KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

KEV / Archive / 2026

KEV additions in 2026 (year to date)

Every vulnerability CISA added to the Known Exploited Vulnerabilities catalog in 2026, with monthly counts, vendors and weaknesses.

Catalog
2026.09.23
Entries
237
Range
2026-01-07 to 2026-09-22

Answer CISA added 237 vulnerabilities to the KEV catalog in 2026 through 2026-09-23. The busiest month was September 2026, with 34. 27 were flagged as used by ransomware (11.4%), and the most-listed vendor was Microsoft with 38.

Added
237in 2026
Ransomware: known
11.4%27 entries
Vendors
93distinct
Median days to due
14dateAdded to dueDate
Share of catalog
13.8%of 1,721

MAdditions per month

KEV additions per month in 2026Monthly additions in 2026: Jan 26 17; Feb 26 28; Mar 26 26; Apr 26 31; May 26 21; Jun 26 23; Jul 26 26; Aug 26 31; Sep 26 34.010203040Jan 26: 17 added17JanFeb 26: 28 added28FebMar 26: 26 added26MarApr 26: 31 added31AprMay 26: 21 added21MayJun 26: 23 added23JunJul 26: 26 added26JulAug 26: 31 added31AugSep 26: 34 added34Sep
Table view
KEV additions per month, 2026
MonthAdded
Jan 2617
Feb 2628
Mar 2626
Apr 2631
May 2621
Jun 2623
Jul 2626
Aug 2631
Sep 2634

VTop vendors in 2026

Top vendors by KEV additions, 2026
VendorEntriesShare of year
Microsoft3816%
Cisco177.2%
Linux83.4%
Google83.4%
Apple83.4%
Fortinet73%
Adobe52.1%
Synacor52.1%
Ivanti52.1%
Check Point41.7%

WTop weaknesses in 2026

Top CWEs by KEV additions, 2026
CWEEntriesShare of year
CWE-94 Code injection177.2%
CWE-287 Improper authentication166.8%
CWE-78 OS command injection135.5%
CWE-502 Unsafe deserialization135.5%
CWE-306 Missing authentication125.1%
CWE-22 Path traversal114.6%
CWE-918 Server-side request forgery93.8%
CWE-787 Out-of-bounds write83.4%

