Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2026-20230 | Cisco Unified Communications Manager | – | – | |
| CVE-2026-12569 | PTC Windchill and FlexPLM | – | – | |
| CVE-2026-34910 | Ubiquiti UniFi OS | – | – | |
| CVE-2026-34909 | Ubiquiti UniFi OS | – | – | |
| CVE-2026-34908 | Ubiquiti UniFi OS | – | – | |
| CVE-2025-67038 | Lantronix EDS5000 | – | – | |
| CVE-2026-20253 | Splunk Enterprise | – | – | |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | – | – | |
| CVE-2026-54420 | LiteSpeed cPanel Plugin | – | – | |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | – | – | |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | – | – | |
| CVE-2026-10520 | Ivanti Sentry | – | – | |
| CVE-2026-7473 | Arista Extensible Operating System | – | – | |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | – | – | |
| CVE-2026-11645 | Google Chromium V8 | – | – | |
| CVE-2026-50751 | Check Point Security Gateway | – | – | |
| CVE-2026-42271 | BerriAI LiteLLM | – | – | |
| CVE-2026-28318 | SolarWinds Serv-U | – | – | |
| CVE-2026-45247 | Mirasvit Full Page Cache Warmer | – | – | |
| CVE-2025-48595 | Android Framework | – | – | |
| CVE-2022-0492 | Linux Kernel | – | – | |
| CVE-2024-21182 | Oracle WebLogic Server | – | – | |
| CVE-2026-0257 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2026-8398 | Daemon Tools Lite | – | – | |
| CVE-2026-48027 | Nx Console | – | – | |
| CVE-2026-45321 | TanStack | – | – | |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | – | – | |
| CVE-2026-9082 | Drupal Core | – | – | |
| CVE-2026-34926 | Trend Micro Apex One | – | – | |
| CVE-2025-34291 | Langflow | – | – | |
| CVE-2026-45498 | Microsoft Defender | – | – | |
| CVE-2026-41091 | Microsoft Defender | – | – | |
| CVE-2010-0806 | Microsoft Internet Explorer | – | – | |
| CVE-2010-0249 | Microsoft Internet Explorer | – | – | |
| CVE-2009-3459 | Adobe Acrobat and Reader | – | – | |
| CVE-2009-1537 | Microsoft DirectX | – | – | |
| CVE-2008-4250 | Microsoft Windows | – | – | |
| CVE-2026-42897 | Microsoft | – | – | |
| CVE-2026-20182 | Cisco Catalyst SD-WAN | – | – | |
| CVE-2026-42208 | BerriAI LiteLLM | – | – | |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | – | – | |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | – | – | |
| CVE-2026-31431 | Linux Kernel | – | – | |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | – | – | |
| CVE-2026-32202 | Microsoft Windows | – | – | |
| CVE-2024-1708 | ConnectWise ScreenConnect | – | – | |
| CVE-2025-29635 | D-Link DIR-823X | – | – | |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | – | – | |
| CVE-2024-57728 | SimpleHelp | – | – | |
| CVE-2024-57726 | SimpleHelp | – | – |