Known Exploited Vulnerabilities
The CISA catalogue of vulnerabilities with evidence of exploitation in the wild, newest additions first. Catalogue version 2026.11.10, released 2026-11-10 19:03 UTC.
1,779 entries
| Added | CVE | Vendor · product | Name | CVSS | Due | Ransomware |
|---|---|---|---|---|---|---|
| 2025-12-17 | CVE-2025-20393 | Cisco · Multiple Products | Cisco Multiple Products Improper Input Validation Vulnerability | 10.0 Critical | 2025-12-24 | unknown |
| 2025-12-16 | CVE-2025-59718 | Fortinet · Multiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 9.1 Critical | 2025-12-23 | unknown |
| 2025-12-15 | CVE-2025-43529 | Apple · Multiple Products | Apple Multiple Products Use-After-Free WebKit Vulnerability | 8.8 High | 2026-01-05 | unknown |
| 2025-12-15 | CVE-2025-14611 | Gladinet · CentreStack and Triofox | Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability | 7.1 High | 2026-01-05 | unknown |
| 2025-12-12 | CVE-2025-14174 | Google · Chromium | Google Chromium Out of Bounds Memory Access Vulnerability | 8.8 High | 2026-01-02 | unknown |
| 2025-12-12 | CVE-2018-4063 | Sierra Wireless · AirLink ALEOS | Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability | 8.8 High | 2026-01-02 | unknown |
| 2025-12-11 | CVE-2025-58360 | OSGeo · GeoServer | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | 8.2 High | 2026-01-01 | unknown |
| 2025-12-09 | CVE-2025-62221 | Microsoft · Windows | Microsoft Windows Use After Free Vulnerability | 7.8 High | 2025-12-30 | unknown |
| 2025-12-09 | CVE-2025-6218 | RARLAB · WinRAR | RARLAB WinRAR Path Traversal Vulnerability | 7.8 High | 2025-12-30 | unknown |
| 2025-12-08 | CVE-2025-66644 | Array Networks · ArrayOS AG | Array Networks ArrayOS AG OS Command Injection Vulnerability | 7.2 High | 2025-12-29 | unknown |
| 2025-12-08 | CVE-2022-37055 | D-Link · Routers | D-Link Routers Buffer Overflow Vulnerability | 9.8 Critical | 2025-12-29 | unknown |
| 2025-12-05 | CVE-2025-55182 | Meta · React Server Components | Meta React Server Components Remote Code Execution Vulnerability | 10.0 Critical | 2025-12-12 | known |
| 2025-12-03 | CVE-2021-26828 | OpenPLC · ScadaBR | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | 8.8 High | 2025-12-24 | unknown |
| 2025-12-02 | CVE-2025-48633 | Android · Framework | Android Framework Information Disclosure Vulnerability | 5.5 Medium | 2025-12-23 | unknown |
| 2025-12-02 | CVE-2025-48572 | Android · Framework | Android Framework Privilege Escalation Vulnerability | 7.8 High | 2025-12-23 | unknown |
| 2025-11-28 | CVE-2021-26829 | OpenPLC · ScadaBR | OpenPLC ScadaBR Cross-site Scripting Vulnerability | 5.4 Medium | 2025-12-19 | unknown |
| 2025-11-21 | CVE-2025-61757 | Oracle · Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | 9.8 Critical | 2025-12-12 | unknown |
| 2025-11-19 | CVE-2025-13223 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 8.8 High | 2025-12-10 | unknown |
| 2025-11-18 | CVE-2025-58034 | Fortinet · FortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | 6.7 Medium | 2025-11-25 | unknown |
| 2025-11-14 | CVE-2025-64446 | Fortinet · FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | 9.4 Critical | 2025-11-21 | unknown |
| 2025-11-12 | CVE-2025-9242 | WatchGuard · Firebox | WatchGuard Firebox Out-of-Bounds Write Vulnerability | 9.3 Critical | 2025-12-03 | unknown |
| 2025-11-12 | CVE-2025-62215 | Microsoft · Windows | Microsoft Windows Race Condition Vulnerability | 7.0 High | 2025-12-03 | unknown |
| 2025-11-12 | CVE-2025-12480 | Gladinet · Triofox | Gladinet Triofox Improper Access Control Vulnerability | 9.1 Critical | 2025-12-03 | unknown |
