Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2019-1068 | Microsoft SQL Server | – | – | |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | – | – | |
| CVE-2015-3246 | Red Hat Libuser | – | – | |
| CVE-2026-60004 | Gitea | – | – | |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | – | – | |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2026-72530 | TrueConf Server | – | – | |
| CVE-2026-72529 | TrueConf Server | – | – | |
| CVE-2026-64849 | MLflow | – | – | |
| CVE-2026-65400 | Apple macOS | – | – | |
| CVE-2026-59310 | Broadcom VMware vCenter | – | – | |
| CVE-2026-55040 | Microsoft SharePoint | – | – | |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | – | – | |
| CVE-2025-62593 | Ray-Project Ray | – | – | |
| CVE-2026-72898 | Metabase | – | – | |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | – | – | |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | – | – | |
| CVE-2026-8037 | Progress LoadMaster | – | – | |
| CVE-2026-63077 | JetBrains TeamCity | – | – | |
| CVE-2026-9198 | IBM Langflow | – | – | |
| CVE-2026-34486 | Apache Tomcat | – | – | |
| CVE-2026-18556 | N-able N-central | – | – | |
| CVE-2026-18577 | N-able N-central | – | – | |
| CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) | – | – | |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | – | – | |
| CVE-2025-68686 | Fortinet FortiOS | – | – | |
| CVE-2026-50522 | Microsoft SharePoint | – | – | |
| CVE-2026-16232 | Check Point SmartConsole | – | – | |
| CVE-2026-63030 | WordPress Core | – | – | |
| CVE-2026-60137 | WordPress Core | – | – | |
| CVE-2026-0770 | Langflow | – | – | |
| CVE-2021-27137 | DD-WRT | – | – | |
| CVE-2026-58644 | Microsoft SharePoint | – | – | |
| CVE-2026-39808 | Fortinet FortiSandbox | – | – | |
| CVE-2026-25089 | Fortinet FortiSandbox | – | – | |
| CVE-2026-46817 | Oracle E-Business Suite | – | – | |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 | – | – | |
| CVE-2026-56164 | Microsoft SharePoint Server | – | – | |
| CVE-2026-56155 | Microsoft Active Directory Federation Services | – | – | |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | – | – | |
| CVE-2026-15409 | SonicWall SMA1000 Appliances | – | – | |
| CVE-2008-4128 | Cisco IOS | – | – | |
| CVE-2026-56291 | Balbooa Forms | – | – | |
| CVE-2026-48939 | iCagenda | – | – | |
| CVE-2026-56290 | Joomlack Page Builder | – | – | |
| CVE-2026-55255 | Langflow | – | – | |
| CVE-2026-48908 | JoomShaper SP Page Builder | – | – | |
| CVE-2026-48282 | Adobe ColdFusion | – | – | |
| CVE-2026-45659 | Microsoft SharePoint Server | – | – | |
| CVE-2026-48558 | SimpleHelp | – | – |