Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2026-20320 | Cisco BroadWorks | 7.5 | Report | |
| CVE-2026-125350 | Google Chromium | 8.8 | – | |
| CVE-2026-116606 | Barracuda Networks Barracuda Email Security Gateway (ESG) | 9.3 | Report | |
| CVE-2026-111793 | Openwave Messaging Webtop Media Transcoder | 4.3 | – | |
| CVE-2026-111560 | Barracuda Networks Multiple Products | 8.6 | Report | |
| CVE-2026-124194 | Microsoft Office | 6.5 | Report | |
| CVE-2026-123218 | IBM Aspera Faspex | 9.8 | – | |
| CVE-2026-123158 | OpenBSD OpenSSH | 8.1 | Report | |
| CVE-2026-116779 | SignalWire FreeSwitch | 9.8 | – | |
| CVE-2026-102895 | GPUStack | 9.8 | – | |
| CVE-2026-19868 | SonicWall SonicOS SSLVPN | 7.5 | Report | |
| CVE-2024-27834 | Apple Multiple Products | 5.5 | – | |
| CVE-2026-119977 | WordPress Core | 8.1 | – | |
| CVE-2026-118527 | Ivanti Connect Secure | 4.3 | – | |
| CVE-2026-111357 | Ivanti Connect Secure | 7.0 | Report | |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | 10.0 | Report | |
| CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | 8.6 | – | |
| CVE-2026-46300 | Linux Kernel | 7.8 | – | |
| CVE-2026-41709 | Broadcom VMware ESX | 2.7 | – | |
| CVE-2026-48356 | Adobe Commerce and Magento | 9.3 | – | |
| CVE-2026-111497 | Google Brotli | 9.2 | – | |
| CVE-2026-109619 | PHP Group PHP | 9.2 | – | |
| CVE-2026-109618 | PHP Group PHP | 9.2 | Report | |
| CVE-2026-114625 | Arista VeloCloud Orchestrator | 9.4 | – | |
| CVE-2026-110447 | Collabora Online – Built-in CODE Server | 9.2 | – | |
| CVE-2026-96656 | Plex Media Server | 8.6 | – | |
| CVE-2026-96655 | Plex Media Server | 5.3 | – | |
| CVE-2026-96654 | Plex Media Server | 6.9 | – | |
| CVE-2026-96652 | Plex Media Server | 5.3 | – | |
| CVE-2026-110936 | Siemens Software Center | 8.4 | – | |
| CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition | 8.5 | – | |
| CVE-2026-102764 | BeyondTrust Remote Support | 9.3 | Report | |
| CVE-2025-61624 | Fortinet Multiple Products | 6.5 | – | |
| CVE-2026-21589 | Atlassian Multiple Products | 9.3 | Report | |
| CVE-2026-76519 | Cisco Secure Email Gateway | 9.8 | Report | |
| CVE-2026-105134 | AhsayCBS | 10.0 | – | |
| CVE-2026-105133 | AhsayCBS | 6.9 | – | |
| CVE-2026-0322 | Palo Alto Networks PAN-OS | 8.6 | – | |
| CVE-2026-96951 | Microsoft Windows | 8.8 | – | |
| CVE-2026-104935 | Ivanti Connect Secure | 8.6 | – | |
| CVE-2023-22894 | Strapi | – | – | |
| CVE-2021-3199 | ONLYOFFICE Docs | – | – | |
| CVE-2016-3081 | Apache Struts | – | – | |
| CVE-2015-5477 | ISC BIND | – | – | |
| CVE-2015-3306 | ProFTPD | – | – | |
| CVE-2026-88779 | Citrix NetScaler | – | – | |
| CVE-2026-102490 | Zammad | – | – | |
| CVE-2026-102489 | Zammad | – | – | |
| CVE-2026-104286 | Fortinet FortiMail | – | – | |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | – | – |