Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2026-20253 | Splunk | Enterprise | 9.8 Critical | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | 2026-06-18 | 2026-06-21 | Unknown |
| CVE-2026-48907 | Widget Factory | Joomla Content Editor | 10.0 Critical | Widget Factory Joomla Content Editor Improper Access Control Vulnerability | 2026-06-16 | 2026-06-19 | Unknown |
| CVE-2026-54420 | LiteSpeed | cPanel Plugin | 8.5 High | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 2026-06-15 | 2026-06-18 | Unknown |
| CVE-2026-20262 | Cisco | Catalyst SD-WAN Manager | 6.5 Medium | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 2026-06-15 | 2026-06-29 | Unknown |
| CVE-2026-35273 | Oracle | PeopleSoft Enterprise PeopleTools | 9.8 Critical | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 2026-06-12 | 2026-06-15 | Known |
| CVE-2026-10520 | Ivanti | Sentry | 10.0 Critical | Ivanti Sentry OS Command Injection Vulnerability | 2026-06-11 | 2026-06-14 | Unknown |
| CVE-2026-7473 | Arista | Extensible Operating System | 6.9 Medium | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 2026-06-09 | 2026-06-23 | Unknown |
| CVE-2026-20245 | Cisco | Catalyst SD-WAN Manager | 7.8 High | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 2026-06-09 | 2026-06-23 | Unknown |
| CVE-2026-11645 | Chromium V8 | 8.8 High | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 2026-06-09 | 2026-06-23 | Unknown | |
| CVE-2026-50751 | Check Point | Security Gateway | 9.3 Critical | Check Point Security Gateway Improper Authentication Vulnerability | 2026-06-08 | 2026-06-11 | Known |
| CVE-2026-42271 | BerriAI | LiteLLM | 8.7 High | BerriAI LiteLLM Command Injection Vulnerability | 2026-06-08 | 2026-06-22 | Unknown |
| CVE-2026-28318 | SolarWinds | Serv-U | 7.5 High | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 2026-06-05 | 2026-06-19 | Unknown |
| CVE-2026-45247 | Mirasvit | Mirasvit Full Page Cache Warmer | 9.3 Critical | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 2026-06-03 | 2026-06-06 | Unknown |
| CVE-2025-48595 | Android | Framework | 8.4 High | Android Framework Integer Overflow Vulnerability | 2026-06-02 | 2026-06-05 | Unknown |
| CVE-2022-0492 | Linux | Kernel | 7.8 High | Linux Kernel Improper Authentication Vulnerability | 2026-06-02 | 2026-06-05 | Unknown |
| CVE-2024-21182 | Oracle | WebLogic Server | 7.5 High | Oracle WebLogic Server Unspecified Vulnerability | 2026-06-01 | 2026-06-04 | Unknown |
| CVE-2026-0257 | Palo Alto Networks | PAN-OS | 7.8 High | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2026-05-29 | 2026-06-01 | Known |
| CVE-2026-8398 | Daemon | Daemon Tools Lite | 9.3 Critical | Daemon Tools Lite Embedded Malicious Code Vulnerability | 2026-05-27 | 2026-05-30 | Unknown |
| CVE-2026-48027 | Nx | Nx Console | 9.3 Critical | Nx Console Embedded Malicious Code Vulnerability | 2026-05-27 | 2026-06-10 | Known |
| CVE-2026-45321 | TanStack | TanStack | 9.6 Critical | TanStack Unspecified Vulnerability | 2026-05-27 | 2026-06-10 | Known |
| CVE-2026-48172 | LiteSpeed | cPanel Plugin | 10.0 Critical | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 2026-05-26 | 2026-05-29 | Unknown |
| CVE-2026-9082 | Drupal | Core | 9.8 Critical | Drupal Core SQL Injection Vulnerability | 2026-05-22 | 2026-05-27 | Unknown |
| CVE-2026-34926 | Trend Micro | Apex One | 6.7 Medium | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 2026-05-21 | 2026-06-04 | Unknown |
| CVE-2025-34291 | Langflow | Langflow | 9.4 Critical | Langflow Origin Validation Error Vulnerability | 2026-05-21 | 2026-06-04 | Unknown |
