Known Exploited Vulnerabilities
The CISA catalogue of vulnerabilities with evidence of exploitation in the wild, newest additions first. Catalogue version 2026.11.10, released 2026-11-10 19:03 UTC.
1,779 entries
| Added | CVE | Vendor · product | Name | CVSS | Due | Ransomware |
|---|---|---|---|---|---|---|
| 2025-07-10 | CVE-2025-5777 | Citrix · NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | 9.3 Critical | 2025-07-11 | known |
| 2025-07-07 | CVE-2019-9621 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | 7.5 High | 2025-07-28 | unknown |
| 2025-07-07 | CVE-2019-5418 | Rails · Ruby on Rails | Rails Ruby on Rails Path Traversal Vulnerability | 7.5 High | 2025-07-28 | unknown |
| 2025-07-07 | CVE-2016-10033 | PHP · PHPMailer | PHPMailer Command Injection Vulnerability | 9.8 Critical | 2025-07-28 | unknown |
| 2025-07-07 | CVE-2014-3931 | Looking Glass · Multi-Router Looking Glass (MRLG) | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability | 9.8 Critical | 2025-07-28 | unknown |
| 2025-07-02 | CVE-2025-6554 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 8.1 High | 2025-07-23 | unknown |
| 2025-07-01 | CVE-2025-48928 | TeleMessage · TM SGNL | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability | 4.0 Medium | 2025-07-22 | unknown |
| 2025-07-01 | CVE-2025-48927 | TeleMessage · TM SGNL | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | 5.3 Medium | 2025-07-22 | unknown |
| 2025-06-30 | CVE-2025-6543 | Citrix · NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | 9.2 Critical | 2025-07-21 | unknown |
| 2025-06-25 | CVE-2024-54085 | AMI · MegaRAC SPx | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability | 10.0 Critical | 2025-07-16 | unknown |
| 2025-06-25 | CVE-2024-0769 | D-Link · DIR-859 Router | D-Link DIR-859 Router Path Traversal Vulnerability | 5.3 Medium | 2025-07-16 | unknown |
| 2025-06-25 | CVE-2019-6693 | Fortinet · FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | 6.5 Medium | 2025-07-16 | known |
| 2025-06-17 | CVE-2023-0386 | Linux · Kernel | Linux Kernel Improper Ownership Management Vulnerability | 7.8 High | 2025-07-08 | unknown |
| 2025-06-16 | CVE-2025-43200 | Apple · Multiple Products | Apple Multiple Products Unspecified Vulnerability | 4.2 Medium | 2025-07-07 | unknown |
| 2025-06-16 | CVE-2023-33538 | TP-Link · Multiple Routers | TP-Link Multiple Routers Command Injection Vulnerability | 8.8 High | 2025-07-07 | unknown |
| 2025-06-10 | CVE-2025-33053 | Microsoft · Windows | Microsoft Windows External Control of File Name or Path Vulnerability | 8.8 High | 2025-07-01 | unknown |
| 2025-06-10 | CVE-2025-24016 | Wazuh · Wazuh Server | Wazuh Server Deserialization of Untrusted Data Vulnerability | 9.9 Critical | 2025-07-01 | unknown |
| 2025-06-09 | CVE-2025-32433 | Erlang · Erlang/OTP | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability | 10.0 Critical | 2025-06-30 | unknown |
| 2025-06-09 | CVE-2024-42009 | Roundcube · Webmail | RoundCube Webmail Cross-Site Scripting Vulnerability | 9.3 Critical | 2025-06-30 | unknown |
| 2025-06-05 | CVE-2025-5419 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 8.8 High | 2025-06-26 | unknown |
| 2025-06-03 | CVE-2025-27038 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.5 High | 2025-06-24 | unknown |
| 2025-06-03 | CVE-2025-21480 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 8.6 High | 2025-06-24 | unknown |
| 2025-06-03 | CVE-2025-21479 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 8.6 High | 2025-06-24 | unknown |
| 2025-06-02 | CVE-2025-3935 | ConnectWise · ScreenConnect | ConnectWise ScreenConnect Improper Authentication Vulnerability | 8.1 High | 2025-06-23 | unknown |
