Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,721 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | 2026-02-17 | 1.8% | |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | 2026-02-17 | 84.4% | |
| CVE-2008-0015 | Microsoft Windows | 2026-02-17 | 76.7% | |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 89.5% | known |
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 1.3% | |
| CVE-2025-40536 | SolarWinds Web Help Desk | 2026-02-12 | 82.0% | |
| CVE-2025-15556 | Notepad++ Notepad++ | 2026-02-12 | 1.7% | |
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 82.0% | |
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 3.9% | |
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 5.0% | |
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2.5% | |
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 1.5% | |
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 15.6% | |
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 26.2% | |
| CVE-2026-24423 | SmarterTools SmarterMail | 2026-02-05 | 88.2% | known |
| CVE-2025-11953 | React Native Community CLI | 2026-02-05 | 94.0% | |
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 84.6% | |
| CVE-2025-40551 | SolarWinds Web Help Desk | 2026-02-03 | 83.6% | |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | 2026-02-03 | 35.6% | |
| CVE-2019-19006 | Sangoma FreePBX | 2026-02-03 | 36.6% | |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 98.6% | |
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 86.1% | |
| CVE-2026-24061 | GNU InetUtils | 2026-01-26 | 98.1% | |
| CVE-2026-23760 | SmarterTools SmarterMail | 2026-01-26 | 96.5% | known |
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 72.9% | |
| CVE-2025-52691 | SmarterTools SmarterMail | 2026-01-26 | 85.7% | known |
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | 14.7% | |
| CVE-2024-37079 | Broadcom VMware vCenter Server | 2026-01-23 | 22.4% | |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 48.9% | |
| CVE-2025-54313 | Prettier eslint-config-prettier | 2026-01-22 | 4.5% | |
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | 81.9% | |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 58.5% | |
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 4.5% | |
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 5.2% | |
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 82.5% | |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 2026-01-07 | 90.2% | |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 67.3% | |
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | 2025-12-29 | 83.2% | |
| CVE-2023-52163 | Digiever DS-2105 Pro | 2025-12-22 | 96.9% | |
| CVE-2025-14733 | WatchGuard Firebox | 2025-12-19 | 26.5% | known |
| CVE-2025-59374 | ASUS Live Update | 2025-12-17 | 1.2% | |
| CVE-2025-40602 | SonicWall SMA1000 appliance | 2025-12-17 | 2.1% | |
| CVE-2025-20393 | Cisco Multiple Products | 2025-12-17 | 29.9% | |
| CVE-2025-59718 | Fortinet Multiple Products | 2025-12-16 | 68.3% | |
| CVE-2025-43529 | Apple Multiple Products | 2025-12-15 | 8.8% | |
| CVE-2025-14611 | Gladinet CentreStack and Triofox | 2025-12-15 | 53.3% | |
| CVE-2025-14174 | Google Chromium | 2025-12-12 | 22.3% | |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | 2025-12-12 | 27.1% | |
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | 64.9% | |
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2.5% | |
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 90.5% | |
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 3.4% | |
| CVE-2022-37055 | D-Link Routers | 2025-12-08 | 55.5% | |
| CVE-2025-55182 | Meta React Server Components | 2025-12-05 | 99.8% | known |
| CVE-2021-26828 | OpenPLC ScadaBR | 2025-12-03 | 39.4% | |
| CVE-2025-48633 | Android Framework | 2025-12-02 | 0.3% | |
| CVE-2025-48572 | Android Framework | 2025-12-02 | 0.3% | |
| CVE-2021-26829 | OpenPLC ScadaBR | 2025-11-28 | 48.0% | |
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 88.6% | |
| CVE-2025-13223 | Google Chromium V8 | 2025-11-19 | 5.0% | |
| CVE-2025-58034 | Fortinet FortiWeb | 2025-11-18 | 55.6% | |
| CVE-2025-64446 | Fortinet FortiWeb | 2025-11-14 | 91.8% | |
| CVE-2025-9242 | WatchGuard Firebox | 2025-11-12 | 91.3% | |
| CVE-2025-62215 | Microsoft Windows | 2025-11-12 | 6.0% | |
| CVE-2025-12480 | Gladinet Triofox | 2025-11-12 | 90.5% | |
| CVE-2025-21042 | Samsung Mobile Devices | 2025-11-10 | 33.2% | |