EAll 237 entries added in 2026

KEV entries added in 2026, newest first
CVEVendorProductVulnerabilityAddedDueRansomwareCWE
CVE-2026-94127F5BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability New OpenUnknownCWE-122
CVE-2026-93952AristaVeloCloud OrchestratorArista VeloCloud Orchestrator Improper Input Validation Vulnerability New OpenUnknownCWE-20
CVE-2026-93616Check PointMultiple ProductsCheck Point Multiple Products Path Traversal Vulnerability New OpenUnknownCWE-22
CVE-2026-85102Check PointMultiple ProductsCheck Point Multiple Products Improper Certificate Validation Vulnerability New OpenUnknownCWE-295
CVE-2026-7273ZyxelGS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability New OpenUnknownCWE-121
CVE-2026-53266LinuxKernelLinux Kernel Out-of-Bounds Write Vulnerability NewUnknownCWE-787
CVE-2025-39964LinuxKernelLinux Kernel Race Condition Vulnerability NewUnknownCWE-362
CVE-2025-39682LinuxKernelLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability NewUnknownCWE-754
CVE-2026-87886AcronisBackupAcronis Backup Incorrect Default Permissions VulnerabilityUnknownCWE-276
CVE-2026-76460CiscoIdentity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityUnknownCWE-648
CVE-2026-58704GooglePixelGoogle Pixel Improper Authorization VulnerabilityUnknownCWE-693
CVE-2026-76461CiscoSecure Email GatewayCisco Secure Email Gateway SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-85706GitLabCommunity Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityUnknownCWE-35
CVE-2026-84869ConnectWiseScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityUnknownCWE-269, CWE-862
CVE-2026-42018JFrogArtifactoryJFrog Artifactory Improper Authentication Vulnerability OpenUnknownCWE-287
CVE-2026-42016JFrogArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability OpenUnknownCWE-863
CVE-2026-86060MikroTikRouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityUnknownCWE-88
CVE-2026-67277MikroTikRouterOSMikroTik RouterOS Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-87491GoogleChromium V8Google Chromium V8 Out of Bounds Write Vulnerability OpenUnknownCWE-787
CVE-2026-20079CiscoSecure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2026-19490CitrixNetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2025-25249FortinetMultiple ProductsFortinet Multiple Products Heap-based Buffer Overflow VulnerabilityUnknownCWE-122, CWE-787
CVE-2026-86218N-ableN-centralN-able N-central Static Code Injection VulnerabilityUnknownCWE-96
CVE-2026-85880MicrosoftWindowsMicrosoft Windows Heap-Based Buffer Overflow VulnerabilityUnknownCWE-122, CWE-908
CVE-2026-81963MicrosoftWindowsMicrosoft Windows Link Following VulnerabilityUnknownCWE-59, CWE-284
CVE-2026-75650AdobeCommerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityUnknownCWE-1336
CVE-2026-85046GoogleChromium V8Google Chromium V8 Type Confusion VulnerabilityUnknownCWE-843
CVE-2026-9586SangomaSwitchvoxSangoma Switchvox SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-83549SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-83548SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityUnknownCWE-918, CWE-441
CVE-2026-82329JFrogArtifactoryJFrog Artifactory Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-59822BerriAILiteLLMBerriAI LiteLLM Improper Authentication VulnerabilityUnknownCWE-287, CWE-306
CVE-2026-49869KestraKestra OSSKestra OSS OS Command Injection VulnerabilityUnknownCWE-78, CWE-184, CWE-287, CWE-918
CVE-2026-48710KludexStarletteKludex Starlette HTTP Request/Response Smuggling VulnerabilityUnknownCWE-444
CVE-2026-82078PaperCutNG/MFPaperCut NG/MF Unsafe Reflection VulnerabilityUnknownCWE-470
CVE-2026-81578PaperCutNG/MFPaperCut NG/MF Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-66384JFrogArtifactoryJFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityUnknownCWE-22
CVE-2026-53362LinuxKernelLinux Kernel Unspecified VulnerabilityUnknownnone listed
CVE-2023-49105ownCloudownCloudownCloud Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-8452CitrixNetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityUnknownCWE-119
