Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2026-72530 | TrueConf | Server | 9.5 Critical | TrueConf Server Code Injection Vulnerability | 2026-08-20 | 2026-09-03 | Unknown |
| CVE-2026-72529 | TrueConf | Server | 9.3 Critical | TrueConf Server Missing Authentication for Critical Function Vulnerability | 2026-08-20 | 2026-08-23 | Unknown |
| CVE-2026-64849 | MLflow | MLflow | 9.3 Critical | MLflow Server-Side Request Forgery Vulnerability | 2026-08-19 | 2026-09-02 | Unknown |
| CVE-2026-65400 | Apple | macOS | 9.8 Critical | Apple macOS Improper Authentication Vulnerability | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2026-59310 | Broadcom | VMware vCenter | 9.8 Critical | Broadcom VMware vCenter Path Traversal Vulnerability | 2026-08-18 | 2026-08-21 | Known |
| CVE-2026-55040 | Microsoft | SharePoint | 9.1 Critical | Microsoft SharePoint Weak Authentication Vulnerability | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2026-33824 | Microsoft | Internet Key Exchange (IKE) Service Extensions | 9.8 Critical | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 2026-08-18 | 2026-08-21 | Unknown |
| CVE-2025-62593 | Ray-Project | Ray | 9.4 Critical | Ray-Project Ray Code Injection Vulnerability | 2026-08-17 | 2026-08-20 | Unknown |
| CVE-2026-72898 | Metabase | Metabase | 10.0 Critical | Metabase SQL Injection Vulnerability | 2026-08-11 | 2026-08-14 | Unknown |
| CVE-2026-68820 | Microsoft | Windows Ancillary Function Driver for WinSock | 7.0 High | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 2026-08-11 | 2026-08-25 | Unknown |
| CVE-2026-20349 | Cisco | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 8.6 High | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 2026-08-11 | 2026-08-14 | Unknown |
| CVE-2026-8037 | Progress | LoadMaster | 9.8 Critical | Progress LoadMaster Command Injection Vulnerability | 2026-08-07 | 2026-08-10 | Unknown |
| CVE-2026-63077 | JetBrains | TeamCity | 9.8 Critical | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 2026-08-05 | 2026-08-08 | Known |
| CVE-2026-9198 | IBM | Langflow | 9.8 Critical | IBM Langflow Code Injection Vulnerability | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-34486 | Apache | Tomcat | 7.5 High | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-18556 | N-able | N-central | 8.2 High | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-08-04 | 2026-08-07 | Unknown |
| CVE-2026-18577 | N-able | N-central | 8.2 High | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-08-03 | 2026-08-06 | Unknown |
| CVE-2026-20316 | Cisco | Secure Firewall Management Center (FMC) | 5.3 Medium | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 2026-07-29 | 2026-08-01 | Known |
| CVE-2026-16812 | Arista | VeloCloud Orchestrator | 10.0 Critical | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 2026-07-27 | 2026-07-30 | Unknown |
| CVE-2025-68686 | Fortinet | FortiOS | 5.9 Medium | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-07-27 | 2026-08-10 | Unknown |
| CVE-2026-50522 | Microsoft | SharePoint | 9.8 Critical | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-22 | 2026-07-25 | Unknown |
| CVE-2026-16232 | Check Point | SmartConsole | 9.1 Critical | Check Point SmartConsole Improper Authentication Vulnerability | 2026-07-22 | 2026-07-25 | Unknown |
| CVE-2026-63030 | WordPress | Core | 9.8 Critical | WordPress Core Interpretation Conflict Vulnerability | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2026-60137 | WordPress | Core | 5.9 Medium | WordPress Core SQL Injection Vulnerability | 2026-07-21 | 2026-08-04 | Unknown |
| CVE-2026-0770 | Langflow | Langflow | 9.8 Critical | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2021-27137 | DD-WRT | DD-WRT | 8.1 High | DD-WRT Stack-Based Buffer Overflow Vulnerability | 2026-07-21 | 2026-07-24 | Unknown |
| CVE-2026-58644 | Microsoft | SharePoint | 9.8 Critical | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-39808 | Fortinet | FortiSandbox | 9.8 Critical | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-25089 | Fortinet | FortiSandbox | 9.8 Critical | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | 2026-07-19 | Unknown |
| CVE-2026-46817 | Oracle | E-Business Suite | 9.8 Critical | Oracle E-Business Suite Improper Privilege Management Vulnerability | 2026-07-15 | 2026-07-18 | Unknown |
| CVE-2023-4346 | KNX Association | KNX Protocol Connection Authorization Option 1 | 7.5 High | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability | 2026-07-15 | 2026-07-29 | Unknown |
| CVE-2026-56164 | Microsoft | SharePoint Server | 9.8 Critical | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 2026-07-14 | 2026-07-17 | Unknown |
| CVE-2026-56155 | Microsoft | Active Directory Federation Services | 7.8 High | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 2026-07-14 | 2026-07-28 | Unknown |
| CVE-2026-15410 | SonicWall | SMA1000 Appliances | 7.2 High | SonicWall SMA1000 Appliances Code Injection Vulnerability | 2026-07-14 | 2026-07-17 | Known |
| CVE-2026-15409 | SonicWall | SMA1000 Appliances | 10.0 Critical | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-07-14 | 2026-07-17 | Known |
| CVE-2008-4128 | Cisco | IOS | 4.3 Medium | Cisco IOS Cross-Site Request Forgery Vulnerability | 2026-07-13 | 2026-07-16 | Unknown |
| CVE-2026-56291 | Balbooa | Forms | 10.0 Critical | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-10 | 2026-07-13 | Unknown |
| CVE-2026-48939 | iCagenda | iCagenda | 10.0 Critical | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-10 | 2026-07-13 | Unknown |
| CVE-2026-56290 | Joomlack | Page Builder | 10.0 Critical | Joomlack Page Builder Improper Access Control Vulnerability | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-55255 | Langflow | Langflow | 8.4 High | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-48908 | JoomShaper | SP Page Builder | 10.0 Critical | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-48282 | Adobe | ColdFusion | 10.0 Critical | Adobe ColdFusion Path Traversal Vulnerability | 2026-07-07 | 2026-07-10 | Unknown |
| CVE-2026-45659 | Microsoft | SharePoint Server | 8.8 High | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 2026-07-01 | 2026-07-04 | Known |
| CVE-2026-48558 | SimpleHelp | SimpleHelp | 9.5 Critical | SimpleHelp Authentication Bypass Vulnerability | 2026-06-29 | 2026-07-02 | Unknown |
| CVE-2026-20230 | Cisco | Unified Communications Manager | 8.6 High | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 2026-06-25 | 2026-06-28 | Unknown |
| CVE-2026-12569 | PTC | Windchill and FlexPLM | 9.3 Critical | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 2026-06-25 | 2026-06-28 | Known |
| CVE-2026-34910 | Ubiquiti | UniFi OS | 10.0 Critical | Ubiquiti UniFi OS Improper Input Validation Vulnerability | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-34909 | Ubiquiti | UniFi OS | 10.0 Critical | Ubiquiti UniFi OS Path Traversal Vulnerability | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2026-34908 | Ubiquiti | UniFi OS | 10.0 Critical | Ubiquiti UniFi OS Improper Access Control Vulnerability | 2026-06-23 | 2026-06-26 | Unknown |
| CVE-2025-67038 | Lantronix | EDS5000 | 9.8 Critical | Lantronix EDS5000 Code Injection Vulnerability | 2026-06-23 | 2026-06-26 | Unknown |