| CVE-2025-48703 | CWP Control Web Panel | 2025-11-04 | 99.7% | |
| CVE-2025-11371 | Gladinet CentreStack and Triofox | 2025-11-04 | 92.1% | |
| CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools | 2025-10-30 | 8.4% | |
| CVE-2025-24893 | XWiki Platform | 2025-10-30 | 99.9% | |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 73.3% | |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 78.0% | |
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 100.0% | |
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | 94.5% | |
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager | 2025-10-22 | 2.8% | |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | 95.9% | known |
| CVE-2025-33073 | Microsoft Windows | 2025-10-20 | 82.7% | |
| CVE-2025-2747 | Kentico Xperience CMS | 2025-10-20 | 92.5% | |
| CVE-2025-2746 | Kentico Xperience CMS | 2025-10-20 | 59.1% | |
| CVE-2022-48503 | Apple Multiple Products | 2025-10-20 | 3.2% | |
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | 2025-10-15 | 88.0% | |
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2.7% | |
| CVE-2025-47827 | IGEL IGEL OS | 2025-10-14 | 4.9% | |
| CVE-2025-24990 | Microsoft Windows | 2025-10-14 | 6.4% | |
| CVE-2016-7836 | SKYSEA Client View | 2025-10-14 | 19.2% | |
| CVE-2021-43798 | Grafana Labs Grafana | 2025-10-09 | 88.5% | |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 4.0% | |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | 99.7% | known |
| CVE-2021-43226 | Microsoft Windows | 2025-10-06 | 3.1% | known |
| CVE-2021-22555 | Linux Kernel | 2025-10-06 | 78.7% | |
| CVE-2013-3918 | Microsoft Windows | 2025-10-06 | 73.7% | |
| CVE-2011-3402 | Microsoft Windows | 2025-10-06 | 78.1% | |
| CVE-2010-3962 | Microsoft Internet Explorer | 2025-10-06 | 96.8% | |
| CVE-2010-3765 | Mozilla Multiple Products | 2025-10-06 | 83.2% | |
| CVE-2025-4008 | Smartbedded Meteobridge | 2025-10-02 | 93.7% | |
| CVE-2025-21043 | Samsung Mobile Devices | 2025-10-02 | 1.9% | |
| CVE-2017-1000353 | Jenkins Jenkins | 2025-10-02 | 99.7% | |
| CVE-2015-7755 | Juniper ScreenOS | 2025-10-02 | 61.1% | |
| CVE-2014-6278 | GNU GNU Bash | 2025-10-02 | 99.6% | |
| CVE-2025-59689 | Libraesva Email Security Gateway | 2025-09-29 | 1.9% | |
| CVE-2025-32463 | Sudo Sudo | 2025-09-29 | 61.0% | |
| CVE-2025-20352 | Cisco IOS and IOS XE | 2025-09-29 | 39.4% | |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | 99.8% | known |
| CVE-2021-21311 | Adminer Adminer | 2025-09-29 | 90.5% | |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 87.1% | |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 70.7% | |
| CVE-2025-10585 | Google Chromium V8 | 2025-09-23 | 5.4% | |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | 91.9% | |
| CVE-2025-53690 | Sitecore Multiple Products | 2025-09-04 | 51.1% | |
| CVE-2025-48543 | Android Runtime | 2025-09-04 | 0.5% | |
| CVE-2025-38352 | Linux Kernel | 2025-09-04 | 1.3% | |
| CVE-2025-9377 | TP-Link Multiple Routers | 2025-09-03 | 33.5% | |
| CVE-2023-50224 | TP-Link TL-WR841N | 2025-09-03 | 15.6% | |
| CVE-2025-55177 | Meta Platforms WhatsApp | 2025-09-02 | 4.3% | |
| CVE-2020-24363 | TP-Link TL-WA855RE | 2025-09-02 | 20.7% | |
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 85.5% | |
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 19.6% | |
| CVE-2025-48384 | Git Git | 2025-08-25 | 4.1% | |
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 14.6% | |
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 1.4% | |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS | 2025-08-21 | 22.0% | |
| CVE-2025-54948 | Trend Micro Apex One | 2025-08-18 | 22.0% | |
| CVE-2025-8876 | N-able N-Central | 2025-08-13 | 3.4% | |
| CVE-2025-8875 | N-able N-Central | 2025-08-13 | 1.7% | |
| CVE-2025-8088 | RARLAB WinRAR | 2025-08-12 | 94.1% | known |
| CVE-2013-3893 | Microsoft Internet Explorer | 2025-08-12 | 85.8% | |
| CVE-2007-0671 | Microsoft Office | 2025-08-12 | 43.2% | |
| CVE-2022-40799 | D-Link DNR-322L | 2025-08-05 | 33.7% | |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 54.0% | |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 97.5% | |
| CVE-2025-20337 | Cisco Identity Services Engine | 2025-07-28 | 67.6% | |
| CVE-2025-20281 | Cisco Identity Services Engine | 2025-07-28 | 97.2% | |
| CVE-2023-2533 | PaperCut NG/MF | 2025-07-28 | 29.2% | |
| CVE-2025-6558 | Google Chromium | 2025-07-22 | 9.6% | |
