Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | – | – | |
| CVE-2022-20775 | Cisco SD-WAN | – | – | |
| CVE-2026-25108 | Soliton Systems K.K FileZen | – | – | |
| CVE-2025-68461 | Roundcube Webmail | – | – | |
| CVE-2025-49113 | Roundcube Webmail | – | – | |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | – | – | |
| CVE-2021-22175 | GitLab | – | – | |
| CVE-2026-2441 | Google Chromium | – | – | |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | – | – | |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | – | – | |
| CVE-2008-0015 | Microsoft Windows | – | – | |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | – | – | |
| CVE-2026-20700 | Apple Multiple Products | – | – | |
| CVE-2025-40536 | SolarWinds Web Help Desk | – | – | |
| CVE-2025-15556 | Notepad++ | – | – | |
| CVE-2024-43468 | Microsoft Configuration Manager | – | – | |
| CVE-2026-21533 | Microsoft Windows | – | – | |
| CVE-2026-21525 | Microsoft Windows | – | – | |
| CVE-2026-21519 | Microsoft Windows | – | – | |
| CVE-2026-21514 | Microsoft Office | – | – | |
| CVE-2026-21513 | Microsoft Windows | – | – | |
| CVE-2026-21510 | Microsoft Windows | – | – | |
| CVE-2026-24423 | SmarterTools SmarterMail | – | – | |
| CVE-2025-11953 | React Native Community CLI | – | – | |
| CVE-2025-64328 | Sangoma FreePBX | – | – | |
| CVE-2025-40551 | SolarWinds Web Help Desk | – | – | |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | – | – | |
| CVE-2019-19006 | Sangoma FreePBX | – | – | |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | – | – | |
| CVE-2026-24858 | Fortinet Multiple Products | – | – | |
| CVE-2026-24061 | GNU InetUtils | – | – | |
| CVE-2026-23760 | SmarterTools SmarterMail | – | – | |
| CVE-2026-21509 | Microsoft Office | – | – | |
| CVE-2025-52691 | SmarterTools SmarterMail | – | – | |
| CVE-2018-14634 | Linux Kernel | – | – | |
| CVE-2024-37079 | Broadcom VMware vCenter Server | – | – | |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2025-54313 | Prettier eslint-config-prettier | – | – | |
| CVE-2025-34026 | Versa Concerto | – | – | |
| CVE-2025-31125 | Vitejs | – | – | |
| CVE-2026-20045 | Cisco Unified Communications Manager | – | – | |
| CVE-2026-20805 | Microsoft Windows | – | – | |
| CVE-2025-8110 | Gogs | – | – | |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | – | – | |
| CVE-2009-0556 | Microsoft Office | – | – | |
| CVE-2025-14847 | MongoDB and MongoDB Server | – | – | |
| CVE-2023-52163 | Digiever DS-2105 Pro | – | – | |
| CVE-2025-14733 | WatchGuard Firebox | – | – | |
| CVE-2025-59374 | ASUS Live Update | – | – | |
| CVE-2025-40602 | SonicWall SMA1000 appliance | – | – |