Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2025-62593 | Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool… | Ray-Project / Ray | Aug 17, 2026 | — | View → |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability… | Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Aug 11, 2026 | — | View → |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to… | Microsoft / Windows Ancillary Function Driver for WinSock | Aug 11, 2026 | — | View → |
| CVE-2026-72898 | Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase… | Metabase / Metabase | Aug 11, 2026 | — | View → |
| CVE-2026-8037 | Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on… | Progress / LoadMaster | Aug 7, 2026 | — | View → |
| CVE-2026-63077 | JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via… | JetBrains / TeamCity | Aug 5, 2026 | Ransomware | View → |
| CVE-2026-18556 | N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass. | N-able / N-central | Aug 4, 2026 | — | View → |
| CVE-2026-34486 | Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This… | Apache / Tomcat | Aug 4, 2026 | — | View → |
| CVE-2026-9198 | Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default… | IBM / Langflow | Aug 4, 2026 | — | View → |
| CVE-2026-18577 | N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account… | N-able / N-central | Aug 3, 2026 | — | View → |
| CVE-2026-20316 | Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password… | Cisco / Secure Firewall Management Center (FMC) | Jul 29, 2026 | Ransomware | View → |
| CVE-2025-68686 | Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote… | Fortinet / FortiOS | Jul 27, 2026 | — | View → |
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged… | Arista / VeloCloud Orchestrator | Jul 27, 2026 | — | View → |
| CVE-2026-16232 | Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain… | Check Point / SmartConsole | Jul 22, 2026 | — | View → |
| CVE-2026-50522 | Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code… | Microsoft / SharePoint | Jul 22, 2026 | — | View → |
| CVE-2021-27137 | DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer… | DD-WRT / DD-WRT | Jul 21, 2026 | — | View → |
| CVE-2026-0770 | Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute… | Langflow / Langflow | Jul 21, 2026 | — | View → |
| CVE-2026-60137 | WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability… | WordPress / Core | Jul 21, 2026 | — | View → |
| CVE-2026-63030 | WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote… | WordPress / Core | Jul 21, 2026 | — | View → |
| CVE-2026-25089 | Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an… | Fortinet / FortiSandbox | Jul 16, 2026 | — | View → |