CVE-2022-0995LinuxKernelLinux Kernel Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2021-23758Ajax.NET ProfessionalAjax.NET ProfessionalAjax.NET Professional Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2019-1068MicrosoftSQL ServerMicrosoft SQL Server Remote Code Execution VulnerabilityUnknownnone listed
CVE-2015-5287Red HatAutomatic Bug Reporting ToolRed Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityUnknownnone listed
CVE-2015-3246Red HatLibuserRed Hat Libuser Race Condition VulnerabilityUnknownnone listed
CVE-2026-60004GiteaGiteaGitea Code Injection VulnerabilityUnknownCWE-94
CVE-2026-21962OracleHTTP Server and Oracle Weblogic Server Proxy Plug-inOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityUnknownCWE-284
CVE-2026-73570SynacorZimbra Collaboration Suite (ZCS)Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-72530TrueConfServerTrueConf Server Code Injection VulnerabilityUnknownCWE-94
CVE-2026-72529TrueConfServerTrueConf Server Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-64849MLflowMLflowMLflow Server-Side Request Forgery VulnerabilityUnknownCWE-918
CVE-2026-65400ApplemacOSApple macOS Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-59310BroadcomVMware vCenterBroadcom VMware vCenter Path Traversal VulnerabilityKnownCWE-22
CVE-2026-55040MicrosoftSharePointMicrosoft SharePoint Weak Authentication VulnerabilityUnknownCWE-1390
CVE-2026-33824MicrosoftInternet Key Exchange (IKE) Service ExtensionsMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityUnknownCWE-415
CVE-2025-62593Ray-ProjectRayRay-Project Ray Code Injection VulnerabilityUnknownCWE-94, CWE-352
CVE-2026-72898MetabaseMetabaseMetabase SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-68820MicrosoftWindows Ancillary Function Driver for WinSock Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityUnknownCWE-416
CVE-2026-20349CiscoSecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityUnknownCWE-244
CVE-2026-8037ProgressLoadMasterProgress LoadMaster Command Injection VulnerabilityUnknownCWE-77
CVE-2026-63077JetBrainsTeamCityJetBrains TeamCity Deserialization of Untrusted Data VulnerabilityKnownCWE-502
CVE-2026-9198IBMLangflowIBM Langflow Code Injection VulnerabilityUnknownCWE-94
CVE-2026-34486ApacheTomcatApache Tomcat Missing Encryption of Sensitive Data VulnerabilityUnknownCWE-311
CVE-2026-18556N-ableN-centralN-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2026-18577N-ableN-centralN-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2026-20316CiscoSecure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityKnownCWE-259
CVE-2026-16812AristaVeloCloud OrchestratorArista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityUnknownCWE-78
CVE-2025-68686FortinetFortiOSFortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityUnknownCWE-200
CVE-2026-50522MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability UnknownCWE-502
CVE-2026-16232Check PointSmartConsoleCheck Point SmartConsole Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-63030WordPressCoreWordPress Core Interpretation Conflict VulnerabilityUnknownCWE-436
CVE-2026-60137WordPressCoreWordPress Core SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-0770LangflowLangflowLangflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityUnknownCWE-829
CVE-2021-27137DD-WRTDD-WRTDD-WRT Stack-Based Buffer Overflow VulnerabilityUnknownCWE-121
CVE-2026-58644MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2026-39808FortinetFortiSandboxFortinet FortiSandbox OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-25089FortinetFortiSandboxFortinet FortiSandbox OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-46817OracleE-Business SuiteOracle E-Business Suite Improper Privilege Management VulnerabilityUnknownCWE-269, CWE-287, CWE-306
CVE-2023-4346KNX AssociationKNX Protocol Connection Authorization Option 1KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityUnknownCWE-645
