Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2026-21589 | Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data… | Atlassian / Multiple Products | Oct 15, 2026 | — | View → |
| CVE-2026-0322 | Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to… | Palo Alto Networks / PAN-OS | Oct 14, 2026 | — | View → |
| CVE-2026-105133 | Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via… | Ahsay / AhsayCBS | Oct 14, 2026 | — | View → |
| CVE-2026-105134 | Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via… | Ahsay / AhsayCBS | Oct 14, 2026 | — | View → |
| CVE-2026-76519 | Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write… | Cisco / Secure Email Gateway | Oct 14, 2026 | — | View → |
| CVE-2026-104935 | Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute… | Ivanti / Connect Secure | Oct 13, 2026 | — | View → |
| CVE-2026-96951 | Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over… | Microsoft / Windows | Oct 13, 2026 | — | View → |
| CVE-2015-3306 | ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the… | ProFTPD / ProFTPD | Oct 8, 2026 | — | View → |
| CVE-2015-5477 | ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries. | ISC / BIND | Oct 8, 2026 | — | View → |
| CVE-2016-3081 | Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix… | Apache / Struts | Oct 8, 2026 | — | View → |
| CVE-2021-3199 | ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter… | ONLYOFFICE / Docs | Oct 8, 2026 | — | View → |
| CVE-2023-22894 | Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to… | Strapi / Strapi | Oct 8, 2026 | — | View → |
| CVE-2026-88779 | Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of… | Citrix / NetScaler | Oct 4, 2026 | — | View → |
| CVE-2026-102489 | Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability… | Zammad GmbH / Zammad | Oct 2, 2026 | — | View → |
| CVE-2026-102490 | Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to… | Zammad GmbH / Zammad | Oct 2, 2026 | — | View → |
| CVE-2026-104286 | Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an… | Fortinet / FortiMail | Oct 1, 2026 | — | View → |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an… | Cisco / Catalyst SD-WAN Manager | Sep 30, 2026 | — | View → |
| CVE-2026-86950 | Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution. | Apple / Multiple Products | Sep 29, 2026 | — | View → |
| CVE-2026-88771 | Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker… | Citrix / NetScaler | Sep 27, 2026 | — | View → |
| CVE-2026-88772 | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer… | Citrix / NetScaler | Sep 27, 2026 | — | View → |