CyberMax Data
Home › Exploited CVEs

CISA Known Exploited Vulnerabilities (KEV)

All 1,769 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed

Most likely to be exploited next

The five KEV entries with the highest EPSS score today. Patch these first.

CVEVendor / productEPSS
CVE-2026-109619PHP Group PHP100.0%
CVE-2026-109618PHP Group PHP100.0%
CVE-2025-53770Microsoft SharePoint100.0%
CVE-2021-26086Atlassian Jira Server and Data Center100.0%
CVE-2024-7593Ivanti Virtual Traffic Manager100.0%
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-11-07. Get an email when this data updates (free, double opt-in).
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
1,769exploited CVEs in KEV
30added in the last 30 days
361used in ransomware
907with EPSS of 50% or more

Browse and filter

Top vendors here:

200 shown on this page

CVEVendor / productAddedEPSSRansomware
CVE-2026-34197Apache ActiveMQ2026-04-1698.3%
CVE-2026-32201Microsoft SharePoint Server2026-04-1443.4%
CVE-2009-0238Microsoft Office2026-04-1442.9%
CVE-2026-34621Adobe Acrobat and Reader2026-04-137.2%
CVE-2026-21643Fortinet FortiClient EMS2026-04-1397.7%
CVE-2025-60710Microsoft Windows2026-04-134.6%known
CVE-2023-36424Microsoft Windows2026-04-1312.1%
CVE-2023-21529Microsoft Exchange Server2026-04-1359.3%known
CVE-2020-9715Adobe Acrobat2026-04-1333.3%
CVE-2012-1854Microsoft Visual Basic for Applications (VBA)2026-04-1320.9%
CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM)2026-04-0898.6%
CVE-2026-35616Fortinet FortiClient EMS2026-04-0694.0%
CVE-2026-3502TrueConf Client2026-04-025.8%
CVE-2026-5281Google Dawn2026-04-0113.7%
CVE-2026-3055Citrix NetScaler2026-03-3091.5%
CVE-2025-53521F5 BIG-IP2026-03-272.3%
CVE-2026-33634Aquasecurity Trivy2026-03-2659.7%
CVE-2026-33017Langflow Langflow2026-03-2596.4%
CVE-2025-54068Laravel Livewire2026-03-2096.3%
CVE-2025-43520Apple Multiple Products2026-03-200.4%
CVE-2025-43510Apple Multiple Products2026-03-200.4%
CVE-2025-32432Craft CMS Craft CMS2026-03-2099.8%
CVE-2025-31277Apple Multiple Products2026-03-201.7%
CVE-2026-20131Cisco Secure Firewall Management Center (FMC)2026-03-1944.4%known
CVE-2026-20963Microsoft SharePoint2026-03-1829.2%
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS)2026-03-1820.2%
CVE-2025-47813Wing FTP Server Wing FTP Server2026-03-1662.5%
CVE-2026-3910Google Chromium V82026-03-132.7%
CVE-2026-3909Google Skia2026-03-132.3%
CVE-2025-68613n8n n8n2026-03-1199.0%
CVE-2026-1603Ivanti Endpoint Manager (EPM)2026-03-0988.3%
CVE-2025-26399SolarWinds Web Help Desk2026-03-0990.6%known
CVE-2021-22054Omnissa Workspace One UEM2026-03-0999.7%
CVE-2023-43000Apple Multiple Products2026-03-054.0%
CVE-2023-41974Apple iOS and iPadOS2026-03-052.0%
CVE-2021-30952Apple Multiple Products2026-03-057.0%
CVE-2021-22681Rockwell Multiple Products2026-03-0563.6%
CVE-2017-7921Hikvision Multiple Products2026-03-05100.0%
CVE-2026-22719Broadcom VMware Aria Operations2026-03-0318.3%
