CyberMax Data
Home › Exploited CVEs

CISA Known Exploited Vulnerabilities (KEV)

All 1,769 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed

Most likely to be exploited next

The five KEV entries with the highest EPSS score today. Patch these first.

CVEVendor / productEPSS
CVE-2026-109619PHP Group PHP100.0%
CVE-2026-109618PHP Group PHP100.0%
CVE-2025-53770Microsoft SharePoint100.0%
CVE-2021-26086Atlassian Jira Server and Data Center100.0%
CVE-2024-7593Ivanti Virtual Traffic Manager100.0%
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-11-07. Get an email when this data updates (free, double opt-in).
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
1,769exploited CVEs in KEV
30added in the last 30 days
361used in ransomware
907with EPSS of 50% or more

Browse and filter

Top vendors here:

200 shown on this page

CVEVendor / productAddedEPSSRansomware
CVE-2024-0769D-Link DIR-859 Router2025-06-2582.7%
CVE-2019-6693Fortinet FortiOS2025-06-256.6%known
CVE-2023-0386Linux Kernel2025-06-177.9%
CVE-2025-43200Apple Multiple Products2025-06-161.2%
CVE-2023-33538TP-Link Multiple Routers2025-06-1641.6%
CVE-2025-33053Microsoft Windows2025-06-1087.1%
CVE-2025-24016Wazuh Wazuh Server2025-06-1093.8%
CVE-2025-32433Erlang Erlang/OTP2025-06-0998.9%
CVE-2024-42009Roundcube Webmail2025-06-0982.9%
CVE-2025-5419Google Chromium V82025-06-057.5%
CVE-2025-27038Qualcomm Multiple Chipsets2025-06-031.0%
CVE-2025-21480Qualcomm Multiple Chipsets2025-06-030.4%
CVE-2025-21479Qualcomm Multiple Chipsets2025-06-030.8%
CVE-2025-3935ConnectWise ScreenConnect2025-06-023.6%
CVE-2025-35939Craft CMS Craft CMS2025-06-021.3%
CVE-2024-56145Craft CMS Craft CMS2025-06-0297.5%
CVE-2023-39780ASUS RT-AX55 Routers2025-06-0239.5%
CVE-2021-32030ASUS Routers2025-06-0299.4%
CVE-2025-4632Samsung MagicINFO 9 Server2025-05-2224.1%
CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM)2025-05-1988.0%
CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM)2025-05-1999.9%
CVE-2025-27920Srimax Output Messenger2025-05-191.9%
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS)2025-05-1924.6%
CVE-2024-11182MDaemon Email Server2025-05-1933.3%
CVE-2023-38950ZKTeco BioTime2025-05-1992.5%
CVE-2025-42999SAP NetWeaver2025-05-1512.9%known
CVE-2024-12987DrayTek Vigor Routers2025-05-1598.2%
CVE-2025-32756Fortinet Multiple Products2025-05-1430.9%
CVE-2025-32709Microsoft Windows2025-05-131.8%
CVE-2025-32706Microsoft Windows2025-05-132.3%
CVE-2025-32701Microsoft Windows2025-05-131.4%
CVE-2025-30400Microsoft Windows2025-05-131.9%
CVE-2025-30397Microsoft Windows2025-05-1327.3%
CVE-2025-47729TeleMessage TM SGNL2025-05-120.4%
CVE-2024-6047GeoVision Multiple Devices2025-05-0710.1%
CVE-2024-11120GeoVision Multiple Devices2025-05-0728.4%
CVE-2025-27363FreeType FreeType2025-05-0627.8%
CVE-2025-3248Langflow Langflow2025-05-05100.0%known
CVE-2025-34028Commvault Command Center2025-05-0297.6%
CVE-2024-58136Yiiframework Yii2025-05-0287.8%
CVE-2024-38475Apache HTTP Server2025-05-01100.0%
