Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | – | – | |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2019-5418 | Rails Ruby on Rails | – | – | |
| CVE-2016-10033 | PHPMailer | – | – | |
| CVE-2014-3931 | Looking Glass Multi-Router Looking Glass (MRLG) | – | – | |
| CVE-2025-6554 | Google Chromium V8 | – | – | |
| CVE-2025-48928 | TeleMessage TM SGNL | – | – | |
| CVE-2025-48927 | TeleMessage TM SGNL | – | – | |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | – | – | |
| CVE-2024-54085 | AMI MegaRAC SPx | – | – | |
| CVE-2024-0769 | D-Link DIR-859 Router | – | – | |
| CVE-2019-6693 | Fortinet FortiOS | – | – | |
| CVE-2023-0386 | Linux Kernel | – | – | |
| CVE-2025-43200 | Apple Multiple Products | – | – | |
| CVE-2023-33538 | TP-Link Multiple Routers | – | – | |
| CVE-2025-33053 | Microsoft Windows | – | – | |
| CVE-2025-24016 | Wazuh Server | – | – | |
| CVE-2025-32433 | Erlang/OTP | – | – | |
| CVE-2024-42009 | Roundcube Webmail | – | – | |
| CVE-2025-5419 | Google Chromium V8 | – | – | |
| CVE-2025-27038 | Qualcomm Multiple Chipsets | – | – | |
| CVE-2025-21480 | Qualcomm Multiple Chipsets | – | – | |
| CVE-2025-21479 | Qualcomm Multiple Chipsets | – | – | |
| CVE-2025-3935 | ConnectWise ScreenConnect | – | – | |
| CVE-2025-35939 | Craft CMS | – | – | |
| CVE-2024-56145 | Craft CMS | – | – | |
| CVE-2023-39780 | ASUS RT-AX55 Routers | – | – | |
| CVE-2021-32030 | ASUS Routers | – | – | |
| CVE-2025-4632 | Samsung MagicINFO 9 Server | – | – | |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) | – | – | |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | – | – | |
| CVE-2025-27920 | Srimax Output Messenger | – | – | |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2024-11182 | MDaemon Email Server | – | – | |
| CVE-2023-38950 | ZKTeco BioTime | – | – | |
| CVE-2025-42999 | SAP NetWeaver | – | – | |
| CVE-2024-12987 | DrayTek Vigor Routers | – | – | |
| CVE-2025-32756 | Fortinet Multiple Products | – | – | |
| CVE-2025-32709 | Microsoft Windows | – | – | |
| CVE-2025-32706 | Microsoft Windows | – | – | |
| CVE-2025-32701 | Microsoft Windows | – | – | |
| CVE-2025-30400 | Microsoft Windows | – | – | |
| CVE-2025-30397 | Microsoft Windows | – | – | |
| CVE-2025-47729 | TeleMessage TM SGNL | – | – | |
| CVE-2024-6047 | GeoVision Multiple Devices | – | – | |
| CVE-2024-11120 | GeoVision Multiple Devices | – | – | |
| CVE-2025-27363 | FreeType | – | – | |
| CVE-2025-3248 | Langflow | – | – | |
| CVE-2025-34028 | Commvault Command Center | – | – | |
| CVE-2024-58136 | Yiiframework Yii | – | – |