CVE-2026-21385Qualcomm Multiple Chipsets2026-03-031.3%
CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager2026-02-2587.6%
CVE-2022-20775Cisco SD-WAN2026-02-2512.0%
CVE-2026-25108Soliton Systems K.K FileZen2026-02-245.2%
CVE-2025-68461Roundcube Webmail2026-02-2027.4%
CVE-2025-49113Roundcube Webmail2026-02-2099.5%
CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs)2026-02-1813.5%
CVE-2021-22175GitLab GitLab2026-02-1853.4%
CVE-2026-2441Google Chromium2026-02-1755.0%
CVE-2024-7694TeamT5 ThreatSonar Anti-Ransomware2026-02-171.8%
CVE-2020-7796Synacor Zimbra Collaboration Suite2026-02-1793.6%
CVE-2008-0015Microsoft Windows2026-02-1776.6%
CVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)2026-02-1393.9%known
CVE-2026-20700Apple Multiple Products2026-02-121.7%
CVE-2025-40536SolarWinds Web Help Desk2026-02-1273.6%
CVE-2025-15556Notepad++ Notepad++2026-02-121.7%
CVE-2024-43468Microsoft Configuration Manager2026-02-1281.0%
CVE-2026-21533Microsoft Windows2026-02-104.3%
CVE-2026-21525Microsoft Windows2026-02-105.0%
CVE-2026-21519Microsoft Windows2026-02-102.6%
CVE-2026-21514Microsoft Office2026-02-101.6%
CVE-2026-21513Microsoft Windows2026-02-1015.9%
CVE-2026-21510Microsoft Windows2026-02-1061.2%
CVE-2026-24423SmarterTools SmarterMail2026-02-0588.2%known
CVE-2025-11953React Native Community CLI2026-02-0594.0%
CVE-2025-64328Sangoma FreePBX 2026-02-0384.6%
CVE-2025-40551SolarWinds Web Help Desk2026-02-0384.2%
CVE-2021-39935GitLab Community and Enterprise Editions2026-02-0336.1%
CVE-2019-19006Sangoma FreePBX2026-02-0354.7%
CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM)2026-01-2998.7%
CVE-2026-24858Fortinet Multiple Products2026-01-2786.6%
CVE-2026-24061GNU InetUtils2026-01-2699.0%
CVE-2026-23760SmarterTools SmarterMail2026-01-2696.4%known
CVE-2026-21509Microsoft Office2026-01-2670.8%
CVE-2025-52691SmarterTools SmarterMail2026-01-2685.7%known
CVE-2018-14634Linux Kernel2026-01-2614.7%
CVE-2024-37079Broadcom VMware vCenter Server2026-01-2322.4%
CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS)2026-01-2248.9%
CVE-2025-54313Prettier eslint-config-prettier2026-01-225.1%
CVE-2025-34026Versa Concerto2026-01-2281.8%
CVE-2025-31125Vite Vitejs2026-01-2274.9%
CVE-2026-20045Cisco Unified Communications Manager2026-01-214.5%
CVE-2026-20805Microsoft Windows2026-01-137.5%
CVE-2025-8110Gogs Gogs2026-01-1285.2%
CVE-2025-37164Hewlett Packard Enterprise (HPE) OneView2026-01-0790.2%
CVE-2009-0556Microsoft Office2026-01-0767.3%
CVE-2025-14847MongoDB MongoDB and MongoDB Server2025-12-2983.2%
CVE-2023-52163Digiever DS-2105 Pro2025-12-2296.9%
CVE-2025-14733WatchGuard Firebox2025-12-1929.4%known
CVE-2025-59374ASUS Live Update2025-12-171.2%
CVE-2025-40602SonicWall SMA1000 appliance2025-12-172.8%
CVE-2025-20393Cisco Multiple Products2025-12-1732.4%
CVE-2025-59718Fortinet Multiple Products2025-12-1668.3%
CVE-2025-43529Apple Multiple Products2025-12-1525.7%