| 2025-06-02 | CVE-2025-35939 | Craft CMS · Craft CMS | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | 6.9 Medium | 2025-06-23 | unknown |
| 2025-06-02 | CVE-2024-56145 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | 9.3 Critical | 2025-06-23 | unknown |
| 2025-06-02 | CVE-2023-39780 | ASUS · RT-AX55 Routers | ASUS RT-AX55 Routers OS Command Injection Vulnerability | 8.8 High | 2025-06-23 | unknown |
| 2025-06-02 | CVE-2021-32030 | ASUS · Routers | ASUS Routers Improper Authentication Vulnerability | 9.8 Critical | 2025-06-23 | unknown |
| 2025-05-22 | CVE-2025-4632 | Samsung · MagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 9.8 Critical | 2025-06-12 | unknown |
| 2025-05-19 | CVE-2025-4428 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 7.2 High | 2025-06-09 | unknown |
| 2025-05-19 | CVE-2025-4427 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | 5.3 Medium | 2025-06-09 | unknown |
| 2025-05-19 | CVE-2025-27920 | Srimax · Output Messenger | Srimax Output Messenger Directory Traversal Vulnerability | 7.2 High | 2025-06-09 | unknown |
| 2025-05-19 | CVE-2024-27443 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 Medium | 2025-06-09 | unknown |
| 2025-05-19 | CVE-2024-11182 | MDaemon · Email Server | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | 5.3 Medium | 2025-06-09 | unknown |
| 2025-05-19 | CVE-2023-38950 | ZKTeco · BioTime | ZKTeco BioTime Path Traversal Vulnerability | 7.5 High | 2025-06-09 | unknown |
| 2025-05-15 | CVE-2025-42999 | SAP · NetWeaver | SAP NetWeaver Deserialization Vulnerability | 9.1 Critical | 2025-06-05 | known |
| 2025-05-15 | CVE-2024-12987 | DrayTek · Vigor Routers | DrayTek Vigor Routers OS Command Injection Vulnerability | 6.9 Medium | 2025-06-05 | unknown |
| 2025-05-14 | CVE-2025-32756 | Fortinet · Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 9.6 Critical | 2025-06-04 | unknown |
| 2025-05-13 | CVE-2025-32709 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 7.8 High | 2025-06-03 | unknown |
| 2025-05-13 | CVE-2025-32706 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 7.8 High | 2025-06-03 | unknown |
| 2025-05-13 | CVE-2025-32701 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 7.8 High | 2025-06-03 | unknown |
| 2025-05-13 | CVE-2025-30400 | Microsoft · Windows | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | 7.8 High | 2025-06-03 | unknown |
| 2025-05-13 | CVE-2025-30397 | Microsoft · Windows | Microsoft Windows Scripting Engine Type Confusion Vulnerability | 7.5 High | 2025-06-03 | unknown |
| 2025-05-12 | CVE-2025-47729 | TeleMessage · TM SGNL | TeleMessage TM SGNL Hidden Functionality Vulnerability | 1.9 Low | 2025-06-02 | unknown |
| 2025-05-07 | CVE-2024-6047 | GeoVision · Multiple Devices | GeoVision Devices OS Command Injection Vulnerability | 9.8 Critical | 2025-05-28 | unknown |
| 2025-05-07 | CVE-2024-11120 | GeoVision · Multiple Devices | GeoVision Devices OS Command Injection Vulnerability | 9.8 Critical | 2025-05-28 | unknown |
| 2025-05-06 | CVE-2025-27363 | FreeType · FreeType | FreeType Out-of-Bounds Write Vulnerability | 8.1 High | 2025-05-27 | unknown |
| 2025-05-05 | CVE-2025-3248 | Langflow · Langflow | Langflow Missing Authentication Vulnerability | 9.8 Critical | 2025-05-26 | known |
| 2025-05-02 | CVE-2025-34028 | Commvault · Command Center | Commvault Command Center Path Traversal Vulnerability | 9.3 Critical | 2025-05-23 | unknown |
| 2025-05-02 | CVE-2024-58136 | Yiiframework · Yii | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | 9.0 Critical | 2025-05-23 | unknown |
