Known Exploited Vulnerabilities
The CISA catalogue of vulnerabilities with evidence of exploitation in the wild, newest additions first. Catalogue version 2026.11.10, released 2026-11-10 19:03 UTC.
1,779 entries
| Added | CVE | Vendor · product | Name | CVSS | Due | Ransomware |
|---|---|---|---|---|---|---|
| 2025-02-25 | CVE-2023-34192 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 9.0 Critical | 2025-03-18 | unknown |
| 2025-02-24 | CVE-2024-20953 | Oracle · Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | 8.8 High | 2025-03-17 | unknown |
| 2025-02-24 | CVE-2017-3066 | Adobe · ColdFusion | Adobe ColdFusion Deserialization Vulnerability | 9.8 Critical | 2025-03-17 | unknown |
| 2025-02-21 | CVE-2025-24989 | Microsoft · Power Pages | Microsoft Power Pages Improper Access Control Vulnerability | 8.2 High | 2025-03-14 | unknown |
| 2025-02-20 | CVE-2025-23209 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | 8.1 High | 2025-03-13 | unknown |
| 2025-02-20 | CVE-2025-0111 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS File Read Vulnerability | 7.1 High | 2025-03-13 | unknown |
| 2025-02-18 | CVE-2025-0108 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 8.8 High | 2025-03-11 | unknown |
| 2025-02-18 | CVE-2024-53704 | SonicWall · SonicOS | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | 8.2 High | 2025-03-11 | known |
| 2025-02-13 | CVE-2024-57727 | SimpleHelp · SimpleHelp | SimpleHelp Path Traversal Vulnerability | 9.1 Critical | 2025-03-06 | known |
| 2025-02-12 | CVE-2025-24200 | Apple · iOS and iPadOS | Apple iOS and iPadOS Incorrect Authorization Vulnerability | 6.1 Medium | 2025-03-05 | unknown |
| 2025-02-12 | CVE-2024-41710 | Mitel · SIP Phones | Mitel SIP Phones Argument Injection Vulnerability | 6.8 Medium | 2025-03-05 | unknown |
| 2025-02-11 | CVE-2025-21418 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | 7.8 High | 2025-03-04 | unknown |
| 2025-02-11 | CVE-2025-21391 | Microsoft · Windows | Microsoft Windows Storage Link Following Vulnerability | 7.1 High | 2025-03-04 | unknown |
| 2025-02-11 | CVE-2024-40891 | Zyxel · DSL CPE Devices | Zyxel DSL CPE OS Command Injection Vulnerability | 8.8 High | 2025-03-04 | unknown |
| 2025-02-11 | CVE-2024-40890 | Zyxel · DSL CPE Devices | Zyxel DSL CPE OS Command Injection Vulnerability | 8.8 High | 2025-03-04 | unknown |
| 2025-02-07 | CVE-2025-0994 | Trimble · Cityworks | Trimble Cityworks Deserialization Vulnerability | 8.6 High | 2025-02-28 | unknown |
| 2025-02-06 | CVE-2025-0411 | 7-Zip · 7-Zip | 7-Zip Mark of the Web Bypass Vulnerability | 7.0 High | 2025-02-27 | unknown |
| 2025-02-06 | CVE-2024-21413 | Microsoft · Office Outlook | Microsoft Outlook Improper Input Validation Vulnerability | 9.8 Critical | 2025-02-27 | unknown |
| 2025-02-06 | CVE-2022-23748 | Audinate · Dante Discovery | Dante Discovery Process Control Vulnerability | 7.8 High | 2025-02-27 | unknown |
| 2025-02-06 | CVE-2020-29574 | Sophos · CyberoamOS | CyberoamOS (CROS) SQL Injection Vulnerability | 9.8 Critical | 2025-02-27 | known |
| 2025-02-06 | CVE-2020-15069 | Sophos · XG Firewall | Sophos XG Firewall Buffer Overflow Vulnerability | 9.8 Critical | 2025-02-27 | unknown |
| 2025-02-05 | CVE-2024-53104 | Linux · Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | 7.8 High | 2025-02-26 | unknown |
| 2025-02-04 | CVE-2024-45195 | Apache · OFBiz | Apache OFBiz Forced Browsing Vulnerability | 9.8 Critical | 2025-02-25 | unknown |
| 2025-02-04 | CVE-2024-29059 | Microsoft · .NET Framework | Microsoft .NET Framework Information Disclosure Vulnerability | 7.5 High | 2025-02-25 | unknown |