CVE-2026-56164MicrosoftSharePoint ServerMicrosoft SharePoint Server Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-56155MicrosoftActive Directory Federation ServicesMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability UnknownCWE-1220
CVE-2026-15410SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection VulnerabilityKnownCWE-94
CVE-2026-15409SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityKnownCWE-918
CVE-2008-4128CiscoIOSCisco IOS Cross-Site Request Forgery VulnerabilityUnknownCWE-352
CVE-2026-56291BalbooaFormsBalbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityUnknownCWE-434
CVE-2026-48939iCagendaiCagendaiCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityUnknownCWE-434
CVE-2026-56290JoomlackPage BuilderJoomlack Page Builder Improper Access Control VulnerabilityUnknownCWE-284
CVE-2026-55255LangflowLangflowLangflow Authorization Bypass Through User-Controlled Key VulnerabilityUnknownCWE-639
CVE-2026-48908JoomShaperSP Page BuilderJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityUnknownCWE-434
CVE-2026-48282AdobeColdFusionAdobe ColdFusion Path Traversal VulnerabilityUnknownCWE-22
CVE-2026-45659MicrosoftSharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data VulnerabilityKnownCWE-502
CVE-2026-48558SimpleHelp SimpleHelpSimpleHelp Authentication Bypass VulnerabilityUnknownCWE-347
CVE-2026-20230CiscoUnified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityUnknownCWE-918
CVE-2026-12569PTCWindchill and FlexPLMPTC Windchill and FlexPLM Improper Input Validation VulnerabilityKnownCWE-20, CWE-502
CVE-2026-34910UbiquitiUniFi OSUbiquiti UniFi OS Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2026-34909UbiquitiUniFi OSUbiquiti UniFi OS Path Traversal VulnerabilityUnknownCWE-22
CVE-2026-34908UbiquitiUniFi OSUbiquiti UniFi OS Improper Access Control VulnerabilityUnknownCWE-284
CVE-2025-67038LantronixEDS5000Lantronix EDS5000 Code Injection VulnerabilityUnknownCWE-78, CWE-94
CVE-2026-20253SplunkEnterpriseSplunk Enterprise Missing Authentication for Critical Function VulnerabilityUnknownCWE-306
CVE-2026-48907Widget FactoryJoomla Content Editor Widget Factory Joomla Content Editor Improper Access Control VulnerabilityUnknownCWE-284
CVE-2026-54420LiteSpeedcPanel PluginLiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityUnknownCWE-61
CVE-2026-20262CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityUnknownCWE-22
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityKnownCWE-306
CVE-2026-10520IvantiSentryIvanti Sentry OS Command Injection VulnerabilityUnknownCWE-78
CVE-2026-7473AristaExtensible Operating SystemArista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityUnknownCWE-1023
CVE-2026-20245CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityUnknownCWE-116
CVE-2026-11645GoogleChromium V8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityUnknownCWE-787, CWE-125
CVE-2026-50751Check PointSecurity GatewayCheck Point Security Gateway Improper Authentication VulnerabilityKnownCWE-287
CVE-2026-42271BerriAILiteLLMBerriAI LiteLLM Command Injection VulnerabilityUnknownCWE-78, CWE-77
CVE-2026-28318SolarWindsServ-USolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityUnknownCWE-400
CVE-2026-45247MirasvitMirasvit Full Page Cache WarmerMirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2025-48595AndroidFrameworkAndroid Framework Integer Overflow VulnerabilityUnknownCWE-190
CVE-2022-0492LinuxKernelLinux Kernel Improper Authentication VulnerabilityUnknownCWE-287, CWE-862
CVE-2024-21182OracleWebLogic ServerOracle WebLogic Server Unspecified VulnerabilityUnknownnone listed
CVE-2026-0257Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Authentication Bypass VulnerabilityKnownCWE-565
CVE-2026-8398DaemonDaemon Tools LiteDaemon Tools Lite Embedded Malicious Code VulnerabilityUnknownCWE-506
CVE-2026-48027NxNx ConsoleNx Console Embedded Malicious Code VulnerabilityKnownCWE-506
CVE-2026-45321TanStackTanStackTanStack Unspecified VulnerabilityKnownnone listed
CVE-2026-48172LiteSpeedcPanel PluginLiteSpeed cPanel Plugin Privilege Escalation VulnerabilityUnknownCWE-266