| 2025-11-10 | CVE-2025-21042 | Samsung · Mobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 8.8 High | 2025-12-01 | unknown |
| 2025-11-04 | CVE-2025-48703 | CWP · Control Web Panel | CWP Control Web Panel OS Command Injection Vulnerability | 9.0 Critical | 2025-11-25 | unknown |
| 2025-11-04 | CVE-2025-11371 | Gladinet · CentreStack and Triofox | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability | 7.5 High | 2025-11-25 | unknown |
| 2025-10-30 | CVE-2025-41244 | Broadcom · VMware Aria Operations and VMware Tools | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | 7.8 High | 2025-11-20 | unknown |
| 2025-10-30 | CVE-2025-24893 | XWiki · Platform | XWiki Platform Eval Injection Vulnerability | 9.8 Critical | 2025-11-20 | unknown |
| 2025-10-28 | CVE-2025-6205 | Dassault Systèmes · DELMIA Apriso | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | 9.1 Critical | 2025-11-18 | unknown |
| 2025-10-28 | CVE-2025-6204 | Dassault Systèmes · DELMIA Apriso | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | 8.0 High | 2025-11-18 | unknown |
| 2025-10-24 | CVE-2025-59287 | Microsoft · Windows | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | 9.8 Critical | 2025-11-14 | unknown |
| 2025-10-24 | CVE-2025-54236 | Adobe · Commerce and Magento | Adobe Commerce and Magento Improper Input Validation Vulnerability | 9.1 Critical | 2025-11-14 | unknown |
| 2025-10-22 | CVE-2025-61932 | Motex · LANSCOPE Endpoint Manager | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | 9.3 Critical | 2025-11-12 | unknown |
| 2025-10-20 | CVE-2025-61884 | Oracle · E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | 7.5 High | 2025-11-10 | known |
| 2025-10-20 | CVE-2025-33073 | Microsoft · Windows | Microsoft Windows SMB Client Improper Access Control Vulnerability | 8.8 High | 2025-11-10 | unknown |
| 2025-10-20 | CVE-2025-2747 | Kentico · Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9.8 Critical | 2025-11-10 | unknown |
| 2025-10-20 | CVE-2025-2746 | Kentico · Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9.8 Critical | 2025-11-10 | unknown |
| 2025-10-20 | CVE-2022-48503 | Apple · Multiple Products | Apple Multiple Products Unspecified Vulnerability | 8.8 High | 2025-11-10 | unknown |
| 2025-10-15 | CVE-2025-54253 | Adobe · Experience Manager (AEM) Forms | Adobe Experience Manager Forms Code Execution Vulnerability | 10.0 Critical | 2025-11-05 | unknown |
| 2025-10-14 | CVE-2025-59230 | Microsoft · Windows | Microsoft Windows Improper Access Control Vulnerability | 7.8 High | 2025-11-04 | unknown |
| 2025-10-14 | CVE-2025-47827 | IGEL · IGEL OS | IGEL OS Use of a Key Past its Expiration Date Vulnerability | 4.6 Medium | 2025-11-04 | unknown |
| 2025-10-14 | CVE-2025-24990 | Microsoft · Windows | Microsoft Windows Untrusted Pointer Dereference Vulnerability | 7.8 High | 2025-11-04 | unknown |
| 2025-10-14 | CVE-2016-7836 | SKYSEA · Client View | SKYSEA Client View Improper Authentication Vulnerability | 9.8 Critical | 2025-11-04 | unknown |
| 2025-10-09 | CVE-2021-43798 | Grafana Labs · Grafana | Grafana Path Traversal Vulnerability | 7.5 High | 2025-10-30 | unknown |
| 2025-10-07 | CVE-2025-27915 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | 5.4 Medium | 2025-10-28 | unknown |
| 2025-10-06 | CVE-2025-61882 | Oracle · E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | 9.8 Critical | 2025-10-27 | known |
| 2025-10-06 | CVE-2021-43226 | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | 7.8 High | 2025-10-27 | known |
| 2025-10-06 | CVE-2021-22555 | Linux · Kernel | Linux Kernel Heap Out-of-Bounds Write Vulnerability | 8.3 High | 2025-10-27 | unknown |
| 2025-10-06 | CVE-2013-3918 | Microsoft · Windows | Microsoft Windows Out-of-Bounds Write Vulnerability | 8.8 High | 2025-10-27 | unknown |