| 2025-02-04 | CVE-2018-9276 | Paessler · PRTG Network Monitor | Paessler PRTG Network Monitor OS Command Injection Vulnerability | 7.2 High | 2025-02-25 | unknown |
| 2025-02-04 | CVE-2018-19410 | Paessler · PRTG Network Monitor | Paessler PRTG Network Monitor Local File Inclusion Vulnerability | 9.8 Critical | 2025-02-25 | unknown |
| 2025-01-29 | CVE-2025-24085 | Apple · Multiple Products | Apple Multiple Products Use-After-Free Vulnerability | 10.0 Critical | 2025-02-19 | unknown |
| 2025-01-24 | CVE-2025-23006 | SonicWall · SMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization Vulnerability | 9.8 Critical | 2025-02-14 | known |
| 2025-01-23 | CVE-2020-11023 | JQuery · JQuery | JQuery Cross-Site Scripting (XSS) Vulnerability | 6.9 Medium | 2025-02-13 | unknown |
| 2025-01-16 | CVE-2024-50603 | Aviatrix · Controllers | Aviatrix Controllers OS Command Injection Vulnerability | 10.0 Critical | 2025-02-06 | unknown |
| 2025-01-14 | CVE-2025-21335 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 7.8 High | 2025-02-04 | unknown |
| 2025-01-14 | CVE-2025-21334 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 7.8 High | 2025-02-04 | unknown |
| 2025-01-14 | CVE-2025-21333 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | 7.8 High | 2025-02-04 | unknown |
| 2025-01-14 | CVE-2024-55591 | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 9.6 Critical | 2025-01-21 | known |
| 2025-01-13 | CVE-2024-12686 | BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability | 6.6 Medium | 2025-02-03 | unknown |
| 2025-01-13 | CVE-2023-48365 | Qlik · Sense | Qlik Sense HTTP Tunneling Vulnerability | 9.6 Critical | 2025-02-03 | known |
| 2025-01-08 | CVE-2025-0282 | Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 9.0 Critical | 2025-01-15 | known |
| 2025-01-07 | CVE-2024-55550 | Mitel · MiCollab | Mitel MiCollab Path Traversal Vulnerability | 4.4 Medium | 2025-01-28 | known |
| 2025-01-07 | CVE-2024-41713 | Mitel · MiCollab | Mitel MiCollab Path Traversal Vulnerability | 9.1 Critical | 2025-01-28 | known |
| 2025-01-07 | CVE-2020-2883 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | 9.8 Critical | 2025-01-28 | unknown |
| 2024-12-30 | CVE-2024-3393 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | 8.7 High | 2025-01-20 | unknown |
| 2024-12-23 | CVE-2021-44207 | Acclaim Systems · USAHERDS | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | 8.1 High | 2025-01-13 | unknown |
| 2024-12-19 | CVE-2024-12356 | BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | 9.8 Critical | 2024-12-27 | unknown |
| 2024-12-18 | CVE-2022-23227 | NUUO · NVRmini2 Devices | NUUO NVRmini2 Devices Missing Authentication Vulnerability | 9.8 Critical | 2025-01-08 | unknown |
| 2024-12-18 | CVE-2021-40407 | Reolink · RLC-410W IP Camera | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | 9.1 Critical | 2025-01-08 | unknown |
| 2024-12-18 | CVE-2019-11001 | Reolink · Multiple IP Cameras | Reolink Multiple IP Cameras OS Command Injection Vulnerability | 7.2 High | 2025-01-08 | unknown |
| 2024-12-18 | CVE-2018-14933 | NUUO · NVRmini Devices | NUUO NVRmini Devices OS Command Injection Vulnerability | 9.8 Critical | 2025-01-08 | unknown |
| 2024-12-17 | CVE-2024-55956 | Cleo · Multiple Products | Cleo Multiple Products Unauthenticated File Upload Vulnerability | 9.8 Critical | 2025-01-07 | known |
| 2024-12-16 | CVE-2024-35250 | Microsoft · Windows | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | 7.8 High | 2025-01-06 | unknown |
| 2024-12-16 | CVE-2024-20767 | Adobe · ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | 7.4 High | 2025-01-06 | unknown |