CVE-2025-14611Gladinet CentreStack and Triofox2025-12-1553.3%
CVE-2025-14174Google Chromium2025-12-1255.3%
CVE-2018-4063Sierra Wireless AirLink ALEOS2025-12-1227.3%
CVE-2025-58360OSGeo GeoServer2025-12-1161.2%
CVE-2025-62221Microsoft Windows2025-12-092.5%
CVE-2025-6218RARLAB WinRAR2025-12-0990.5%
CVE-2025-66644Array Networks ArrayOS AG2025-12-083.3%
CVE-2022-37055D-Link Routers2025-12-0855.5%
CVE-2025-55182Meta React Server Components2025-12-0599.7%known
CVE-2021-26828OpenPLC ScadaBR2025-12-0339.1%
CVE-2025-48633Android Framework2025-12-020.3%
CVE-2025-48572Android Framework2025-12-020.3%
CVE-2021-26829OpenPLC ScadaBR2025-11-2848.0%
CVE-2025-61757Oracle Fusion Middleware2025-11-2188.6%
CVE-2025-13223Google Chromium V82025-11-194.9%
CVE-2025-58034Fortinet FortiWeb2025-11-1854.7%
CVE-2025-64446Fortinet FortiWeb2025-11-1491.1%
CVE-2025-9242WatchGuard Firebox2025-11-1292.2%
CVE-2025-62215Microsoft Windows2025-11-124.5%
CVE-2025-12480Gladinet Triofox2025-11-1295.7%
CVE-2025-21042Samsung Mobile Devices2025-11-1035.6%
CVE-2025-48703CWP Control Web Panel2025-11-0499.7%
CVE-2025-11371Gladinet CentreStack and Triofox2025-11-0492.1%
CVE-2025-41244Broadcom VMware Aria Operations and VMware Tools2025-10-308.6%
CVE-2025-24893XWiki Platform2025-10-30100.0%
CVE-2025-6205Dassault Systèmes DELMIA Apriso2025-10-2867.2%
CVE-2025-6204Dassault Systèmes DELMIA Apriso2025-10-2876.6%
CVE-2025-59287Microsoft Windows2025-10-24100.0%
CVE-2025-54236Adobe Commerce and Magento2025-10-2495.4%
CVE-2025-61932Motex LANSCOPE Endpoint Manager2025-10-222.8%
CVE-2025-61884Oracle E-Business Suite2025-10-2095.9%known
CVE-2025-33073Microsoft Windows2025-10-2082.8%
CVE-2025-2747Kentico Xperience CMS2025-10-2097.2%
CVE-2025-2746Kentico Xperience CMS2025-10-2074.1%
CVE-2022-48503Apple Multiple Products2025-10-203.2%
CVE-2025-54253Adobe Experience Manager (AEM) Forms2025-10-1580.8%
CVE-2025-59230Microsoft Windows2025-10-142.7%
CVE-2025-47827IGEL IGEL OS2025-10-145.2%
CVE-2025-24990Microsoft Windows2025-10-146.5%
CVE-2016-7836SKYSEA Client View2025-10-1419.2%
CVE-2021-43798Grafana Labs Grafana2025-10-0988.5%
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS)2025-10-074.1%
CVE-2025-61882Oracle E-Business Suite2025-10-0699.7%known
CVE-2021-43226Microsoft Windows2025-10-063.3%known
CVE-2021-22555Linux Kernel2025-10-0678.7%
CVE-2013-3918Microsoft Windows2025-10-0673.7%
CVE-2011-3402Microsoft Windows2025-10-0678.1%
CVE-2010-3962Microsoft Internet Explorer2025-10-0696.8%
CVE-2010-3765Mozilla Multiple Products2025-10-0683.2%
CVE-2025-4008Smartbedded Meteobridge2025-10-0293.3%
CVE-2025-21043Samsung Mobile Devices2025-10-022.2%
CVE-2017-1000353Jenkins Jenkins2025-10-0299.7%
CVE-2015-7755Juniper ScreenOS2025-10-0261.1%
CVE-2014-6278GNU GNU Bash2025-10-0299.7%
CVE-2025-59689Libraesva Email Security Gateway2025-09-292.0%
CVE-2025-32463Sudo Sudo2025-09-2956.3%
CVE-2025-20352Cisco IOS and IOS XE2025-09-2940.6%
CVE-2025-10035Fortra GoAnywhere MFT2025-09-2999.8%known
