Browse

CISA KEV catalog

Search and filter the complete official catalog.

Search CVE IDs and vulnerability names.
Filter the catalog Select one or more technologies to create a focused view.
Vendors
All vendors
Products
All products
1723 results
CVE Vendor Product CVSS Vulnerability Added Due Ransomware
CVE-2026-72530 TrueConf Server 9.5 Critical TrueConf Server Code Injection Vulnerability 2026-08-20 2026-09-03 Unknown
CVE-2026-72529 TrueConf Server 9.3 Critical TrueConf Server Missing Authentication for Critical Function Vulnerability 2026-08-20 2026-08-23 Unknown
CVE-2026-64849 MLflow MLflow 9.3 Critical MLflow Server-Side Request Forgery Vulnerability 2026-08-19 2026-09-02 Unknown
CVE-2026-65400 Apple macOS 9.8 Critical Apple macOS Improper Authentication Vulnerability 2026-08-18 2026-08-21 Unknown
CVE-2026-59310 Broadcom VMware vCenter 9.8 Critical Broadcom VMware vCenter Path Traversal Vulnerability 2026-08-18 2026-08-21 Known
CVE-2026-55040 Microsoft SharePoint 9.1 Critical Microsoft SharePoint Weak Authentication Vulnerability 2026-08-18 2026-08-21 Unknown
CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions 9.8 Critical Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability 2026-08-18 2026-08-21 Unknown
CVE-2025-62593 Ray-Project Ray 9.4 Critical Ray-Project Ray Code Injection Vulnerability 2026-08-17 2026-08-20 Unknown
CVE-2026-72898 Metabase Metabase 10.0 Critical Metabase SQL Injection Vulnerability 2026-08-11 2026-08-14 Unknown
CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock 7.0 High Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 2026-08-11 2026-08-25 Unknown
CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) 8.6 High Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability 2026-08-11 2026-08-14 Unknown
CVE-2026-8037 Progress LoadMaster 9.8 Critical Progress LoadMaster Command Injection Vulnerability 2026-08-07 2026-08-10 Unknown
CVE-2026-63077 JetBrains TeamCity 9.8 Critical JetBrains TeamCity Deserialization of Untrusted Data Vulnerability 2026-08-05 2026-08-08 Known
CVE-2026-9198 IBM Langflow 9.8 Critical IBM Langflow Code Injection Vulnerability 2026-08-04 2026-08-07 Unknown
CVE-2026-34486 Apache Tomcat 7.5 High Apache Tomcat Missing Encryption of Sensitive Data Vulnerability 2026-08-04 2026-08-07 Unknown
CVE-2026-18556 N-able N-central 8.2 High N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-08-04 2026-08-07 Unknown
CVE-2026-18577 N-able N-central 8.2 High N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-08-03 2026-08-06 Unknown
CVE-2026-20316 Cisco Secure Firewall Management Center (FMC) 5.3 Medium Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability 2026-07-29 2026-08-01 Known
CVE-2026-16812 Arista VeloCloud Orchestrator 10.0 Critical Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability 2026-07-27 2026-07-30 Unknown
CVE-2025-68686 Fortinet FortiOS 5.9 Medium Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability 2026-07-27 2026-08-10 Unknown
CVE-2026-50522 Microsoft SharePoint 9.8 Critical Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-22 2026-07-25 Unknown
CVE-2026-16232 Check Point SmartConsole 9.1 Critical Check Point SmartConsole Improper Authentication Vulnerability 2026-07-22 2026-07-25 Unknown
CVE-2026-63030 WordPress Core 9.8 Critical WordPress Core Interpretation Conflict Vulnerability 2026-07-21 2026-07-24 Unknown
CVE-2026-60137 WordPress Core 5.9 Medium WordPress Core SQL Injection Vulnerability 2026-07-21 2026-08-04 Unknown