| 2025-05-01 | CVE-2024-38475 | Apache · HTTP Server | Apache HTTP Server Improper Escaping of Output Vulnerability | 9.1 Critical | 2025-05-22 | unknown |
| 2025-05-01 | CVE-2023-44221 | SonicWall · SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 7.2 High | 2025-05-22 | unknown |
| 2025-04-29 | CVE-2025-31324 | SAP · NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | 10.0 Critical | 2025-05-20 | known |
| 2025-04-28 | CVE-2025-42599 | Qualitia · Active! Mail | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | 9.8 Critical | 2025-05-19 | unknown |
| 2025-04-28 | CVE-2025-3928 | Commvault · Web Server | Commvault Web Server Unspecified Vulnerability | 8.7 High | 2025-05-19 | unknown |
| 2025-04-28 | CVE-2025-1976 | Broadcom · Brocade Fabric OS | Broadcom Brocade Fabric OS Code Injection Vulnerability | 8.6 High | 2025-05-19 | unknown |
| 2025-04-17 | CVE-2025-31201 | Apple · Multiple Products | Apple Multiple Products Arbitrary Read and Write Vulnerability | 9.8 Critical | 2025-05-08 | unknown |
| 2025-04-17 | CVE-2025-31200 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 9.8 Critical | 2025-05-08 | unknown |
| 2025-04-17 | CVE-2025-24054 | Microsoft · Windows | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | 6.5 Medium | 2025-05-08 | unknown |
| 2025-04-16 | CVE-2021-20035 | SonicWall · SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 6.5 Medium | 2025-05-07 | unknown |
| 2025-04-09 | CVE-2024-53197 | Linux · Kernel | Linux Kernel Out-of-Bounds Access Vulnerability | 7.8 High | 2025-04-30 | unknown |
| 2025-04-09 | CVE-2024-53150 | Linux · Kernel | Linux Kernel Out-of-Bounds Read Vulnerability | 7.1 High | 2025-04-30 | unknown |
| 2025-04-08 | CVE-2025-30406 | Gladinet · CentreStack | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | 9.0 Critical | 2025-04-29 | unknown |
| 2025-04-08 | CVE-2025-29824 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | 7.8 High | 2025-04-29 | known |
| 2025-04-07 | CVE-2025-31161 | CrushFTP · CrushFTP | CrushFTP Authentication Bypass Vulnerability | 9.8 Critical | 2025-04-28 | known |
| 2025-04-04 | CVE-2025-22457 | Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 9.0 Critical | 2025-04-11 | known |
| 2025-04-01 | CVE-2025-24813 | Apache · Tomcat | Apache Tomcat Path Equivalence Vulnerability | 10.0 Critical | 2025-04-22 | unknown |
| 2025-03-31 | CVE-2024-20439 | Cisco · Smart Licensing Utility | Cisco Smart Licensing Utility Static Credential Vulnerability | 9.8 Critical | 2025-04-21 | unknown |
| 2025-03-27 | CVE-2025-2783 | Google · Chromium Mojo | Google Chromium Mojo Sandbox Escape Vulnerability | 8.3 High | 2025-04-17 | unknown |
| 2025-03-26 | CVE-2019-9875 | Sitecore · CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 8.8 High | 2025-04-16 | unknown |
| 2025-03-26 | CVE-2019-9874 | Sitecore · CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 9.8 Critical | 2025-04-16 | unknown |
| 2025-03-24 | CVE-2025-30154 | reviewdog · action-setup GitHub Action | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | 8.6 High | 2025-04-14 | unknown |
| 2025-03-19 | CVE-2025-1316 | Edimax · IC-7100 IP Camera | Edimax IC-7100 IP Camera OS Command Injection Vulnerability | 9.3 Critical | 2025-04-09 | unknown |
| 2025-03-19 | CVE-2024-48248 | NAKIVO · Backup and Replication | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | 8.6 High | 2025-04-09 | unknown |
| 2025-03-19 | CVE-2017-12637 | SAP · NetWeaver | SAP NetWeaver Directory Traversal Vulnerability | 7.5 High | 2025-04-09 | unknown |
| 2025-03-18 | CVE-2025-30066 | tj-actions · changed-files GitHub Action | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | 8.6 High | 2025-04-08 | unknown |