| CVE-2025-54309 | CrushFTP CrushFTP | 2025-07-22 | 94.9% | |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.1% | known |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 100.0% | known |
| CVE-2025-2776 | SysAid SysAid On-Prem | 2025-07-22 | 64.4% | |
| CVE-2025-2775 | SysAid SysAid On-Prem | 2025-07-22 | 43.0% | |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 100.0% | known |
| CVE-2025-25257 | Fortinet FortiWeb | 2025-07-18 | 99.8% | |
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | 2025-07-14 | 92.9% | |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | 100.0% | known |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 81.0% | |
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 98.5% | |
| CVE-2016-10033 | PHP PHPMailer | 2025-07-07 | 99.7% | |
| CVE-2014-3931 | Looking Glass Multi-Router Looking Glass (MRLG) | 2025-07-07 | 29.0% | |
| CVE-2025-6554 | Google Chromium V8 | 2025-07-02 | 12.6% | |
| CVE-2025-48928 | TeleMessage TM SGNL | 2025-07-01 | 0.6% | |
| CVE-2025-48927 | TeleMessage TM SGNL | 2025-07-01 | 11.1% | |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | 10.1% | |
| CVE-2024-54085 | AMI MegaRAC SPx | 2025-06-25 | 60.7% | |
| CVE-2024-0769 | D-Link DIR-859 Router | 2025-06-25 | 82.7% | |
| CVE-2019-6693 | Fortinet FortiOS | 2025-06-25 | 5.8% | known |
| CVE-2023-0386 | Linux Kernel | 2025-06-17 | 7.9% | |
| CVE-2025-43200 | Apple Multiple Products | 2025-06-16 | 1.1% | |
| CVE-2023-33538 | TP-Link Multiple Routers | 2025-06-16 | 41.6% | |
| CVE-2025-33053 | Microsoft Windows | 2025-06-10 | 87.6% | |
| CVE-2025-24016 | Wazuh Wazuh Server | 2025-06-10 | 93.8% | |
| CVE-2025-32433 | Erlang Erlang/OTP | 2025-06-09 | 98.8% | |
| CVE-2024-42009 | Roundcube Webmail | 2025-06-09 | 82.9% | |
| CVE-2025-5419 | Google Chromium V8 | 2025-06-05 | 7.8% | |
| CVE-2025-27038 | Qualcomm Multiple Chipsets | 2025-06-03 | 1.0% | |
| CVE-2025-21480 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.5% | |
| CVE-2025-21479 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.8% | |
| CVE-2025-3935 | ConnectWise ScreenConnect | 2025-06-02 | 3.5% | |
| CVE-2025-35939 | Craft CMS Craft CMS | 2025-06-02 | 1.3% | |
| CVE-2024-56145 | Craft CMS Craft CMS | 2025-06-02 | 97.4% | |
| CVE-2023-39780 | ASUS RT-AX55 Routers | 2025-06-02 | 40.2% | |
| CVE-2021-32030 | ASUS Routers | 2025-06-02 | 99.4% | |
| CVE-2025-4632 | Samsung MagicINFO 9 Server | 2025-05-22 | 24.3% | |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 86.5% | |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 99.9% | |
| CVE-2025-27920 | Srimax Output Messenger | 2025-05-19 | 1.9% | |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 23.6% | |
| CVE-2024-11182 | MDaemon Email Server | 2025-05-19 | 17.7% | |
| CVE-2023-38950 | ZKTeco BioTime | 2025-05-19 | 84.7% | |
| CVE-2025-42999 | SAP NetWeaver | 2025-05-15 | 13.9% | known |
| CVE-2024-12987 | DrayTek Vigor Routers | 2025-05-15 | 98.1% | |
| CVE-2025-32756 | Fortinet Multiple Products | 2025-05-14 | 29.8% | |
| CVE-2025-32709 | Microsoft Windows | 2025-05-13 | 2.1% | |
| CVE-2025-32706 | Microsoft Windows | 2025-05-13 | 2.3% | |
| CVE-2025-32701 | Microsoft Windows | 2025-05-13 | 1.4% | |
| CVE-2025-30400 | Microsoft Windows | 2025-05-13 | 1.9% | |
| CVE-2025-30397 | Microsoft Windows | 2025-05-13 | 26.8% | |
| CVE-2025-47729 | TeleMessage TM SGNL | 2025-05-12 | 0.4% | |
| CVE-2024-6047 | GeoVision Multiple Devices | 2025-05-07 | 10.1% | |
| CVE-2024-11120 | GeoVision Multiple Devices | 2025-05-07 | 28.4% | |
| CVE-2025-27363 | FreeType FreeType | 2025-05-06 | 27.8% | |
| CVE-2025-3248 | Langflow Langflow | 2025-05-05 | 100.0% | known |
| CVE-2025-34028 | Commvault Command Center | 2025-05-02 | 97.6% | |
| CVE-2024-58136 | Yiiframework Yii | 2025-05-02 | 87.8% | |
| CVE-2024-38475 | Apache HTTP Server | 2025-05-01 | 100.0% | |
| CVE-2023-44221 | SonicWall SMA100 Appliances | 2025-05-01 | 76.3% | |
| CVE-2025-31324 | SAP NetWeaver | 2025-04-29 | 99.5% | known |
| CVE-2025-42599 | Qualitia Active! Mail | 2025-04-28 | 3.3% | |
| CVE-2025-3928 | Commvault Web Server | 2025-04-28 | 2.3% | |
| CVE-2025-1976 | Broadcom Brocade Fabric OS | 2025-04-28 | 0.7% | |
| CVE-2025-31201 | Apple Multiple Products | 2025-04-17 | 14.0% | |
| CVE-2025-31200 | Apple Multiple Products | 2025-04-17 | 18.8% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.