CVE Tracker
Exploited now
CVEs that CISA has confirmed as exploited in the wild, newest additions first.
Source: the CISA Known Exploited Vulnerabilities (KEV) catalogue, with CVSS from NVD and EPSS from FIRST where available. Data last updated 17 Oct 2026. A blank cell means the data is not available. KEV due dates apply to US federal agencies.
1748 CVEs
| CVE | Vendor / product | CVSS | EPSS | Added to KEV | KEV due |
|---|---|---|---|---|---|
| CVE-2026-102764 | BeyondTrust Remote Support | 9.8 | 0.60% | 2026-10-16 | 2026-10-19 |
| CVE-2025-61624 | Fortinet Multiple Products | 6.5 | 0.58% | 2026-10-16 | 2026-10-19 |
| CVE-2026-21589 | Atlassian Multiple Products | 12.7% | 2026-10-15 | 2026-10-18 | |
| CVE-2026-76519 | Cisco Secure Email Gateway | 9.8 | 1.57% | 2026-10-14 | 2026-10-17 |
| CVE-2026-105134 | Ahsay AhsayCBS | 9.3 | 4.78% | 2026-10-14 | 2026-10-17 |
| CVE-2026-105133 | Ahsay AhsayCBS | 5.5 | 0.85% | 2026-10-14 | 2026-10-17 |
| CVE-2026-0322 | Palo Alto Networks PAN-OS | 7.2 | 1.21% | 2026-10-14 | 2026-10-17 |
| CVE-2026-96951 | Microsoft Windows | 8.8 | 1.51% | 2026-10-13 | 2026-10-16 |
| CVE-2026-104935 | Ivanti Connect Secure | 8.6 | 26.0% | 2026-10-13 | 2026-10-16 |
| CVE-2023-22894 | Strapi Strapi | 4.9 | 3.61% | 2026-10-08 | 2026-10-11 |
| CVE-2021-3199 | ONLYOFFICE Docs | 9.8 | 19.4% | 2026-10-08 | 2026-10-11 |
| CVE-2016-3081 | Apache Struts | 8.1 | 96.1% | 2026-10-08 | 2026-10-11 |
| CVE-2015-5477 | ISC BIND | 7.5 | 99.4% | 2026-10-08 | 2026-10-11 |
| CVE-2015-3306 | ProFTPD ProFTPD | 10.0 | 99.5% | 2026-10-08 | 2026-10-11 |
| CVE-2026-88779 | Citrix NetScaler | 7.5 | 0.59% | 2026-10-04 | 2026-10-07 |
| CVE-2026-102490 | Zammad GmbH Zammad | 7.8 | 0.55% | 2026-10-02 | 2026-10-05 |
| CVE-2026-102489 | Zammad GmbH Zammad | 9.8 | 1.26% | 2026-10-02 | 2026-10-05 |
| CVE-2026-104286 | Fortinet FortiMail | 9.8 | 2.20% | 2026-10-01 | 2026-10-04 |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | 9.8 | 1.82% | 2026-09-30 | 2026-10-03 |
| CVE-2026-86950 | Apple Multiple Products | 8.8 | 1.24% | 2026-09-29 | 2026-10-13 |
| CVE-2026-88772 | Citrix NetScaler | 8.1 | 1.30% | 2026-09-27 | 2026-09-30 |
| CVE-2026-88771 | Citrix NetScaler | 9.8 | 1.08% | 2026-09-27 | 2026-09-30 |
| CVE-2026-87902 | WordPress Core | 8.1 | 40.0% | 2026-09-25 | 2026-09-28 |
| CVE-2026-67279 | MikroTik RouterOS | 6.5 | 1.03% | 2026-09-25 | 2026-09-28 |
| CVE-2026-65660 | Microsoft SharePoint | 8.8 | 2.10% | 2026-09-25 | 2026-09-28 |
| CVE-2026-71362 | Adobe Commerce and Magento | 9.1 | 87.5% | 2026-09-24 | 2026-09-27 |
| CVE-2026-5430 | WSO2 Multiple Products | 10.0 | 0.59% | 2026-09-24 | 2026-09-27 |
| CVE-2026-94127 | F5 BIG-IP APM | 9.3 | 2.23% | 2026-09-22 | 2026-09-25 |
| CVE-2026-93952 | Arista VeloCloud Orchestrator | 9.5 | 1.06% | 2026-09-22 | 2026-09-25 |
| CVE-2026-93616 | Check Point Multiple Products | 9.8 | 75.9% | 2026-09-22 | 2026-09-25 |