| 2024-12-13 | CVE-2024-50623 | Cleo · Multiple Products | Cleo Multiple Products Unrestricted File Upload Vulnerability | 9.8 Critical | 2025-01-03 | known |
| 2024-12-10 | CVE-2024-49138 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | 7.8 High | 2024-12-31 | unknown |
| 2024-12-04 | CVE-2024-51378 | CyberPersons · CyberPanel | CyberPanel Incorrect Default Permissions Vulnerability | 10.0 Critical | 2024-12-25 | known |
| 2024-12-03 | CVE-2024-11680 | ProjectSend · ProjectSend | ProjectSend Improper Authentication Vulnerability | 9.8 Critical | 2024-12-24 | unknown |
| 2024-12-03 | CVE-2024-11667 | Zyxel · Multiple Firewalls | Zyxel Multiple Firewalls Path Traversal Vulnerability | 7.5 High | 2024-12-24 | known |
| 2024-12-03 | CVE-2023-45727 | North Grid · Proself | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability | 7.5 High | 2024-12-24 | unknown |
| 2024-11-25 | CVE-2023-28461 | Array Networks · AG/vxAG ArrayOS | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability | 9.8 Critical | 2024-12-16 | known |
| 2024-11-21 | CVE-2024-44309 | Apple · Multiple Products | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | 6.3 Medium | 2024-12-12 | unknown |
| 2024-11-21 | CVE-2024-44308 | Apple · Multiple Products | Apple Multiple Products Code Execution Vulnerability | 8.8 High | 2024-12-12 | unknown |
| 2024-11-21 | CVE-2024-21287 | Oracle · Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | 7.5 High | 2024-12-12 | unknown |
| 2024-11-20 | CVE-2024-38813 | VMware · vCenter Server | VMware vCenter Server Privilege Escalation Vulnerability | 7.5 High | 2024-12-11 | unknown |
| 2024-11-20 | CVE-2024-38812 | VMware · vCenter Server | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability | 9.8 Critical | 2024-12-11 | unknown |
| 2024-11-18 | CVE-2024-9474 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | 6.9 Medium | 2024-12-09 | known |
| 2024-11-18 | CVE-2024-1212 | Progress · Kemp LoadMaster | Progress Kemp LoadMaster OS Command Injection Vulnerability | 10.0 Critical | 2024-12-09 | unknown |
| 2024-11-18 | CVE-2024-0012 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability | 9.3 Critical | 2024-12-09 | known |
| 2024-11-14 | CVE-2024-9465 | Palo Alto Networks · Expedition | Palo Alto Networks Expedition SQL Injection Vulnerability | 9.2 Critical | 2024-12-05 | unknown |
| 2024-11-14 | CVE-2024-9463 | Palo Alto Networks · Expedition | Palo Alto Networks Expedition OS Command Injection Vulnerability | 9.9 Critical | 2024-12-05 | unknown |
| 2024-11-12 | CVE-2024-49039 | Microsoft · Windows | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 8.8 High | 2024-12-03 | known |
| 2024-11-12 | CVE-2024-43451 | Microsoft · Windows | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | 6.5 Medium | 2024-12-03 | unknown |
| 2024-11-12 | CVE-2021-41277 | Metabase · Metabase | Metabase GeoJSON API Local File Inclusion Vulnerability | 10.0 Critical | 2024-12-03 | unknown |
| 2024-11-12 | CVE-2021-26086 | Atlassian · Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | 5.3 Medium | 2024-12-03 | unknown |
| 2024-11-12 | CVE-2014-2120 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability | 5.4 Medium | 2024-12-03 | unknown |
| 2024-11-07 | CVE-2024-5910 | Palo Alto Networks · Expedition | Palo Alto Networks Expedition Missing Authentication Vulnerability | 9.3 Critical | 2024-11-28 | unknown |
| 2024-11-07 | CVE-2024-51567 | CyberPersons · CyberPanel | CyberPanel Incorrect Default Permissions Vulnerability | 10.0 Critical | 2024-11-28 | known |
| 2024-11-07 | CVE-2024-43093 | Android · Framework | Android Framework Privilege Escalation Vulnerability | 7.3 High | 2024-11-28 | unknown |