CVE-2026-9082DrupalCoreDrupal Core SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-34926Trend MicroApex OneTrend Micro Apex One (On-Premise) Directory Traversal VulnerabilityUnknownCWE-23
CVE-2025-34291LangflowLangflowLangflow Origin Validation Error VulnerabilityUnknownCWE-346
CVE-2026-45498MicrosoftDefenderMicrosoft Defender Denial of Service VulnerabilityUnknownnone listed
CVE-2026-41091MicrosoftDefenderMicrosoft Defender Link Following VulnerabilityUnknownCWE-59
CVE-2010-0806MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityUnknownCWE-399
CVE-2010-0249MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityUnknownCWE-416
CVE-2009-3459AdobeAcrobat and ReaderAdobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2009-1537MicrosoftDirectXMicrosoft DirectX NULL Byte Overwrite VulnerabilityUnknownnone listed
CVE-2008-4250MicrosoftWindowsMicrosoft Windows Buffer Overflow VulnerabilityUnknownCWE-94
CVE-2026-42897MicrosoftMicrosoftMicrosoft Exchange Server Cross-Site Scripting VulnerabilityUnknownCWE-79
CVE-2026-20182CiscoCatalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityUnknownCWE-287
CVE-2026-42208BerriAILiteLLMBerriAI LiteLLM SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-6973IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2026-0300Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityUnknownCWE-787
CVE-2026-31431LinuxKernelLinux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityUnknownCWE-669
CVE-2026-41940WebProscPanel & WHM and WP2 (WordPress Squared)WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityKnownCWE-306
CVE-2026-32202MicrosoftWindowsMicrosoft Windows Protection Mechanism Failure VulnerabilityUnknownCWE-693
CVE-2024-1708ConnectWiseScreenConnectConnectWise ScreenConnect Path Traversal VulnerabilityKnownCWE-22
CVE-2025-29635D-LinkDIR-823XD-Link DIR-823X Command Injection VulnerabilityUnknownCWE-77
CVE-2024-7399SamsungMagicINFO 9 ServerSamsung MagicINFO 9 Server Path Traversal VulnerabilityUnknownCWE-22, CWE-434
CVE-2024-57728SimpleHelp SimpleHelpSimpleHelp Path Traversal VulnerabilityKnownCWE-22
CVE-2024-57726SimpleHelp SimpleHelpSimpleHelp Missing Authorization VulnerabilityKnownCWE-862
CVE-2026-39987MarimoMarimoMarimo Remote Code Execution VulnerabilityUnknownCWE-306
CVE-2026-33825MicrosoftDefenderMicrosoft Defender Insufficient Granularity of Access Control VulnerabilityKnownCWE-1220
CVE-2026-20133CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityUnknownCWE-200
CVE-2026-20128CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityUnknownCWE-257
CVE-2026-20122CiscoCatalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityUnknownCWE-648
CVE-2025-48700SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityUnknownCWE-79
CVE-2025-32975QuestKACE Systems Management Appliance (SMA)Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityUnknownCWE-287
CVE-2025-2749KenticoKentico XperienceKentico Xperience Path Traversal VulnerabilityUnknownCWE-22, CWE-434
CVE-2024-27199JetBrainsTeamCityJetBrains TeamCity Relative Path Traversal VulnerabilityKnownCWE-23
CVE-2023-27351PaperCutNG/MFPaperCut NG/MF Improper Authentication VulnerabilityKnownCWE-287
CVE-2026-34197ApacheActiveMQApache ActiveMQ Improper Input Validation VulnerabilityUnknownCWE-20, CWE-94
CVE-2026-32201MicrosoftSharePoint ServerMicrosoft SharePoint Server Improper Input Validation VulnerabilityUnknownCWE-20
CVE-2009-0238MicrosoftOfficeMicrosoft Office Remote Code ExecutionUnknownCWE-94
CVE-2026-34621AdobeAcrobat and ReaderAdobe Acrobat and Reader Prototype Pollution VulnerabilityUnknownCWE-1321
CVE-2026-21643FortinetFortiClient EMSFortinet FortiClient EMS SQL Injection VulnerabilityUnknownCWE-89
CVE-2025-60710MicrosoftWindowsMicrosoft Windows Link Following VulnerabilityKnownCWE-59
CVE-2023-36424MicrosoftWindowsMicrosoft Windows Out-of-Bounds Read VulnerabilityUnknownCWE-125
CVE-2023-21529MicrosoftExchange ServerMicrosoft Exchange Server Deserialization of Untrusted Data VulnerabilityKnownCWE-502
CVE-2020-9715AdobeAcrobatAdobe Acrobat Use-After-Free VulnerabilityUnknownCWE-416
