Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2026-39987 | Marimo | – | – | |
| CVE-2026-33825 | Microsoft Defender | – | – | |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | – | – | |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | – | – | |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | – | – | |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | – | – | |
| CVE-2025-2749 | Kentico Xperience | – | – | |
| CVE-2024-27199 | JetBrains TeamCity | – | – | |
| CVE-2023-27351 | PaperCut NG/MF | – | – | |
| CVE-2026-34197 | Apache ActiveMQ | – | – | |
| CVE-2026-32201 | Microsoft SharePoint Server | – | – | |
| CVE-2009-0238 | Microsoft Office | – | – | |
| CVE-2026-34621 | Adobe Acrobat and Reader | – | – | |
| CVE-2026-21643 | Fortinet FortiClient EMS | – | – | |
| CVE-2025-60710 | Microsoft Windows | – | – | |
| CVE-2023-36424 | Microsoft Windows | – | – | |
| CVE-2023-21529 | Microsoft Exchange Server | – | – | |
| CVE-2020-9715 | Adobe Acrobat | – | – | |
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | – | – | |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | – | – | |
| CVE-2026-35616 | Fortinet FortiClient EMS | – | – | |
| CVE-2026-3502 | TrueConf Client | – | – | |
| CVE-2026-5281 | Google Dawn | – | – | |
| CVE-2026-3055 | Citrix NetScaler | – | – | |
| CVE-2025-53521 | F5 BIG-IP | – | – | |
| CVE-2026-33634 | Aquasecurity Trivy | – | – | |
| CVE-2026-33017 | Langflow | – | – | |
| CVE-2025-54068 | Laravel Livewire | – | – | |
| CVE-2025-43520 | Apple Multiple Products | – | – | |
| CVE-2025-43510 | Apple Multiple Products | – | – | |
| CVE-2025-32432 | Craft CMS | – | – | |
| CVE-2025-31277 | Apple Multiple Products | – | – | |
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | – | – | |
| CVE-2026-20963 | Microsoft SharePoint | – | – | |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2025-47813 | Wing FTP Server | – | – | |
| CVE-2026-3910 | Google Chromium V8 | – | – | |
| CVE-2026-3909 | Google Skia | – | – | |
| CVE-2025-68613 | n8n | – | – | |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | – | – | |
| CVE-2025-26399 | SolarWinds Web Help Desk | – | – | |
| CVE-2021-22054 | Omnissa Workspace One UEM | – | – | |
| CVE-2023-43000 | Apple Multiple Products | – | – | |
| CVE-2023-41974 | Apple iOS and iPadOS | – | – | |
| CVE-2021-30952 | Apple Multiple Products | – | – | |
| CVE-2021-22681 | Rockwell Multiple Products | – | – | |
| CVE-2017-7921 | Hikvision Multiple Products | – | – | |
| CVE-2026-22719 | Broadcom VMware Aria Operations | – | – | |
| CVE-2026-21385 | Qualcomm Multiple Chipsets | – | – |