Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2026-24423 | SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could… | SmarterTools / SmarterMail | Feb 5, 2026 | Ransomware | View → |
| CVE-2019-19006 | Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password… | Sangoma / FreePBX | Feb 3, 2026 | — | View → |
| CVE-2021-39935 | GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users… | GitLab / Community and Enterprise Editions | Feb 3, 2026 | — | View → |
| CVE-2025-40551 | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would… | SolarWinds / Web Help Desk | Feb 3, 2026 | — | View → |
| CVE-2025-64328 | Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command… | Sangoma / FreePBX | Feb 3, 2026 | — | View → |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote… | Ivanti / Endpoint Manager Mobile (EPMM) | Jan 29, 2026 | — | View → |
| CVE-2026-24858 | Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that… | Fortinet / Multiple Products | Jan 27, 2026 | — | View → |
| CVE-2018-14634 | Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user… | Linux / Kernel | Jan 26, 2026 | — | View → |
| CVE-2025-52691 | SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability that could allow an unauthenticated… | SmarterTools / SmarterMail | Jan 26, 2026 | Ransomware | View → |
| CVE-2026-21509 | Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in… | Microsoft / Office | Jan 26, 2026 | — | View → |
| CVE-2026-23760 | SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulnerability in the password reset API. The… | SmarterTools / SmarterMail | Jan 26, 2026 | Ransomware | View → |
| CVE-2026-24061 | GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication bypass via a "-f root"… | GNU / InetUtils | Jan 26, 2026 | — | View → |
| CVE-2024-37079 | Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could… | Broadcom / VMware vCenter Server | Jan 23, 2026 | — | View → |
| CVE-2025-31125 | Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or… | Vite / Vitejs | Jan 22, 2026 | — | View → |
| CVE-2025-34026 | Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration,… | Versa / Concerto | Jan 22, 2026 | — | View → |
| CVE-2025-54313 | Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js… | Prettier / eslint-config-prettier | Jan 22, 2026 | — | View → |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) contains a PHP remote file inclusion vulnerability that could allow for remote attackers to craft… | Synacor / Zimbra Collaboration Suite (ZCS) | Jan 22, 2026 | — | View → |
| CVE-2026-20045 | Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco… | Cisco / Unified Communications Manager | Jan 21, 2026 | — | View → |
| CVE-2026-20805 | Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose… | Microsoft / Windows | Jan 13, 2026 | — | View → |
| CVE-2025-8110 | Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code… | Gogs / Gogs | Jan 12, 2026 | — | View → |