CVE-2012-1854MicrosoftVisual Basic for Applications (VBA)Microsoft Visual Basic for Applications Insecure Library Loading VulnerabilityUnknownCWE-426
CVE-2026-1340IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityUnknownCWE-94
CVE-2026-35616FortinetFortiClient EMSFortinet FortiClient EMS Improper Access Control VulnerabilityUnknownCWE-284
CVE-2026-3502TrueConfClientTrueConf Client Download of Code Without Integrity Check VulnerabilityUnknownCWE-494
CVE-2026-5281GoogleDawnGoogle Dawn Use-After-Free VulnerabilityUnknownCWE-416
CVE-2026-3055CitrixNetScalerCitrix NetScaler Out-of-Bounds Read VulnerabilityUnknownCWE-125
CVE-2025-53521F5BIG-IPF5 BIG-IP Stack-Based Buffer Overflow VulnerabilityUnknownCWE-121
CVE-2026-33634AquasecurityTrivyAquasecurity Trivy Embedded Malicious Code VulnerabilityUnknownCWE-506
CVE-2026-33017LangflowLangflowLangflow Code Injection VulnerabilityUnknownCWE-94, CWE-95, CWE-306
CVE-2025-54068LaravelLivewireLaravel Livewire Code Injection VulnerabilityUnknownCWE-94
CVE-2025-43520AppleMultiple ProductsApple Multiple Products Classic Buffer Overflow VulnerabilityUnknownCWE-120
CVE-2025-43510AppleMultiple ProductsApple Multiple Products Improper Locking VulnerabilityUnknownCWE-667
CVE-2025-32432Craft CMSCraft CMSCraft CMS Code Injection VulnerabilityUnknownCWE-94
CVE-2025-31277AppleMultiple ProductsApple Multiple Products Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2026-20131CiscoSecure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityKnownCWE-502
CVE-2026-20963MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2025-66376SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityUnknownCWE-79
CVE-2025-47813Wing FTP ServerWing FTP ServerWing FTP Server Information Disclosure VulnerabilityUnknownCWE-209
CVE-2026-3910GoogleChromium V8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityUnknownCWE-119
CVE-2026-3909GoogleSkiaGoogle Skia Out-of-Bounds Write VulnerabilityUnknownCWE-787
CVE-2025-68613n8nn8nn8n Improper Control of Dynamically-Managed Code Resources VulnerabilityUnknownCWE-913
CVE-2026-1603Ivanti Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityUnknownCWE-288
CVE-2025-26399SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKnownCWE-502
CVE-2021-22054OmnissaWorkspace One UEMOmnissa Workspace ONE Server-Side Request ForgeryUnknownCWE-918
CVE-2023-43000AppleMultiple ProductsApple Multiple products Use-After-Free VulnerabilityUnknownCWE-416
CVE-2023-41974AppleiOS and iPadOSApple iOS and iPadOS Use-After-Free VulnerabilityUnknownCWE-416
CVE-2021-30952AppleMultiple ProductsApple Multiple Products Integer Overflow or Wraparound VulnerabilityUnknownCWE-190
CVE-2021-22681RockwellMultiple ProductsRockwell Multiple Products Insufficient Protected Credentials VulnerabilityUnknownCWE-522
CVE-2017-7921HikvisionMultiple ProductsHikvision Multiple Products Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-22719BroadcomVMware Aria OperationsBroadcom VMware Aria Operations Command Injection VulnerabilityUnknownCWE-77
CVE-2026-21385QualcommMultiple ChipsetsQualcomm Multiple Chipsets Memory Corruption VulnerabilityUnknownCWE-190
CVE-2026-20127CiscoCatalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityUnknownCWE-287
CVE-2022-20775CiscoSD-WANCisco SD-WAN Path Traversal VulnerabilityUnknownCWE-25, CWE-282
CVE-2026-25108Soliton Systems K.KFileZenSoliton Systems K.K FileZen OS Command Injection VulnerabilityUnknownCWE-78
CVE-2025-68461RoundcubeWebmailRoundCube Webmail Cross-site Scripting VulnerabilityUnknownCWE-79
CVE-2025-49113RoundcubeWebmailRoundCube Webmail Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2026-22769DellRecoverPoint for Virtual Machines (RP4VMs)Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityUnknownCWE-798
CVE-2021-22175GitLabGitLabGitLab Server-Side Request Forgery (SSRF) VulnerabilityUnknownCWE-918
CVE-2026-2441GoogleChromiumGoogle Chromium CSS Use-After-Free VulnerabilityUnknownCWE-416
CVE-2024-7694TeamT5ThreatSonar Anti-RansomwareTeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type VulnerabilityUnknownCWE-434