| CVE-2026-85102 | Check Point Multiple Products | 9.8 | 50.4% | 2026-09-22 | 2026-09-25 |
| CVE-2026-7273 | Zyxel GS1900 Series Switches | 8.8 | 2.50% | 2026-09-21 | 2026-09-24 |
| CVE-2026-53266 | Linux Kernel | 8.8 | 0.83% | 2026-09-18 | 2026-09-21 |
| CVE-2025-39964 | Linux Kernel | 5.5 | 1.36% | 2026-09-18 | 2026-09-21 |
| CVE-2025-39682 | Linux Kernel | 9.8 | 2.88% | 2026-09-18 | 2026-09-21 |
| CVE-2026-87886 | Acronis Backup | 7.8 | 0.23% | 2026-09-16 | 2026-09-19 |
| CVE-2026-76460 | Cisco Identity Services Engine | 10.0 | 14.0% | 2026-09-16 | 2026-09-19 |
| CVE-2026-58704 | Google Pixel | 8.8 | 0.59% | 2026-09-16 | 2026-09-19 |
| CVE-2026-76461 | Cisco Secure Email Gateway | 9.8 | 29.5% | 2026-09-14 | 2026-09-17 |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | 10.0 | 93.0% | 2026-09-11 | 2026-09-14 |
| CVE-2026-84869 | ConnectWise ScreenConnect | 9.9 | 0.92% | 2026-09-11 | 2026-09-14 |
| CVE-2026-42018 | JFrog Artifactory | 7.5 | 9.80% | 2026-09-11 | 2026-09-25 |
| CVE-2026-42016 | JFrog Artifactory | 8.8 | 8.64% | 2026-09-11 | 2026-09-25 |
| CVE-2026-86060 | MikroTik RouterOS | 9.8 | 6.39% | 2026-09-10 | 2026-09-13 |
| CVE-2026-67277 | MikroTik RouterOS | 8.2 | 1.56% | 2026-09-10 | 2026-09-13 |
| CVE-2026-87491 | Google Chromium V8 | 8.8 | 3.14% | 2026-09-09 | 2026-09-23 |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 10.0 | 88.2% | 2026-09-09 | 2026-09-12 |
| CVE-2026-19490 | Citrix NetScaler | 9.8 | 23.2% | 2026-09-09 | 2026-09-12 |
| CVE-2025-25249 | Fortinet Multiple Products | 9.8 | 3.80% | 2026-09-09 | 2026-09-12 |
| CVE-2026-86218 | N-able N-central | 9.8 | 13.3% | 2026-09-08 | 2026-09-11 |
| CVE-2026-85880 | Microsoft Windows | 7.8 | 3.62% | 2026-09-08 | 2026-09-22 |
| CVE-2026-81963 | Microsoft Windows | 7.8 | 0.39% | 2026-09-08 | 2026-09-22 |
| CVE-2026-75650 | Adobe Commerce and Magento | 10.0 | 3.95% | 2026-09-08 | 2026-09-11 |
| CVE-2026-85046 | Google Chromium V8 | 8.8 | 48.9% | 2026-09-04 | 2026-09-18 |
| CVE-2026-9586 | Sangoma Switchvox | 9.8 | 19.0% | 2026-09-02 | 2026-09-05 |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 7.8 | 9.89% | 2026-09-02 | 2026-09-05 |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 10.0 | 8.04% | 2026-09-02 | 2026-09-05 |
| CVE-2026-82329 | JFrog Artifactory | 9.8 | 14.1% | 2026-09-02 | 2026-09-05 |
| CVE-2026-59822 | BerriAI LiteLLM | 8.2 | 0.84% | 2026-09-02 | 2026-09-16 |
| CVE-2026-49869 | Kestra Kestra OSS | 10.0 | 2.10% | 2026-09-02 | 2026-09-05 |
| CVE-2026-48710 | Kludex Starlette | 6.5 | 7.06% | 2026-09-02 | 2026-09-16 |
| CVE-2026-82078 | PaperCut NG/MF | 9.1 | 63.5% | 2026-08-31 | 2026-09-14 |
| CVE-2026-81578 | PaperCut NG/MF | 9.8 | 85.6% | 2026-08-31 | 2026-09-14 |
| CVE-2026-66384 | JFrog Artifactory | 5.3 | 0.66% | 2026-08-27 | 2026-09-10 |
| CVE-2026-53362 | Linux Kernel | 7.8 | 0.71% | 2026-08-27 | 2026-08-30 |
