrix NetScaler ADCNetScaler Gateway | ACTIVELY EXPLOITED | KEV | 2026-08-26 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2022-0995
CVE-2022-0995 - Linux Kernel Out-of-Bounds Write Vulnerability (known exploited)
|
CRITICAL | linux Kernel | ACTIVELY EXPLOITED | KEV | 2026-08-26 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2015-5287
CVE-2015-5287 - Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (k
|
CRITICAL | Automatic Bug Reporting Tool | ACTIVELY EXPLOITED | KEV | 2026-08-26 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2015-3246
CVE-2015-3246 - Red Hat Libuser Race Condition Vulnerability (known exploited)
|
CRITICAL | Libuser | ACTIVELY EXPLOITED | KEV | 2026-08-26 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2021-23758
CVE-2021-23758 - Ajax.NET Professional Deserialization of Untrusted Data Vulnerability (kn
|
CRITICAL | Ajax.NET Professional | ACTIVELY EXPLOITED | KEV | 2026-08-26 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-60004
CVE-2026-60004 - Gitea Code Injection Vulnerability (known exploited)
|
CRITICAL | gitea.dev Giteagitea.dev | ACTIVELY EXPLOITED | KEV | 2026-08-25 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-21962
CVE-2026-21962 - Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Acce
|
CRITICAL | oracle HTTP ServerOracle Weblogic Server Proxy Plug-in | ACTIVELY EXPLOITED | KEV | 2026-08-24 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-73570
CVE-2026-73570 - Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability (know
|
CRITICAL | Zimbra Collaboration Suite (ZCS) | ACTIVELY EXPLOITED | KEV | 2026-08-21 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-69836
CVE-2026-69836 Microsoft Entra ID Remote Code Execution Vulnerability
|
CRITICAL | microsoftazure Entra ID | ACTIVELY EXPLOITED | KEV | 2026-08-20 | Microsoft Security Response Center - Update Guide | Details |
|
CVE-2026-72529
CVE-2026-72529 - TrueConf Server Missing Authentication for Critical Function Vulnerabilit
|
CRITICAL | Server | ACTIVELY EXPLOITED | KEV | 2026-08-20 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-72530
CVE-2026-72530 - TrueConf Server Code Injection Vulnerability (known exploited)
|
CRITICAL | Server | ACTIVELY EXPLOITED | KEV | 2026-08-20 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-19490
CVE-2026-19490 - Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects
|
CRITICAL | citrix NetScaler | ACTIVELY EXPLOITED | KEV | 2026-08-19 | NIST NVD - National Vulnerability Database | Details |
|
CVE-2026-64849
CVE-2026-64849 - MLflow Server-Side Request Forgery Vulnerability (known exploited)
|
CRITICAL | MLflow | ACTIVELY EXPLOITED | KEV | 2026-08-19 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-65400
CVE-2026-65400 - Apple macOS Improper Authentication Vulnerability (known exploited)
|
CRITICAL | apple macOS | ACTIVELY EXPLOITED | KEV | 2026-08-18 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-55040
CVE-2026-55040 - Microsoft SharePoint Weak Authentication Vulnerability (known exploited)
|
CRITICAL | microsoft SharePoint | ACTIVELY EXPLOITED | KEV | 2026-08-18 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-59310
CVE-2026-59310 - Broadcom VMware vCenter Path Traversal Vulnerability (known exploited)
|
CRITICAL | vmware VMware vCenter | ACTIVELY EXPLOITED | KEV | 2026-08-18 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-33824
CVE-2026-33824 - Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vuln
|
CRITICAL | microsoft Internet Key Exchange (IKE) Service Extensions | ACTIVELY EXPLOITED | KEV | 2026-08-18 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2024-21413
CVE-2024-21413 โ Microsoft Outlook email spoofing + RCE
|
CRITICAL | Microsoftmicrosoft Microsoft 365OutlookOffice Outlook | ACTIVELY EXPLOITED | KEV | 2026-08-17 | Microsoft Security Response Center โ Update Guide | Details |
|
CVE-2025-62593
CVE-2025-62593 - Ray-Project Ray Code Injection Vulnerability (known exploited)
|
CRITICAL | Ray | ACTIVELY EXPLOITED | KEV | 2026-08-17 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2024-3400
CVE-2024-3400 โ Palo Alto PAN-OS command injection (actively exploited)