| 2025-03-18 | CVE-2025-24472 | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 8.1 High | 2025-04-08 | known |
| 2025-03-13 | CVE-2025-24201 | Apple · Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | 10.0 Critical | 2025-04-03 | unknown |
| 2025-03-13 | CVE-2025-21590 | Juniper · Junos OS | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability | 6.7 Medium | 2025-04-03 | unknown |
| 2025-03-11 | CVE-2025-26633 | Microsoft · Windows | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | 7.0 High | 2025-04-01 | known |
| 2025-03-11 | CVE-2025-24993 | Microsoft · Windows | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | 7.8 High | 2025-04-01 | unknown |
| 2025-03-11 | CVE-2025-24991 | Microsoft · Windows | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | 5.5 Medium | 2025-04-01 | unknown |
| 2025-03-11 | CVE-2025-24985 | Microsoft · Windows | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | 7.8 High | 2025-04-01 | unknown |
| 2025-03-11 | CVE-2025-24984 | Microsoft · Windows | Microsoft Windows NTFS Information Disclosure Vulnerability | 4.6 Medium | 2025-04-01 | unknown |
| 2025-03-11 | CVE-2025-24983 | Microsoft · Windows | Microsoft Windows Win32k Use-After-Free Vulnerability | 7.0 High | 2025-04-01 | unknown |
| 2025-03-10 | CVE-2025-25181 | Advantive · VeraCore | Advantive VeraCore SQL Injection Vulnerability | 5.8 Medium | 2025-03-31 | unknown |
| 2025-03-10 | CVE-2024-57968 | Advantive · VeraCore | Advantive VeraCore Unrestricted File Upload Vulnerability | 9.9 Critical | 2025-03-31 | unknown |
| 2025-03-10 | CVE-2024-13161 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 9.8 Critical | 2025-03-31 | unknown |
| 2025-03-10 | CVE-2024-13160 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 9.8 Critical | 2025-03-31 | unknown |
| 2025-03-10 | CVE-2024-13159 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 9.8 Critical | 2025-03-31 | unknown |
| 2025-03-04 | CVE-2025-22226 | VMware · ESXi, Workstation, and Fusion | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | 7.1 High | 2025-03-25 | unknown |
| 2025-03-04 | CVE-2025-22225 | VMware · ESXi | VMware ESXi Arbitrary Write Vulnerability | 8.2 High | 2025-03-25 | known |
| 2025-03-04 | CVE-2025-22224 | VMware · ESXi and Workstation | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | 9.3 Critical | 2025-03-25 | unknown |
| 2025-03-04 | CVE-2024-50302 | Linux · Kernel | Linux Kernel Use of Uninitialized Resource Vulnerability | 5.5 Medium | 2025-03-25 | unknown |
| 2025-03-03 | CVE-2024-4885 | Progress · WhatsUp Gold | Progress WhatsUp Gold Path Traversal Vulnerability | 9.8 Critical | 2025-03-24 | unknown |
| 2025-03-03 | CVE-2023-20118 | Cisco · Small Business RV Series Routers | Cisco Small Business RV Series Routers Command Injection Vulnerability | 6.5 Medium | 2025-03-24 | unknown |
| 2025-03-03 | CVE-2022-43939 | Hitachi Vantara · Pentaho Business Analytics (BA) Server | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | 8.6 High | 2025-03-24 | unknown |
| 2025-03-03 | CVE-2022-43769 | Hitachi Vantara · Pentaho Business Analytics (BA) Server | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | 8.8 High | 2025-03-24 | unknown |
| 2025-03-03 | CVE-2018-8639 | Microsoft · Windows | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | 8.4 High | 2025-03-24 | known |
| 2025-02-25 | CVE-2024-49035 | Microsoft · Partner Center | Microsoft Partner Center Improper Access Control Vulnerability | 8.7 High | 2025-03-18 | unknown |
Source: CISA Known Exploited Vulnerabilities Catalog (cisa.gov). Due dates are the remediation deadlines CISA sets for US federal civilian agencies.