KEV Catalog Search
All 1748 vulnerabilities in CISA's Known Exploited Vulnerabilities catalog, newest first. Updated hourly (catalog version 2026.10.16). ← Back to the CISA feed
1748 results
| CVE | Vendor / product | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|
| CVE-2026-102764 Our coverage |
BeyondTrust Remote Support |
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 2026-10-16 | 2026-10-19 | Unknown |
| CVE-2025-61624 Our coverage |
Fortinet Multiple Products |
Fortinet Multiple Products Path Traversal Vulnerability | 2026-10-16 | 2026-10-19 | Unknown |
| CVE-2026-21589 Our coverage |
Atlassian Multiple Products |
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 2026-10-15 | 2026-10-18 | Unknown |
| CVE-2026-76519 Our coverage |
Cisco Secure Email Gateway |
Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-105134 Our coverage |
Ahsay AhsayCBS |
Ahsay AhsayCBS Command Injection Vulnerability | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-105133 Our coverage |
Ahsay AhsayCBS |
Ahsay AhsayCBS Improper Authentication Vulnerability | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-0322 Our coverage |
Palo Alto Networks PAN-OS |
Palo Alto Networks PAN-OS Code Injection Vulnerability | 2026-10-14 | 2026-10-17 | Unknown |
| CVE-2026-96951 Our coverage |
Microsoft Windows |
Microsoft Windows Command Injection Vulnerability | 2026-10-13 | 2026-10-16 | Unknown |
| CVE-2026-104935 Our coverage |
Ivanti Connect Secure |
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 2026-10-13 | 2026-10-16 | Unknown |
| CVE-2023-22894 | Strapi Strapi |
Strapi Cleartext Storage of Sensitive Information Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2021-3199 | ONLYOFFICE Docs |
ONLYOFFICE Docs Server Path Traversal Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2016-3081 | Apache Struts |
Apache Struts Command Injection Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2015-5477 | ISC BIND |
ISC BIND Data Processing Errors Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2015-3306 | ProFTPD ProFTPD |
ProFTPD Improper Access Control Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2026-88779 Our coverage |
Citrix NetScaler |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-10-04 | 2026-10-07 | Unknown |
| CVE-2026-102490 | Zammad GmbH Zammad |
Zammad GmbH Zammad Improper Privilege Management Vulnerability | 2026-10-02 | 2026-10-05 | Unknown |
| CVE-2026-102489 | Zammad GmbH Zammad |
Zammad GmbH Zammad Session Fixation Vulnerability | 2026-10-02 | 2026-10-05 | Unknown |
| CVE-2026-104286 Our coverage |
Fortinet FortiMail |
Fortinet FortiMail Path Traversal Vulnerability | 2026-10-01 | 2026-10-04 | Unknown |
| CVE-2026-76504 Our coverage |
Cisco Catalyst SD-WAN Manager |
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 2026-09-30 | 2026-10-03 | Unknown |
| CVE-2026-86950 Our coverage |
Apple Multiple Products |
Apple Multiple Products Out-of-Bounds Write Vulnerability | 2026-09-29 | 2026-10-13 | Unknown |
| CVE-2026-88772 Our coverage |
Citrix NetScaler |
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-09-27 | 2026-09-30 | Unknown |
| CVE-2026-88771 Our coverage |
Citrix NetScaler |
Citrix NetScaler Improper Input Validation Vulnerability | 2026-09-27 | 2026-09-30 | Unknown |
| CVE-2026-87902 | WordPress Core |
WordPress Core Remote File Inclusion Vulnerability | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-67279 | MikroTik RouterOS |
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-65660 | Microsoft SharePoint |
Microsoft SharePoint Code Injection Vulnerability | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-71362 | Adobe Commerce and Magento |
Adobe Commerce and Magento Incorrect Authorization Vulnerability | 2026-09-24 | 2026-09-27 | Unknown |
| CVE-2026-5430 | WSO2 Multiple Products |
WSO2 Multiple Products Path Traversal Vulnerability | 2026-09-24 | 2026-09-27 | Unknown |
| CVE-2026-94127 | F5 BIG-IP APM |
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-93952 | Arista VeloCloud Orchestrator |
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-93616 | Check Point Multiple Products |
Check Point Multiple Products Path Traversal Vulnerability | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-85102 | Check Point Multiple Products |
Check Point Multiple Products Improper Certificate Validation Vulnerability | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-7273 | Zyxel GS1900 Series Switches |
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 2026-09-21 | 2026-09-24 | Unknown |
| CVE-2026-53266 | Linux Kernel |
Linux Kernel Out-of-Bounds Write Vulnerability | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2025-39964 | Linux Kernel |
Linux Kernel Race Condition Vulnerability | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2025-39682 | Linux Kernel |
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 2026-09-18 | 2026-09-21 | Unknown |
| CVE-2026-87886 | Acronis Backup |
Acronis Backup Incorrect Default Permissions Vulnerability | 2026-09-16 | 2026-09-19 | Unknown |
| CVE-2026-76460 | Cisco Identity Services Engine |
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 2026-09-16 | 2026-09-19 | Unknown |
| CVE-2026-58704 | Google Pixel |
Google Pixel Improper Authorization Vulnerability | 2026-09-16 | 2026-09-19 | Unknown |
| CVE-2026-76461 Our coverage |
Cisco Secure Email Gateway |
Cisco Secure Email Gateway SQL Injection Vulnerability | 2026-09-14 | 2026-09-17 | Unknown |
| CVE-2026-85706 Our coverage |
GitLab Community Edition and Enterprise Edition |
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 2026-09-11 | 2026-09-14 | Unknown |
| CVE-2026-84869 | ConnectWise ScreenConnect |
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 2026-09-11 | 2026-09-14 | Unknown |
| CVE-2026-42018 | JFrog Artifactory |
JFrog Artifactory Improper Authentication Vulnerability | 2026-09-11 | 2026-09-25 | Unknown |
| CVE-2026-42016 | JFrog Artifactory |
JFrog Artifactory Incorrect Authorization Vulnerability | 2026-09-11 | 2026-09-25 | Unknown |
| CVE-2026-86060 | MikroTik RouterOS |
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | 2026-09-10 | 2026-09-13 | Unknown |
| CVE-2026-67277 | MikroTik RouterOS |
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | 2026-09-10 | 2026-09-13 | Unknown |
| CVE-2026-87491 | Google Chromium V8 |
Google Chromium V8 Out of Bounds Write Vulnerability | 2026-09-09 | 2026-09-23 | Unknown |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management |
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2026-19490 | Citrix NetScaler |
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2025-25249 | Fortinet Multiple Products |
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 2026-09-09 | 2026-09-12 | Unknown |
| CVE-2026-86218 | N-able N-central |
N-able N-central Static Code Injection Vulnerability | 2026-09-08 | 2026-09-11 | Unknown |
Source: CISA Known Exploited Vulnerabilities Catalog. ZeroDayFeed is independent and not affiliated with CISA.
