KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

KEV / Index

CISA Known Exploited Vulnerabilities: full index

Every vulnerability CISA has confirmed as exploited in the wild, newest first, with filters across the whole catalog.

Catalog
2026.09.23
Entries
1,721
First added
2021-11-03
Latest added
2026-09-22

Answer CISA's KEV catalog lists 1,721 vulnerabilities as of catalog 2026.09.23. 46 were added in the 30 days to 2026-09-23, and 361 (21%) are flagged as used in ransomware campaigns.

Entries
1,721all time
Last 7 days
+8added
Last 30 days
+46added
Last 90 days
+92added
Ransomware: known
21%361 entries
Open deadlines
8federal due date ahead

QFilter the catalog

Filters all 1,721 entries in your browser. Without JavaScript, use the year archives below.

YYear archives

Ransomware-linked entries
KEV additions by year
YearAddedRansomware: knownShareMedian days to due
20262372711.4%14
20252453112.7%21
20241864423.7%21
20231874323%21
202255513223.8%21
20213118427%181

DOpen federal deadlines

due date on or after 2026-09-23
KEV entries whose federal due date is on or after 2026-09-23
CVEVendorProductDueTime left
CVE-2026-87491GoogleChromium V80 days
CVE-2026-7273ZyxelGS1900 Series Switches1 days
CVE-2026-94127F5BIG-IP APM2 days
CVE-2026-93952AristaVeloCloud Orchestrator2 days
CVE-2026-93616Check PointMultiple Products2 days
CVE-2026-85102Check PointMultiple Products2 days
CVE-2026-42018JFrogArtifactory2 days
CVE-2026-42016JFrogArtifactory2 days