CVE-2021-21311Adminer Adminer2025-09-2998.5%
CVE-2025-20362Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense2025-09-2586.7%
CVE-2025-20333Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense2025-09-2572.0%
CVE-2025-10585Google Chromium V82025-09-239.0%
CVE-2025-5086Dassault Systèmes DELMIA Apriso2025-09-1197.1%
CVE-2025-53690Sitecore Multiple Products2025-09-0460.7%
CVE-2025-48543Android Runtime2025-09-040.7%
CVE-2025-38352Linux Kernel2025-09-041.4%
CVE-2025-9377TP-Link Multiple Routers2025-09-0341.3%
CVE-2023-50224TP-Link TL-WR841N2025-09-0320.0%
CVE-2025-55177Meta Platforms WhatsApp2025-09-0213.5%
CVE-2020-24363TP-Link TL-WA855RE2025-09-0222.2%
CVE-2025-57819Sangoma FreePBX2025-08-2995.2%
CVE-2025-7775Citrix NetScaler2025-08-2620.7%
CVE-2025-48384Git Git2025-08-254.4%
CVE-2024-8069Citrix Session Recording2025-08-2518.2%
CVE-2024-8068Citrix Session Recording2025-08-253.5%
CVE-2025-43300Apple iOS, iPadOS, and macOS2025-08-2165.2%
CVE-2025-54948Trend Micro Apex One2025-08-1832.9%
CVE-2025-8876N-able N-Central2025-08-134.1%
CVE-2025-8875N-able N-Central2025-08-132.3%
CVE-2025-8088RARLAB WinRAR2025-08-1294.0%known
CVE-2013-3893Microsoft Internet Explorer2025-08-1287.6%
CVE-2007-0671Microsoft Office2025-08-1244.1%
CVE-2022-40799D-Link DNR-322L2025-08-0533.7%
CVE-2020-25079D-Link DCS-2530L and DCS-2670L Devices2025-08-0554.0%
CVE-2020-25078D-Link DCS-2530L and DCS-2670L Devices2025-08-0597.5%
CVE-2025-20337Cisco Identity Services Engine2025-07-2874.5%
CVE-2025-20281Cisco Identity Services Engine2025-07-2897.6%
CVE-2023-2533PaperCut NG/MF2025-07-2828.8%
CVE-2025-6558Google Chromium2025-07-2210.9%
CVE-2025-54309CrushFTP CrushFTP2025-07-2293.5%
CVE-2025-49706Microsoft SharePoint2025-07-2299.1%known
CVE-2025-49704Microsoft SharePoint2025-07-22100.0%known
CVE-2025-2776SysAid SysAid On-Prem2025-07-2264.7%
CVE-2025-2775SysAid SysAid On-Prem2025-07-2242.6%
CVE-2025-53770Microsoft SharePoint2025-07-20100.0%known
CVE-2025-25257Fortinet FortiWeb2025-07-1899.9%
CVE-2025-47812Wing FTP Server Wing FTP Server2025-07-1493.9%
CVE-2025-5777Citrix NetScaler ADC and Gateway2025-07-10100.0%known
CVE-2019-9621Synacor Zimbra Collaboration Suite (ZCS)2025-07-0781.0%
CVE-2019-5418Rails Ruby on Rails2025-07-0798.5%
CVE-2016-10033PHP PHPMailer2025-07-0799.7%
CVE-2014-3931Looking Glass Multi-Router Looking Glass (MRLG)2025-07-0729.0%
CVE-2025-6554Google Chromium V82025-07-0214.1%
CVE-2025-48928TeleMessage TM SGNL2025-07-010.6%
CVE-2025-48927TeleMessage TM SGNL2025-07-0112.2%
CVE-2025-6543Citrix NetScaler ADC and Gateway2025-06-3010.4%
CVE-2024-54085AMI MegaRAC SPx2025-06-2560.7%

1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9

Filters and the CSV cover the 200 rows on this page. The full catalog is free as a daily dataset.

🔔 Get a browser alert when CISA adds a new KEV entry (free, no email, one click to stop).

Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.