Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2026-111357 | Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated… | Ivanti / Connect Secure | Oct 30, 2026 | — | View → |
| CVE-2026-118527 | Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated… | Ivanti / Connect Secure | Oct 30, 2026 | — | View → |
| CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference… | Cisco / Secure Firewall ASA Software and Cisco Secure FTD Software | Oct 29, 2026 | — | View → |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated… | GitLab / Community Edition and Enterprise Edition | Oct 29, 2026 | — | View → |
| CVE-2026-41709 | Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain… | Broadcom / VMware ESX | Oct 28, 2026 | — | View → |
| CVE-2026-46300 | Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of… | Linux / Kernel | Oct 28, 2026 | — | View → |
| CVE-2026-111497 | Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder… | Google / Brotli | Oct 27, 2026 | — | View → |
| CVE-2026-48356 | Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code… | Adobe / Commerce and Magento | Oct 27, 2026 | — | View → |
| CVE-2026-109618 | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution. | PHP Group / PHP | Oct 26, 2026 | — | View → |
| CVE-2026-109619 | PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution. | PHP Group / PHP | Oct 26, 2026 | — | View → |
| CVE-2026-110447 | Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability… | Collabora / Collabora Online – Built-in CODE Server | Oct 23, 2026 | — | View → |
| CVE-2026-114625 | Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged… | Arista / VeloCloud Orchestrator | Oct 23, 2026 | — | View → |
| CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute… | EG Secure Solutions / SiteGuard Server Edition | Oct 20, 2026 | — | View → |
| CVE-2026-110936 | Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to… | Siemens / Software Center | Oct 20, 2026 | — | View → |
| CVE-2026-96652 | Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value… | Plex / Media Server | Oct 20, 2026 | — | View → |
| CVE-2026-96654 | Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to… | Plex / Media Server | Oct 20, 2026 | — | View → |
| CVE-2026-96655 | Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary… | Plex / Media Server | Oct 20, 2026 | — | View → |
| CVE-2026-96656 | Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files… | Plex / Media Server | Oct 20, 2026 | — | View → |
| CVE-2025-61624 | FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with… | Fortinet / Multiple Products | Oct 16, 2026 | — | View → |
| CVE-2026-102764 | BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file… | BeyondTrust / Remote Support | Oct 16, 2026 | — | View → |
1–20 of 1766
PrevNext