LLatest 100 additions

RSS · JSON
The 100 most recent KEV additions
CVEVendorProductVulnerabilityAddedDueRansomwareCWE
CVE-2026-94127F5BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability New OpenUnknownCWE-122
CVE-2026-93952AristaVeloCloud OrchestratorArista VeloCloud Orchestrator Improper Input Validation Vulnerability New OpenUnknownCWE-20
CVE-2026-93616Check PointMultiple ProductsCheck Point Multiple Products Path Traversal Vulnerability New OpenUnknownCWE-22
CVE-2026-85102Check PointMultiple ProductsCheck Point Multiple Products Improper Certificate Validation Vulnerability New OpenUnknownCWE-295
CVE-2026-7273ZyxelGS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability New OpenUnknownCWE-121
CVE-2026-53266LinuxKernelLinux Kernel Out-of-Bounds Write Vulnerability NewUnknownCWE-787
CVE-2025-39964LinuxKernelLinux Kernel Race Condition Vulnerability NewUnknownCWE-362
CVE-2025-39682LinuxKernelLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability NewUnknownCWE-754
CVE-2026-87886AcronisBackupAcronis Backup Incorrect Default Permissions VulnerabilityUnknownCWE-276
CVE-2026-76460CiscoIdentity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityUnknownCWE-648
CVE-2026-58704GooglePixelGoogle Pixel Improper Authorization VulnerabilityUnknownCWE-693
CVE-2026-76461CiscoSecure Email GatewayCisco Secure Email Gateway SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-85706GitLabCommunity Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityUnknownCWE-35
CVE-2026-84869ConnectWiseScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityUnknownCWE-269, CWE-862
CVE-2026-42018JFrogArtifactoryJFrog Artifactory Improper Authentication Vulnerability OpenUnknownCWE-287
CVE-2026-42016JFrogArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability OpenUnknownCWE-863
CVE-2026-86060MikroTikRouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityUnknownCWE-88
CVE-2026-67277MikroTikRouterOSMikroTik RouterOS Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-87491GoogleChromium V8Google Chromium V8 Out of Bounds Write Vulnerability OpenUnknownCWE-787
CVE-2026-20079CiscoSecure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2026-19490CitrixNetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2025-25249FortinetMultiple ProductsFortinet Multiple Products Heap-based Buffer Overflow VulnerabilityUnknownCWE-122, CWE-787
CVE-2026-86218N-ableN-centralN-able N-central Static Code Injection VulnerabilityUnknownCWE-96
CVE-2026-85880MicrosoftWindowsMicrosoft Windows Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122, CWE-908
CVE-2026-81963MicrosoftWindowsMicrosoft Windows Link Following VulnerabilityUnknownCWE-59, CWE-284
CVE-2026-75650AdobeCommerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityUnknownCWE-1336
CVE-2026-85046GoogleChromium V8Google Chromium V8 Type Confusion VulnerabilityUnknownCWE-843
CVE-2026-9586SangomaSwitchvoxSangoma Switchvox SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-83549SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-83548SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityUnknownCWE-918, CWE-441
CVE-2026-82329JFrogArtifactoryJFrog Artifactory Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-59822BerriAILiteLLMBerriAI LiteLLM Improper Authentication VulnerabilityUnknownCWE-287, CWE-306
CVE-2026-49869KestraKestra OSSKestra OSS OS Command Injection VulnerabilityUnknownCWE-78, CWE-184, CWE-287, CWE-918
CVE-2026-48710KludexStarletteKludex Starlette HTTP Request/Response Smuggling VulnerabilityUnknownCWE-444
CVE-2026-82078PaperCutNG/MFPaperCut NG/MF Unsafe Reflection VulnerabilityUnknownCWE-470
CVE-2026-81578PaperCutNG/MFPaperCut NG/MF Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-66384JFrogArtifactoryJFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityUnknownCWE-22
CVE-2026-53362LinuxKernelLinux Kernel Unspecified VulnerabilityUnknownnone listed
CVE-2023-49105ownCloudownCloudownCloud Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-8452CitrixNetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityUnknownCWE-119
CVE-2022-0995LinuxKernelLinux Kernel Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2021-23758Ajax.NET ProfessionalAjax.NET ProfessionalAjax.NET Professional Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2019-1068MicrosoftSQL ServerMicrosoft SQL Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2015-5287Red HatAutomatic Bug Reporting ToolRed Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityUnknownnone listed
CVE-2015-3246Red HatLibuserRed Hat Libuser Race Condition VulnerabilityUnknownnone listed
CVE-2026-60004GiteaGiteaGitea Code Injection VulnerabilityUnknownCWE-94
CVE-2026-21962OracleHTTP Server and Oracle Weblogic Server Proxy Plug-inOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityUnknownCWE-284
CVE-2026-73570SynacorZimbra Collaboration Suite (ZCS)Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-72530TrueConfServerTrueConf Server Code Injection VulnerabilityUnknownCWE-94
CVE-2026-72529TrueConfServerTrueConf Server Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-64849MLflowMLflowMLflow Server-Side Request Forgery VulnerabilityUnknownCWE-918