CVE-2026-0770 Langflow Langflow 9.8 Critical Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability 2026-07-21 2026-07-24 Unknown
CVE-2021-27137 DD-WRT DD-WRT 8.1 High DD-WRT Stack-Based Buffer Overflow Vulnerability 2026-07-21 2026-07-24 Unknown
CVE-2026-58644 Microsoft SharePoint 9.8 Critical Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-16 2026-07-19 Unknown
CVE-2026-39808 Fortinet FortiSandbox 9.8 Critical Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16 2026-07-19 Unknown
CVE-2026-25089 Fortinet FortiSandbox 9.8 Critical Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16 2026-07-19 Unknown
CVE-2026-46817 Oracle E-Business Suite 9.8 Critical Oracle E-Business Suite Improper Privilege Management Vulnerability 2026-07-15 2026-07-18 Unknown
CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 7.5 High KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability 2026-07-15 2026-07-29 Unknown
CVE-2026-56164 Microsoft SharePoint Server 9.8 Critical Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability 2026-07-14 2026-07-17 Unknown
CVE-2026-56155 Microsoft Active Directory Federation Services 7.8 High Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 2026-07-14 2026-07-28 Unknown
CVE-2026-15410 SonicWall SMA1000 Appliances 7.2 High SonicWall SMA1000 Appliances Code Injection Vulnerability 2026-07-14 2026-07-17 Known
CVE-2026-15409 SonicWall SMA1000 Appliances 10.0 Critical SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability 2026-07-14 2026-07-17 Known
CVE-2008-4128 Cisco IOS 4.3 Medium Cisco IOS Cross-Site Request Forgery Vulnerability 2026-07-13 2026-07-16 Unknown
CVE-2026-56291 Balbooa Forms 10.0 Critical Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 2026-07-13 Unknown
CVE-2026-48939 iCagenda iCagenda 10.0 Critical iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 2026-07-13 Unknown
CVE-2026-56290 Joomlack Page Builder 10.0 Critical Joomlack Page Builder Improper Access Control Vulnerability 2026-07-07 2026-07-10 Unknown
CVE-2026-55255 Langflow Langflow 8.4 High Langflow Authorization Bypass Through User-Controlled Key Vulnerability 2026-07-07 2026-07-10 Unknown
CVE-2026-48908 JoomShaper SP Page Builder 10.0 Critical JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-07 2026-07-10 Unknown
CVE-2026-48282 Adobe ColdFusion 10.0 Critical Adobe ColdFusion Path Traversal Vulnerability 2026-07-07 2026-07-10 Unknown
CVE-2026-45659 Microsoft SharePoint Server 8.8 High Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability 2026-07-01 2026-07-04 Known
CVE-2026-48558 SimpleHelp SimpleHelp 9.5 Critical SimpleHelp Authentication Bypass Vulnerability 2026-06-29 2026-07-02 Unknown
CVE-2026-20230 Cisco Unified Communications Manager 8.6 High Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability 2026-06-25 2026-06-28 Unknown
CVE-2026-12569 PTC Windchill and FlexPLM 9.3 Critical PTC Windchill and FlexPLM Improper Input Validation Vulnerability 2026-06-25 2026-06-28 Known
CVE-2026-34910 Ubiquiti UniFi OS 10.0 Critical Ubiquiti UniFi OS Improper Input Validation Vulnerability 2026-06-23 2026-06-26 Unknown
CVE-2026-34909 Ubiquiti UniFi OS 10.0 Critical Ubiquiti UniFi OS Path Traversal Vulnerability 2026-06-23 2026-06-26 Unknown
CVE-2026-34908 Ubiquiti UniFi OS 10.0 Critical Ubiquiti UniFi OS Improper Access Control Vulnerability 2026-06-23 2026-06-26 Unknown
CVE-2025-67038 Lantronix EDS5000 9.8 Critical Lantronix EDS5000 Code Injection Vulnerability 2026-06-23 2026-06-26 Unknown