Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2026-86950 | Apple Multiple Products | – | – | |
| CVE-2026-88772 | Citrix NetScaler | – | – | |
| CVE-2026-88771 | Citrix NetScaler | – | – | |
| CVE-2026-87902 | WordPress Core | – | – | |
| CVE-2026-67279 | MikroTik RouterOS | – | – | |
| CVE-2026-65660 | Microsoft SharePoint | – | – | |
| CVE-2026-71362 | Adobe Commerce and Magento | – | – | |
| CVE-2026-5430 | WSO2 Multiple Products | – | – | |
| CVE-2026-94127 | F5 BIG-IP APM | – | – | |
| CVE-2026-93952 | Arista VeloCloud Orchestrator | – | – | |
| CVE-2026-93616 | Check Point Multiple Products | – | – | |
| CVE-2026-85102 | Check Point Multiple Products | – | – | |
| CVE-2026-7273 | Zyxel GS1900 Series Switches | – | – | |
| CVE-2026-53266 | Linux Kernel | – | – | |
| CVE-2025-39964 | Linux Kernel | 5.5 | – | |
| CVE-2025-39682 | Linux Kernel | – | – | |
| CVE-2026-87886 | Acronis Backup | – | – | |
| CVE-2026-76460 | Cisco Identity Services Engine | – | – | |
| CVE-2026-58704 | Google Pixel | – | – | |
| CVE-2026-76461 | Cisco Secure Email Gateway | – | – | |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | – | – | |
| CVE-2026-84869 | ConnectWise ScreenConnect | – | – | |
| CVE-2026-42018 | JFrog Artifactory | – | – | |
| CVE-2026-42016 | JFrog Artifactory | – | – | |
| CVE-2026-86060 | MikroTik RouterOS | – | – | |
| CVE-2026-67277 | MikroTik RouterOS | – | – | |
| CVE-2026-87491 | Google Chromium V8 | – | – | |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | – | – | |
| CVE-2026-19490 | Citrix NetScaler | – | – | |
| CVE-2025-25249 | Fortinet Multiple Products | – | – | |
| CVE-2026-86218 | N-able N-central | – | – | |
| CVE-2026-85880 | Microsoft Windows | – | – | |
| CVE-2026-81963 | Microsoft Windows | – | – | |
| CVE-2026-75650 | Adobe Commerce and Magento | – | – | |
| CVE-2026-85046 | Google Chromium V8 | – | – | |
| CVE-2026-9586 | Sangoma Switchvox | – | – | |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | – | – | |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | – | – | |
| CVE-2026-82329 | JFrog Artifactory | – | – | |
| CVE-2026-59822 | BerriAI LiteLLM | – | – | |
| CVE-2026-49869 | Kestra OSS | – | – | |
| CVE-2026-48710 | Kludex Starlette | – | – | |
| CVE-2026-82078 | PaperCut NG/MF | – | – | |
| CVE-2026-81578 | PaperCut NG/MF | – | – | |
| CVE-2026-66384 | JFrog Artifactory | – | – | |
| CVE-2026-53362 | Linux Kernel | – | – | |
| CVE-2023-49105 | ownCloud | – | – | |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | – | – | |
| CVE-2022-0995 | Linux Kernel | – | – | |
| CVE-2021-23758 | Ajax.NET Professional | – | – |