CVE-2023-44221SonicWall SMA100 Appliances2025-05-0176.3%
CVE-2025-31324SAP NetWeaver2025-04-2999.5%known
CVE-2025-42599Qualitia Active! Mail2025-04-283.4%
CVE-2025-3928Commvault Web Server2025-04-282.5%
CVE-2025-1976Broadcom Brocade Fabric OS2025-04-280.7%
CVE-2025-31201Apple Multiple Products2025-04-1714.0%
CVE-2025-31200Apple Multiple Products2025-04-1720.9%
CVE-2025-24054Microsoft Windows2025-04-1762.3%
CVE-2021-20035SonicWall SMA100 Appliances2025-04-164.4%
CVE-2024-53197Linux Kernel2025-04-094.1%
CVE-2024-53150Linux Kernel2025-04-091.4%
CVE-2025-30406Gladinet CentreStack2025-04-0894.3%
CVE-2025-29824Microsoft Windows2025-04-0819.3%known
CVE-2025-31161CrushFTP CrushFTP2025-04-07100.0%known
CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways2025-04-04100.0%known
CVE-2025-24813Apache Tomcat2025-04-0199.9%
CVE-2024-20439Cisco Smart Licensing Utility2025-03-3197.1%
CVE-2025-2783Google Chromium Mojo2025-03-279.2%
CVE-2019-9875Sitecore CMS and Experience Platform (XP)2025-03-2625.4%
CVE-2019-9874Sitecore CMS and Experience Platform (XP)2025-03-2683.7%
CVE-2025-30154reviewdog action-setup GitHub Action2025-03-242.5%
CVE-2025-1316Edimax IC-7100 IP Camera2025-03-1974.5%
CVE-2024-48248NAKIVO Backup and Replication2025-03-1994.4%
CVE-2017-12637SAP NetWeaver2025-03-1995.1%
CVE-2025-30066tj-actions changed-files GitHub Action2025-03-1872.1%
CVE-2025-24472Fortinet FortiOS and FortiProxy2025-03-187.2%known
CVE-2025-24201Apple Multiple Products2025-03-133.8%
CVE-2025-21590Juniper Junos OS2025-03-131.7%
CVE-2025-26633Microsoft Windows2025-03-1130.4%known
CVE-2025-24993Microsoft Windows2025-03-112.2%
CVE-2025-24991Microsoft Windows2025-03-112.0%
CVE-2025-24985Microsoft Windows2025-03-113.9%
CVE-2025-24984Microsoft Windows2025-03-112.0%
CVE-2025-24983Microsoft Windows2025-03-111.9%
CVE-2025-25181Advantive VeraCore2025-03-1055.5%
CVE-2024-57968Advantive VeraCore2025-03-1032.3%
CVE-2024-13161Ivanti Endpoint Manager (EPM)2025-03-1089.8%
CVE-2024-13160Ivanti Endpoint Manager (EPM)2025-03-1091.0%
CVE-2024-13159Ivanti Endpoint Manager (EPM)2025-03-10100.0%
CVE-2025-22226VMware ESXi, Workstation, and Fusion2025-03-041.6%
CVE-2025-22225VMware ESXi2025-03-041.0%known
CVE-2025-22224VMware ESXi and Workstation2025-03-041.6%
CVE-2024-50302Linux Kernel2025-03-040.8%
CVE-2024-4885Progress WhatsUp Gold2025-03-0399.3%
CVE-2023-20118Cisco Small Business RV Series Routers2025-03-0354.1%
CVE-2022-43939Hitachi Vantara Pentaho Business Analytics (BA) Server2025-03-0392.3%
CVE-2022-43769Hitachi Vantara Pentaho Business Analytics (BA) Server2025-03-0397.7%
CVE-2018-8639Microsoft Windows2025-03-0322.3%known
CVE-2024-49035Microsoft Partner Center2025-02-251.4%
CVE-2023-34192Synacor Zimbra Collaboration Suite (ZCS)2025-02-2577.3%
CVE-2024-20953Oracle Agile Product Lifecycle Management (PLM)2025-02-243.9%
CVE-2017-3066Adobe ColdFusion2025-02-2490.6%
CVE-2025-24989Microsoft Power Pages2025-02-211.6%
CVE-2025-23209Craft CMS Craft CMS2025-02-2021.6%