| 2025-10-06 | CVE-2011-3402 | Microsoft · Windows | Microsoft Windows Remote Code Execution Vulnerability | 8.8 High | 2025-10-27 | unknown |
| 2025-10-06 | CVE-2010-3962 | Microsoft · Internet Explorer | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | 8.1 High | 2025-10-27 | unknown |
| 2025-10-06 | CVE-2010-3765 | Mozilla · Multiple Products | Mozilla Multiple Products Remote Code Execution Vulnerability | 9.8 Critical | 2025-10-27 | unknown |
| 2025-10-02 | CVE-2025-4008 | Smartbedded · Meteobridge | Smartbedded Meteobridge Command Injection Vulnerability | 8.7 High | 2025-10-23 | unknown |
| 2025-10-02 | CVE-2025-21043 | Samsung · Mobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | 8.8 High | 2025-10-23 | unknown |
| 2025-10-02 | CVE-2017-1000353 | Jenkins · Jenkins | Jenkins Remote Code Execution Vulnerability | 9.8 Critical | 2025-10-23 | unknown |
| 2025-10-02 | CVE-2015-7755 | Juniper · ScreenOS | Juniper ScreenOS Improper Authentication Vulnerability | 9.8 Critical | 2025-10-23 | unknown |
| 2025-10-02 | CVE-2014-6278 | GNU · GNU Bash | GNU Bash OS Command Injection Vulnerability | 8.8 High | 2025-10-23 | unknown |
| 2025-09-29 | CVE-2025-59689 | Libraesva · Email Security Gateway | Libraesva Email Security Gateway Command Injection Vulnerability | 6.1 Medium | 2025-10-20 | unknown |
| 2025-09-29 | CVE-2025-32463 | Sudo · Sudo | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 9.3 Critical | 2025-10-20 | unknown |
| 2025-09-29 | CVE-2025-20352 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 7.7 High | 2025-10-20 | unknown |
| 2025-09-29 | CVE-2025-10035 | Fortra · GoAnywhere MFT | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | 10.0 Critical | 2025-10-20 | known |
| 2025-09-29 | CVE-2021-21311 | Adminer · Adminer | Adminer Server-Side Request Forgery Vulnerability | 7.2 High | 2025-10-20 | unknown |
| 2025-09-25 | CVE-2025-20362 | Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 6.5 Medium | 2025-09-26 | unknown |
| 2025-09-25 | CVE-2025-20333 | Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 9.9 Critical | 2025-09-26 | unknown |
| 2025-09-23 | CVE-2025-10585 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 8.8 High | 2025-10-14 | unknown |
| 2025-09-11 | CVE-2025-5086 | Dassault Systèmes · DELMIA Apriso | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | 9.0 Critical | 2025-10-02 | unknown |
| 2025-09-04 | CVE-2025-53690 | Sitecore · Multiple Products | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 9.0 Critical | 2025-09-25 | unknown |
| 2025-09-04 | CVE-2025-48543 | Android · Runtime | Android Runtime Use-After-Free Vulnerability | 8.8 High | 2025-09-25 | unknown |
| 2025-09-04 | CVE-2025-38352 | Linux · Kernel | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | 7.8 High | 2025-09-25 | unknown |
| 2025-09-03 | CVE-2025-9377 | TP-Link · Multiple Routers | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | 8.6 High | 2025-09-24 | unknown |
| 2025-09-03 | CVE-2023-50224 | TP-Link · TL-WR841N | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | 6.5 Medium | 2025-09-24 | unknown |
| 2025-09-02 | CVE-2025-55177 | Meta Platforms · WhatsApp | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | 5.4 Medium | 2025-09-23 | unknown |
| 2025-09-02 | CVE-2020-24363 | TP-Link · TL-WA855RE | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | 8.8 High | 2025-09-23 | unknown |
| 2025-08-29 | CVE-2025-57819 | Sangoma · FreePBX | Sangoma FreePBX Authentication Bypass Vulnerability | 10.0 Critical | 2025-09-19 | unknown |
| 2025-08-26 | CVE-2025-7775 | Citrix · NetScaler | Citrix NetScaler Memory Overflow Vulnerability | 9.2 Critical | 2025-08-28 | unknown |