|
CRITICAL | Palo Altopalo alto PAN-OS | ACTIVELY EXPLOITED | KEV | 2026-08-16 | CISA โ Known Exploited Vulnerabilities | Details |
|
CVE-2024-6387
CVE-2024-6387 โ OpenSSH regreSSHion (race condition)
|
HIGH | Linux OpenSSH | EXPLOITED IN WILD | KEV | 2026-08-15 | NIST NVD | Details |
|
CVE-2024-21762
CVE-2024-21762 โ Fortinet FortiOS out-of-bounds write (actively exploited)
|
CRITICAL | Fortinetfortinet FortiOS | ACTIVELY EXPLOITED | KEV | 2026-08-15 | CISA โ Known Exploited Vulnerabilities | Details |
|
CVE-2023-4966
CVE-2023-4966 โ Citrix NetScaler information disclosure (actively exploited)
|
CRITICAL | Citrixcitrix NetScalerNetScaler ADCNetScaler Gateway | ACTIVELY EXPLOITED | KEV | 2026-08-14 | CISA โ Known Exploited Vulnerabilities | Details |
|
CVE-2023-34362
CVE-2023-34362 โ MOVEit Transfer SQL injection (mass exploitation)
|
CRITICAL | Progressmicrosoftazure MOVEit Transfer | ACTIVELY EXPLOITED | KEV | 2026-08-12 | NZ NCSC / CERT NZ โ Advisories | Details |
|
CVE-2026-65660
CVE-2026-65660 Microsoft SharePoint Server Spoofing Vulnerability
|
CRITICAL | microsoft SharePoint | ACTIVELY EXPLOITED | KEV | 2026-08-11 | Microsoft Security Response Center - Update Guide | Details |
|
CVE-2026-72898
CVE-2026-72898 - Metabase SQL Injection Vulnerability (known exploited)
|
CRITICAL | Metabase | ACTIVELY EXPLOITED | KEV | 2026-08-11 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-68820
CVE-2026-68820 - Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vu
|
CRITICAL | microsoft Windows Ancillary Function Driver for WinSock | ACTIVELY EXPLOITED | KEV | 2026-08-11 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-20349
CVE-2026-20349 - Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewa
|
CRITICAL | cisco Secure Firewall Adaptive Security Appliance (ASA)Secure Firewall Threat Defense (FTD) | ACTIVELY EXPLOITED | KEV | 2026-08-11 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-8037
CVE-2026-8037 - Progress LoadMaster Command Injection Vulnerability (known exploited)
|
CRITICAL | LoadMaster | ACTIVELY EXPLOITED | KEV | 2026-08-07 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-63077
CVE-2026-63077 - JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (known
|
CRITICAL | TeamCity | ACTIVELY EXPLOITED | KEV | 2026-08-05 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-9198
CVE-2026-9198 - IBM Langflow Code Injection Vulnerability (known exploited)
|
CRITICAL | Langflow | ACTIVELY EXPLOITED | KEV | 2026-08-04 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-34486
CVE-2026-34486 - Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (known e
|
CRITICAL | apache Tomcat | ACTIVELY EXPLOITED | KEV | 2026-08-04 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-18556
CVE-2026-18556 - N-able N-central Authentication Bypass Using an Alternate Path or Channel
|
CRITICAL | N-central | ACTIVELY EXPLOITED | KEV | 2026-08-04 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-18577
CVE-2026-18577 - N-able N-central Authentication Bypass Using an Alternate Path or Channel
|
CRITICAL | N-central | ACTIVELY EXPLOITED | KEV | 2026-08-03 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-20316
CVE-2026-20316 - Cisco Secure Firewall Management Center Use of Hard-coded Password Vulner
|
CRITICAL | cisco Secure Firewall Management Center (FMC) | ACTIVELY EXPLOITED | KEV | 2026-07-29 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2026-16812
CVE-2026-16812 - Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
|
CRITICAL | VeloCloud Orchestrator | ACTIVELY EXPLOITED | KEV | 2026-07-27 | CISA - Known Exploited Vulnerabilities | Details |
|
CVE-2025-68686
CVE-2025-68686 - Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Act
|
CRITICAL | fortinet FortiOS | ACTIVELY EXPLOITED | KEV | 2026-07-27 | CISA - Known Exploited Vulnerabilities | Details |
What to do
- Identify affected systems in your environment (see Vulnerability Management).
- Apply the vendor patch or the mitigation described by the reporting agency.
- Review logs for the indicators described in the advisory.
- Monitor the CISA Known Exploited Vulnerabilities catalog and this page for updates.