CVE-2026-65400ApplemacOSApple macOS Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-59310BroadcomVMware vCenterBroadcom VMware vCenter Path Traversal VulnerabilityKnownCWE-22
CVE-2026-55040MicrosoftSharePointMicrosoft SharePoint Weak Authentication VulnerabilityUnknownCWE-1390
CVE-2026-33824MicrosoftInternet Key Exchange (IKE) Service ExtensionsMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityUnknownCWE-415
CVE-2025-62593Ray-ProjectRayRay-Project Ray Code Injection VulnerabilityUnknownCWE-94, CWE-352
CVE-2026-72898MetabaseMetabaseMetabase SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-68820MicrosoftWindows Ancillary Function Driver for WinSock Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityUnknownCWE-416
CVE-2026-20349CiscoSecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityUnknownCWE-244
CVE-2026-8037ProgressLoadMasterProgress LoadMaster Command Injection VulnerabilityUnknownCWE-77
CVE-2026-63077JetBrainsTeamCityJetBrains TeamCity Deserialization of Untrusted Data VulnerabilityKnownCWE-502
CVE-2026-9198IBMLangflowIBM Langflow Code Injection VulnerabilityUnknownCWE-94
CVE-2026-34486ApacheTomcatApache Tomcat Missing Encryption of Sensitive Data VulnerabilityUnknownCWE-311
CVE-2026-18556N-ableN-centralN-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2026-18577N-ableN-centralN-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2026-20316CiscoSecure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityKnownCWE-259
CVE-2026-16812AristaVeloCloud OrchestratorArista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityUnknownCWE-78
CVE-2025-68686FortinetFortiOSFortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityUnknownCWE-200
CVE-2026-50522MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability UnknownCWE-502
CVE-2026-16232Check PointSmartConsoleCheck Point SmartConsole Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-63030WordPressCoreWordPress Core Interpretation Conflict VulnerabilityUnknownCWE-436
CVE-2026-60137WordPressCoreWordPress Core SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-0770LangflowLangflowLangflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityUnknownCWE-829
CVE-2021-27137DD-WRTDD-WRTDD-WRT Stack-Based Buffer Overflow VulnerabilityUnknownCWE-121
CVE-2026-58644MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2026-39808FortinetFortiSandboxFortinet FortiSandbox OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-25089FortinetFortiSandboxFortinet FortiSandbox OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-46817OracleE-Business SuiteOracle E-Business Suite Improper Privilege Management VulnerabilityUnknownCWE-269, CWE-287, CWE-306
CVE-2023-4346KNX AssociationKNX Protocol Connection Authorization Option 1KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityUnknownCWE-645
CVE-2026-56164MicrosoftSharePoint ServerMicrosoft SharePoint Server Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-56155MicrosoftActive Directory Federation ServicesMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability UnknownCWE-1220
CVE-2026-15410SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection VulnerabilityKnownCWE-94
CVE-2026-15409SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityKnownCWE-918
CVE-2008-4128CiscoIOSCisco IOS Cross-Site Request Forgery VulnerabilityUnknownCWE-352
CVE-2026-56291BalbooaFormsBalbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityUnknownCWE-434
CVE-2026-48939iCagendaiCagendaiCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityUnknownCWE-434
CVE-2026-56290JoomlackPage BuilderJoomlack Page Builder Improper Access Control VulnerabilityUnknownCWE-284
CVE-2026-55255LangflowLangflowLangflow Authorization Bypass Through User-Controlled Key VulnerabilityUnknownCWE-639
CVE-2026-48908JoomShaperSP Page BuilderJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityUnknownCWE-434
CVE-2026-48282AdobeColdFusionAdobe ColdFusion Path Traversal VulnerabilityUnknownCWE-22
CVE-2026-45659MicrosoftSharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data VulnerabilityKnownCWE-502
CVE-2026-48558SimpleHelp SimpleHelpSimpleHelp Authentication Bypass VulnerabilityUnknownCWE-347
CVE-2026-20230CiscoUnified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityUnknownCWE-918
CVE-2026-12569PTCWindchill and FlexPLMPTC Windchill and FlexPLM Improper Input Validation VulnerabilityKnownCWE-20, CWE-502
CVE-2026-34910UbiquitiUniFi OSUbiquiti UniFi OS Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2026-34909UbiquitiUniFi OSUbiquiti UniFi OS Path Traversal VulnerabilityUnknownCWE-22
CVE-2026-34908UbiquitiUniFi OSUbiquiti UniFi OS Improper Access Control VulnerabilityUnknownCWE-284
CVE-2025-67038LantronixEDS5000Lantronix EDS5000 Code Injection VulnerabilityUnknownCWE-78, CWE-94
CVE-2026-20253SplunkEnterpriseSplunk Enterprise Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-48907Widget FactoryJoomla Content Editor Widget Factory Joomla Content Editor Improper Access Control VulnerabilityUnknownCWE-284

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API