CVE-2025-0111Palo Alto Networks PAN-OS2025-02-202.0%
CVE-2025-0108Palo Alto Networks PAN-OS2025-02-1898.5%
CVE-2024-53704SonicWall SonicOS2025-02-1895.3%known
CVE-2024-57727SimpleHelp SimpleHelp2025-02-1396.8%known
CVE-2025-24200Apple iOS and iPadOS2025-02-124.5%
CVE-2024-41710Mitel SIP Phones2025-02-1241.6%
CVE-2025-21418Microsoft Windows2025-02-112.1%
CVE-2025-21391Microsoft Windows2025-02-112.3%
CVE-2024-40891Zyxel DSL CPE Devices2025-02-1122.9%
CVE-2024-40890Zyxel DSL CPE Devices2025-02-1120.7%
CVE-2025-0994Trimble Cityworks2025-02-0731.3%
CVE-2025-04117-Zip 7-Zip2025-02-0647.6%
CVE-2024-21413Microsoft Office Outlook2025-02-0694.7%
CVE-2022-23748Audinate Dante Discovery2025-02-068.3%
CVE-2020-29574Sophos CyberoamOS2025-02-064.7%known
CVE-2020-15069Sophos XG Firewall2025-02-0610.7%
CVE-2024-53104Linux Kernel2025-02-053.4%
CVE-2024-45195Apache OFBiz2025-02-04100.0%
CVE-2024-29059Microsoft .NET Framework2025-02-0498.6%
CVE-2018-9276Paessler PRTG Network Monitor2025-02-0487.0%
CVE-2018-19410Paessler PRTG Network Monitor2025-02-0497.9%
CVE-2025-24085Apple Multiple Products2025-01-2917.4%
CVE-2025-23006SonicWall SMA1000 Appliances2025-01-2426.6%known
CVE-2020-11023JQuery JQuery2025-01-2384.9%
CVE-2024-50603Aviatrix Controllers2025-01-1698.5%
CVE-2025-21335Microsoft Windows2025-01-141.4%
CVE-2025-21334Microsoft Windows2025-01-141.6%
CVE-2025-21333Microsoft Windows2025-01-1410.1%
CVE-2024-55591Fortinet FortiOS and FortiProxy2025-01-1494.3%known
CVE-2024-12686BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)2025-01-1332.6%
CVE-2023-48365Qlik Sense2025-01-1347.7%known
CVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways2025-01-08100.0%known
CVE-2024-55550Mitel MiCollab2025-01-0738.2%known
CVE-2024-41713Mitel MiCollab2025-01-0797.2%known
CVE-2020-2883Oracle WebLogic Server2025-01-0794.6%
CVE-2024-3393Palo Alto Networks PAN-OS2024-12-3029.1%
CVE-2021-44207Acclaim Systems USAHERDS2024-12-2317.6%
CVE-2024-12356BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) 2024-12-1987.4%
CVE-2022-23227NUUO NVRmini2 Devices2024-12-1848.5%
CVE-2021-40407Reolink RLC-410W IP Camera2024-12-1847.6%
CVE-2019-11001Reolink Multiple IP Cameras2024-12-1837.5%
CVE-2018-14933NUUO NVRmini Devices2024-12-1894.8%
CVE-2024-55956Cleo Multiple Products2024-12-1794.0%known
CVE-2024-35250Microsoft Windows2024-12-1625.2%
CVE-2024-20767Adobe ColdFusion2024-12-1698.5%
CVE-2024-50623Cleo Multiple Products2024-12-1398.6%known
CVE-2024-49138Microsoft Windows2024-12-1026.2%
CVE-2024-51378CyberPersons CyberPanel2024-12-0494.7%known
CVE-2024-11680ProjectSend ProjectSend2024-12-0391.8%
CVE-2024-11667Zyxel Multiple Firewalls2024-12-033.0%known
CVE-2023-45727North Grid Proself2024-12-034.8%
CVE-2023-28461Array Networks AG/vxAG ArrayOS2024-11-2568.1%known
CVE-2024-44309Apple Multiple Products2024-11-2121.9%
CVE-2024-44308Apple Multiple Products2024-11-219.9%
CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM)2024-11-211.7%
CVE-2024-38813VMware vCenter Server2024-11-2017.4%