| 2025-08-25 | CVE-2025-48384 | Git · Git | Git Link Following Vulnerability | 8.1 High | 2025-09-15 | unknown |
| 2025-08-25 | CVE-2024-8069 | Citrix · Session Recording | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | 5.1 Medium | 2025-09-15 | unknown |
| 2025-08-25 | CVE-2024-8068 | Citrix · Session Recording | Citrix Session Recording Improper Privilege Management Vulnerability | 5.1 Medium | 2025-09-15 | unknown |
| 2025-08-21 | CVE-2025-43300 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 10.0 Critical | 2025-09-11 | unknown |
| 2025-08-18 | CVE-2025-54948 | Trend Micro · Apex One | Trend Micro Apex One OS Command Injection Vulnerability | 9.4 Critical | 2025-09-08 | unknown |
| 2025-08-13 | CVE-2025-8876 | N-able · N-Central | N-able N-Central Command Injection Vulnerability | 9.4 Critical | 2025-08-20 | unknown |
| 2025-08-13 | CVE-2025-8875 | N-able · N-Central | N-able N-Central Insecure Deserialization Vulnerability | 9.4 Critical | 2025-08-20 | unknown |
| 2025-08-12 | CVE-2025-8088 | RARLAB · WinRAR | RARLAB WinRAR Path Traversal Vulnerability | 8.4 High | 2025-09-02 | known |
| 2025-08-12 | CVE-2013-3893 | Microsoft · Internet Explorer | Microsoft Internet Explorer Resource Management Errors Vulnerability | 8.8 High | 2025-09-02 | unknown |
| 2025-08-12 | CVE-2007-0671 | Microsoft · Office | Microsoft Office Excel Remote Code Execution Vulnerability | 8.8 High | 2025-09-02 | unknown |
| 2025-08-05 | CVE-2022-40799 | D-Link · DNR-322L | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | 8.8 High | 2025-08-26 | unknown |
| 2025-08-05 | CVE-2020-25079 | D-Link · DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | 8.8 High | 2025-08-26 | unknown |
| 2025-08-05 | CVE-2020-25078 | D-Link · DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | 7.5 High | 2025-08-26 | unknown |
| 2025-07-28 | CVE-2025-20337 | Cisco · Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | 10.0 Critical | 2025-08-18 | unknown |
| 2025-07-28 | CVE-2025-20281 | Cisco · Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | 10.0 Critical | 2025-08-18 | unknown |
| 2025-07-28 | CVE-2023-2533 | PaperCut · NG/MF | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | 8.4 High | 2025-08-18 | unknown |
| 2025-07-22 | CVE-2025-6558 | Google · Chromium | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | 8.8 High | 2025-08-12 | unknown |
| 2025-07-22 | CVE-2025-54309 | CrushFTP · CrushFTP | CrushFTP Unprotected Alternate Channel Vulnerability | 9.0 Critical | 2025-08-12 | unknown |
| 2025-07-22 | CVE-2025-49706 | Microsoft · SharePoint | Microsoft SharePoint Improper Authentication Vulnerability | 6.5 Medium | 2025-07-23 | known |
| 2025-07-22 | CVE-2025-49704 | Microsoft · SharePoint | Microsoft SharePoint Code Injection Vulnerability | 8.8 High | 2025-07-23 | known |
| 2025-07-22 | CVE-2025-2776 | SysAid · SysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 9.3 Critical | 2025-08-12 | unknown |
| 2025-07-22 | CVE-2025-2775 | SysAid · SysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | 9.3 Critical | 2025-08-12 | unknown |
| 2025-07-20 | CVE-2025-53770 | Microsoft · SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 9.8 Critical | 2025-07-21 | known |
| 2025-07-18 | CVE-2025-25257 | Fortinet · FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | 9.6 Critical | 2025-08-08 | unknown |
| 2025-07-14 | CVE-2025-47812 | Wing FTP Server · Wing FTP Server | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | 10.0 Critical | 2025-08-04 | unknown |
Source: CISA Known Exploited Vulnerabilities Catalog (cisa.gov). Due dates are the remediation deadlines CISA sets for US federal civilian agencies.