CVE-2020-7796SynacorZimbra Collaboration SuiteSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery VulnerabilityUnknownCWE-918
CVE-2008-0015MicrosoftWindows Microsoft Windows Video ActiveX Control Remote Code Execution VulnerabilityUnknownnone listed
CVE-2026-1731BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA)BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityKnownCWE-78
CVE-2026-20700AppleMultiple ProductsApple Multiple Buffer Overflow VulnerabilityUnknownCWE-119
CVE-2025-40536SolarWindsWeb Help DeskSolarWinds Web Help Desk Security Control Bypass VulnerabilityUnknownCWE-693
CVE-2025-15556Notepad++Notepad++Notepad++ Download of Code Without Integrity Check VulnerabilityUnknownCWE-494
CVE-2024-43468MicrosoftConfiguration ManagerMicrosoft Configuration Manager SQL Injection VulnerabilityUnknownCWE-89
CVE-2026-21533MicrosoftWindowsMicrosoft Windows Improper Privilege Management VulnerabilityUnknownCWE-269
CVE-2026-21525MicrosoftWindowsMicrosoft Windows NULL Pointer Dereference VulnerabilityUnknownCWE-476
CVE-2026-21519MicrosoftWindowsMicrosoft Windows Type Confusion VulnerabilityUnknownCWE-843
CVE-2026-21514MicrosoftOfficeMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision VulnerabilityUnknownCWE-807
CVE-2026-21513MicrosoftWindowsMicrosoft MSHTML Framework Protection Mechanism Failure VulnerabilityUnknownCWE-693
CVE-2026-21510MicrosoftWindowsMicrosoft Windows Shell Protection Mechanism Failure VulnerabilityUnknownCWE-693
CVE-2026-24423SmarterToolsSmarterMailSmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityKnownCWE-306
CVE-2025-11953React Native CommunityCLIReact Native Community CLI OS Command Injection VulnerabilityUnknownCWE-78
CVE-2025-64328SangomaFreePBX Sangoma FreePBX OS Command Injection VulnerabilityUnknownCWE-78
CVE-2025-40551SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityUnknownCWE-502
CVE-2021-39935GitLabCommunity and Enterprise EditionsGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityUnknownCWE-918
CVE-2019-19006SangomaFreePBX Sangoma FreePBX Improper Authentication VulnerabilityUnknownCWE-287
CVE-2026-1281IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityUnknownCWE-94
CVE-2026-24858FortinetMultiple ProductsFortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityUnknownCWE-288
CVE-2026-24061GNUInetUtilsGNU InetUtils Argument Injection VulnerabilityUnknownCWE-88
CVE-2026-23760SmarterToolsSmarterMailSmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityKnownCWE-288
CVE-2026-21509MicrosoftOfficeMicrosoft Office Security Feature Bypass VulnerabilityUnknownCWE-807
CVE-2025-52691SmarterToolsSmarterMailSmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityKnownCWE-434
CVE-2018-14634LinuxKernelLinux Kernel Integer Overflow VulnerabilityUnknownCWE-190
CVE-2024-37079BroadcomVMware vCenter ServerBroadcom VMware vCenter Server Out-of-bounds Write VulnerabilityUnknownCWE-787
CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityUnknownCWE-98
CVE-2025-54313Prettiereslint-config-prettierPrettier eslint-config-prettier Embedded Malicious Code VulnerabilityUnknownCWE-506
CVE-2025-34026VersaConcertoVersa Concerto Improper Authentication VulnerabilityUnknownCWE-288
CVE-2025-31125ViteVitejsVite Vitejs Improper Access Control VulnerabilityUnknownCWE-200, CWE-284
CVE-2026-20045CiscoUnified Communications ManagerCisco Unified Communications Products Code Injection VulnerabilityUnknownCWE-94
CVE-2026-20805MicrosoftWindowsMicrosoft Windows Information Disclosure VulnerabilityUnknownCWE-200
CVE-2025-8110GogsGogsGogs Path Traversal VulnerabilityUnknownCWE-22
CVE-2025-37164Hewlett Packard Enterprise (HPE)OneViewHewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityUnknownCWE-94
CVE-2009-0556MicrosoftOfficeMicrosoft Office PowerPoint Code Injection VulnerabilityUnknownCWE-94

Cite this

CISA added 237 vulnerabilities to its KEV catalog in 2026 through 2026-09-23. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/kev/2026/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API