CVE-2024-38812VMware vCenter Server2024-11-2054.6%
CVE-2024-9474Palo Alto Networks PAN-OS2024-11-1893.8%known
CVE-2024-1212Progress Kemp LoadMaster2024-11-1895.4%
CVE-2024-0012Palo Alto Networks PAN-OS2024-11-1899.8%known
CVE-2024-9465Palo Alto Networks Expedition2024-11-1499.6%
CVE-2024-9463Palo Alto Networks Expedition2024-11-1498.5%
CVE-2024-49039Microsoft Windows2024-11-1214.2%known
CVE-2024-43451Microsoft Windows2024-11-1284.3%
CVE-2021-41277Metabase Metabase2024-11-1297.2%
CVE-2021-26086Atlassian Jira Server and Data Center2024-11-12100.0%
CVE-2014-2120Cisco Adaptive Security Appliance (ASA)2024-11-1222.6%
CVE-2024-5910Palo Alto Networks Expedition2024-11-0791.7%
CVE-2024-51567CyberPersons CyberPanel2024-11-0784.4%known
CVE-2024-43093Android Framework2024-11-070.7%
CVE-2019-16278Nostromo nhttpd2024-11-0799.0%
CVE-2024-8957PTZOptics PT30X-SDI/NDI Cameras2024-11-0479.8%
CVE-2024-8956PTZOptics PT30X-SDI/NDI Cameras2024-11-0458.8%
CVE-2024-37383Roundcube Webmail2024-10-2474.0%
CVE-2024-20481Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2024-10-2415.9%
CVE-2024-47575Fortinet FortiManager2024-10-2394.8%
CVE-2024-38094Microsoft SharePoint2024-10-2250.9%known
CVE-2024-9537ScienceLogic SL12024-10-213.8%
CVE-2024-40711Veeam Backup & Replication2024-10-1790.4%known
CVE-2024-9680Mozilla Firefox2024-10-1523.2%known
CVE-2024-30088Microsoft Windows 2024-10-1568.2%known
CVE-2024-28987SolarWinds Web Help Desk2024-10-1593.3%
CVE-2024-9380Ivanti Cloud Services Appliance (CSA)2024-10-0958.3%
CVE-2024-9379Ivanti Cloud Services Appliance (CSA)2024-10-0944.3%
CVE-2024-23113Fortinet Multiple Products2024-10-0961.7%
CVE-2024-43573Microsoft Windows2024-10-0846.1%
CVE-2024-43572Microsoft Windows2024-10-0866.7%
CVE-2024-43047Qualcomm Multiple Chipsets 2024-10-080.7%
CVE-2024-45519Synacor Zimbra Collaboration Suite (ZCS)2024-10-0399.9%
CVE-2024-29824Ivanti Endpoint Manager (EPM)2024-10-0299.9%
CVE-2023-25280D-Link DIR-820 Router2024-09-3097.9%
CVE-2020-15415DrayTek Multiple Vigor Routers2024-09-3084.5%
CVE-2019-0344SAP Commerce Cloud2024-09-307.5%
CVE-2024-7593Ivanti Virtual Traffic Manager2024-09-24100.0%
CVE-2024-8963Ivanti Cloud Services Appliance (CSA)2024-09-1998.6%
CVE-2024-27348Apache HugeGraph-Server2024-09-1899.2%
CVE-2022-21445Oracle ADF Faces2024-09-1862.5%
CVE-2020-14644Oracle WebLogic Server2024-09-1894.5%
CVE-2020-0618Microsoft SQL Server2024-09-1899.0%known
CVE-2014-0502Adobe Flash Player2024-09-1724.8%
CVE-2014-0497Adobe Flash Player2024-09-1799.9%
CVE-2013-0648Adobe Flash Player2024-09-1711.1%
CVE-2013-0643Adobe Flash Player2024-09-1710.5%
CVE-2024-6670Progress WhatsUp Gold2024-09-1692.9%known
CVE-2024-43461Microsoft Windows2024-09-1654.5%

1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9

Filters and the CSV cover the 200 rows on this page. The full catalog is free as a daily dataset.

🔔 Get a browser alert when CISA adds a new KEV entry (free, no email, one click to stop).

Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.