| CVE-2026-45498 | Microsoft | Defender | 7.5 High | Microsoft Defender Denial of Service Vulnerability | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2026-41091 | Microsoft | Defender | 7.8 High | Microsoft Defender Link Following Vulnerability | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2010-0806 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Use-After-Free Vulnerability | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2010-0249 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Use-After-Free Vulnerability | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2009-3459 | Adobe | Acrobat and Reader | 8.8 High | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2009-1537 | Microsoft | DirectX | 8.8 High | Microsoft DirectX NULL Byte Overwrite Vulnerability | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2008-4250 | Microsoft | Windows | 9.8 Critical | Microsoft Windows Buffer Overflow Vulnerability | 2026-05-20 | 2026-06-03 | Unknown |
| CVE-2026-42897 | Microsoft | Microsoft | 6.1 Medium | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 2026-05-15 | 2026-05-29 | Unknown |
| CVE-2026-20182 | Cisco | Catalyst SD-WAN | 10.0 Critical | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 2026-05-14 | 2026-05-17 | Unknown |
| CVE-2026-42208 | BerriAI | LiteLLM | 9.3 Critical | BerriAI LiteLLM SQL Injection Vulnerability | 2026-05-08 | 2026-05-11 | Unknown |
| CVE-2026-6973 | Ivanti | Endpoint Manager Mobile (EPMM) | 7.2 High | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 2026-05-07 | 2026-05-10 | Unknown |
| CVE-2026-0300 | Palo Alto Networks | PAN-OS | 9.3 Critical | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 2026-05-06 | 2026-05-09 | Unknown |
| CVE-2026-31431 | Linux | Kernel | 7.8 High | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 2026-05-01 | 2026-05-15 | Unknown |
| CVE-2026-41940 | WebPros | cPanel & WHM and WP2 (WordPress Squared) | 9.3 Critical | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | 2026-04-30 | 2026-05-03 | Known |
| CVE-2026-32202 | Microsoft | Windows | 4.3 Medium | Microsoft Windows Protection Mechanism Failure Vulnerability | 2026-04-28 | 2026-05-12 | Unknown |
| CVE-2024-1708 | ConnectWise | ScreenConnect | 8.4 High | ConnectWise ScreenConnect Path Traversal Vulnerability | 2026-04-28 | 2026-05-12 | Known |
| CVE-2025-29635 | D-Link | DIR-823X | 7.2 High | D-Link DIR-823X Command Injection Vulnerability | 2026-04-24 | 2026-05-08 | Unknown |
| CVE-2024-7399 | Samsung | MagicINFO 9 Server | 9.8 Critical | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 2026-04-24 | 2026-05-08 | Unknown |
| CVE-2024-57728 | SimpleHelp | SimpleHelp | 7.2 High | SimpleHelp Path Traversal Vulnerability | 2026-04-24 | 2026-05-08 | Known |
| CVE-2024-57726 | SimpleHelp | SimpleHelp | 9.9 Critical | SimpleHelp Missing Authorization Vulnerability | 2026-04-24 | 2026-05-08 | Known |
| CVE-2026-39987 | Marimo | Marimo | 9.3 Critical | Marimo Remote Code Execution Vulnerability | 2026-04-23 | 2026-05-07 | Unknown |
| CVE-2026-33825 | Microsoft | Defender | 7.8 High | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 2026-04-22 | 2026-05-06 | Known |
| CVE-2026-20133 | Cisco | Catalyst SD-WAN Manager | 7.5 High | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2026-20128 | Cisco | Catalyst SD-WAN Manager | 7.5 High | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2026-20122 | Cisco | Catalyst SD-WAN Manger | 5.4 Medium | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 2026-04-20 | 2026-04-23 | Unknown |
| CVE-2025-48700 | Synacor | Zimbra Collaboration Suite (ZCS) | 6.1 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 2026-04-20 | 2026-04-23 | Unknown |