| 2024-11-07 | CVE-2019-16278 | Nostromo · nhttpd | Nostromo nhttpd Directory Traversal Vulnerability | 9.8 Critical | 2024-11-28 | unknown |
| 2024-11-04 | CVE-2024-8957 | PTZOptics · PT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability | 7.2 High | 2024-11-25 | unknown |
| 2024-11-04 | CVE-2024-8956 | PTZOptics · PT30X-SDI/NDI Cameras | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability | 9.1 Critical | 2024-11-25 | unknown |
| 2024-10-24 | CVE-2024-37383 | Roundcube · Webmail | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.1 Medium | 2024-11-14 | unknown |
| 2024-10-24 | CVE-2024-20481 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial-of-Service Vulnerability | 5.8 Medium | 2024-11-14 | unknown |
| 2024-10-23 | CVE-2024-47575 | Fortinet · FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | 9.8 Critical | 2024-11-13 | unknown |
| 2024-10-22 | CVE-2024-38094 | Microsoft · SharePoint | Microsoft SharePoint Deserialization Vulnerability | 7.2 High | 2024-11-12 | known |
| 2024-10-21 | CVE-2024-9537 | ScienceLogic · SL1 | ScienceLogic SL1 Unspecified Vulnerability | 9.3 Critical | 2024-11-11 | unknown |
| 2024-10-17 | CVE-2024-40711 | Veeam · Backup & Replication | Veeam Backup and Replication Deserialization Vulnerability | 9.8 Critical | 2024-11-07 | known |
| 2024-10-15 | CVE-2024-9680 | Mozilla · Firefox | Mozilla Firefox Use-After-Free Vulnerability | 9.8 Critical | 2024-11-05 | known |
| 2024-10-15 | CVE-2024-30088 | Microsoft · Windows | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | 7.0 High | 2024-11-05 | known |
| 2024-10-15 | CVE-2024-28987 | SolarWinds · Web Help Desk | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | 9.1 Critical | 2024-11-05 | unknown |
| 2024-10-09 | CVE-2024-9380 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 7.2 High | 2024-10-30 | unknown |
| 2024-10-09 | CVE-2024-9379 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 6.5 Medium | 2024-10-30 | unknown |
| 2024-10-09 | CVE-2024-23113 | Fortinet · Multiple Products | Fortinet Multiple Products Format String Vulnerability | 9.8 Critical | 2024-10-30 | unknown |
| 2024-10-08 | CVE-2024-43573 | Microsoft · Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | 6.5 Medium | 2024-10-29 | unknown |
| 2024-10-08 | CVE-2024-43572 | Microsoft · Windows | Microsoft Windows Management Console Remote Code Execution Vulnerability | 7.8 High | 2024-10-29 | unknown |
| 2024-10-08 | CVE-2024-43047 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 High | 2024-10-29 | unknown |
| 2024-10-03 | CVE-2024-45519 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability | 10.0 Critical | 2024-10-24 | unknown |
| 2024-10-02 | CVE-2024-29824 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 9.6 Critical | 2024-10-23 | unknown |
| 2024-09-30 | CVE-2023-25280 | D-Link · DIR-820 Router | D-Link DIR-820 Router OS Command Injection Vulnerability | 9.8 Critical | 2024-10-21 | unknown |
| 2024-09-30 | CVE-2020-15415 | DrayTek · Multiple Vigor Routers | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | 9.8 Critical | 2024-10-21 | unknown |
| 2024-09-30 | CVE-2019-0344 | SAP · Commerce Cloud | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 9.8 Critical | 2024-10-21 | unknown |
| 2024-09-24 | CVE-2024-7593 | Ivanti · Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 9.8 Critical | 2024-10-15 | unknown |
| 2024-09-19 | CVE-2024-8963 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 9.4 Critical | 2024-10-10 | unknown |
Source: CISA Known Exploited Vulnerabilities Catalog (cisa.gov). Due dates are the remediation deadlines CISA sets for US federal civilian agencies.