Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2026-82078 | PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and… | PaperCut / NG/MF | Aug 31, 2026 | — | View → |
| CVE-2023-49105 | ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without… | ownCloud / ownCloud | Aug 27, 2026 | — | View → |
| CVE-2026-53362 | Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This… | Linux / Kernel | Aug 27, 2026 | — | View → |
| CVE-2026-66384 | JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated… | JFrog / Artifactory | Aug 27, 2026 | — | View → |
| CVE-2015-3246 | Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a… | Red Hat / Libuser | Aug 26, 2026 | — | View → |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain… | Red Hat / Automatic Bug Reporting Tool | Aug 26, 2026 | — | View → |
| CVE-2019-1068 | Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL… | Microsoft / SQL Server | Aug 26, 2026 | — | View → |
| CVE-2021-23758 | Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via… | Ajax.NET Professional / Ajax.NET Professional | Aug 26, 2026 | — | View → |
| CVE-2022-0995 | Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a… | Linux / Kernel | Aug 26, 2026 | — | View → |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer… | Citrix / NetScaler ADC and NetScaler Gateway | Aug 26, 2026 | — | View → |
| CVE-2026-60004 | Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the… | Gitea / Gitea | Aug 25, 2026 | — | View → |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in… | Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-in | Aug 24, 2026 | — | View → |
| CVE-2026-73570 | Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send… | Synacor / Zimbra Collaboration Suite (ZCS) | Aug 21, 2026 | — | View → |
| CVE-2026-72529 | TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker… | TrueConf / Server | Aug 20, 2026 | — | View → |
| CVE-2026-72530 | TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port… | TrueConf / Server | Aug 20, 2026 | — | View → |
| CVE-2026-64849 | MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and… | MLflow / MLflow | Aug 19, 2026 | — | View → |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution. | Microsoft / Internet Key Exchange (IKE) Service Extensions | Aug 18, 2026 | — | View → |
| CVE-2026-55040 | Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over… | Microsoft / SharePoint | Aug 18, 2026 | — | View → |
| CVE-2026-59310 | Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute… | Broadcom / VMware vCenter | Aug 18, 2026 | Ransomware | View → |
| CVE-2026-65400 | Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen… | Apple / macOS | Aug 18, 2026 | — | View → |