| CVE-2023-49105 | ownCloud ownCloud | 9.8 | 42.9% | 2026-08-27 | 2026-08-30 |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 9.8 | 1.01% | 2026-08-26 | 2026-08-29 |
| CVE-2022-0995 | Linux Kernel | 7.8 | 8.86% | 2026-08-26 | 2026-08-29 |
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professional | 9.8 | 82.6% | 2026-08-26 | 2026-09-09 |
| CVE-2019-1068 | Microsoft SQL Server | 8.8 | 57.3% | 2026-08-26 | 2026-08-29 |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | 7.8 | 5.00% | 2026-08-26 | 2026-09-09 |
| CVE-2015-3246 | Red Hat Libuser | 7.4 | 8.50% | 2026-08-26 | 2026-09-09 |
| CVE-2026-60004 | Gitea Gitea | 9.8 | 24.0% | 2026-08-25 | 2026-08-28 |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | 10.0 | 73.2% | 2026-08-24 | 2026-08-27 |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 8.9 | 71.7% | 2026-08-21 | 2026-08-24 |
| CVE-2026-72530 | TrueConf Server | 9.5 | 1.69% | 2026-08-20 | 2026-09-03 |
| CVE-2026-72529 | TrueConf Server | 9.3 | 1.46% | 2026-08-20 | 2026-08-23 |
| CVE-2026-64849 | MLflow MLflow | 9.3 | 9.84% | 2026-08-19 | 2026-09-02 |
| CVE-2026-65400 | Apple macOS | 9.8 | 1.72% | 2026-08-18 | 2026-08-21 |
| CVE-2026-59310ransomware | Broadcom VMware vCenter | 9.8 | 2.56% | 2026-08-18 | 2026-08-21 |
| CVE-2026-55040 | Microsoft SharePoint | 9.1 | 69.5% | 2026-08-18 | 2026-08-21 |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | 9.8 | 1.62% | 2026-08-18 | 2026-08-21 |
| CVE-2025-62593 | Ray-Project Ray | 8.8 | 62.5% | 2026-08-17 | 2026-08-20 |
| CVE-2026-72898 | Metabase Metabase | 10.0 | 97.3% | 2026-08-11 | 2026-08-14 |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | 7.0 | 0.33% | 2026-08-11 | 2026-08-25 |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 8.6 | 1.01% | 2026-08-11 | 2026-08-14 |
| CVE-2026-8037 | Progress LoadMaster | 9.8 | 77.4% | 2026-08-07 | 2026-08-10 |
| CVE-2026-63077ransomware | JetBrains TeamCity | 9.8 | 89.6% | 2026-08-05 | 2026-08-08 |
| CVE-2026-9198 | IBM Langflow | 9.8 | 28.7% | 2026-08-04 | 2026-08-07 |
| CVE-2026-34486 | Apache Tomcat | 7.5 | 6.56% | 2026-08-04 | 2026-08-07 |
| CVE-2026-18556 | N-able N-central | 7.4 | 7.88% | 2026-08-04 | 2026-08-07 |
| CVE-2026-18577 | N-able N-central | 8.1 | 14.6% | 2026-08-03 | 2026-08-06 |
| CVE-2026-20316ransomware | Cisco Secure Firewall Management Center (FMC) | 5.3 | 35.1% | 2026-07-29 | 2026-08-01 |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 10.0 | 1.00% | 2026-07-27 | 2026-07-30 |
| CVE-2025-68686 | Fortinet FortiOS | 5.9 | 29.5% | 2026-07-27 | 2026-08-10 |
| CVE-2026-50522 | Microsoft SharePoint | 9.8 | 3.04% | 2026-07-22 | 2026-07-25 |
| CVE-2026-16232 | Check Point SmartConsole | 9.8 | 78.0% | 2026-07-22 | 2026-07-25 |
| CVE-2026-63030 | WordPress Core | 9.8 | 10.6% | 2026-07-21 | 2026-07-24 |
| CVE-2026-60137 | WordPress Core | 5.9 | 5.32% | 2026-07-21 | 2026-08-04 |
| CVE-2026-0770 | Langflow Langflow | 63.0% | 2026-07-21 | 2026-07-24 |