Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 706 vulnerabilities in this band.
- CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability ConnectWise · ScreenConnect
- CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability JFrog · Artifactory
- CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability JFrog · Artifactory
- CVE-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability GitLab · Community Edition and Enterprise Edition
- CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability MikroTik · RouterOS
- CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability MikroTik · RouterOS
- CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Citrix · NetScaler
- CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Fortinet · Multiple Products
- CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability Google · Chromium V8
- CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Adobe · Commerce and Magento
- CVE-2026-81963 Microsoft Windows Link Following Vulnerability Microsoft · Windows
- CVE-2026-86218 N-able N-central Static Code Injection Vulnerability N-able · N-central
- CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Microsoft · Windows
- CVE-2026-85046 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability BerriAI · LiteLLM
- CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Kludex · Starlette
- CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability Kestra · Kestra OSS
- CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability JFrog · Artifactory
- CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability Sangoma · Switchvox
- CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability PaperCut · NG/MF
- CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability PaperCut · NG/MF
- CVE-2023-49105 ownCloud Improper Authentication Vulnerability ownCloud · ownCloud
- CVE-2026-53362 Linux Kernel Unspecified Vulnerability Linux · Kernel
- CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability JFrog · Artifactory
- CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in
- CVE-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-72530 TrueConf Server Code Injection Vulnerability TrueConf · Server
- CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability TrueConf · Server
- CVE-2026-64849 MLflow Server-Side Request Forgery Vulnerability MLflow · MLflow
- CVE-2026-65400 Apple macOS Improper Authentication Vulnerability Apple · macOS
- CVE-2025-62593 Ray-Project Ray Code Injection Vulnerability Ray-Project · Ray
- CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
- CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft · Windows Ancillary Function Driver for WinSock
- CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability N-able · N-central
- CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Fortinet · FortiOS
- CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista · VeloCloud Orchestrator
- CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability DD-WRT · DD-WRT
- CVE-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle · E-Business Suite
- CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability KNX Association · KNX Protocol Connection Authorization Option 1
- CVE-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft · Active Directory Federation Services
- CVE-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft · SharePoint Server
- CVE-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability Cisco · IOS
- CVE-2026-56291 Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability Balbooa · Forms
- CVE-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability iCagenda · iCagenda
- CVE-2026-48908 JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability JoomShaper · SP Page Builder
- CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability Langflow · Langflow
- CVE-2026-56290 Joomlack Page Builder Improper Access Control Vulnerability Joomlack · Page Builder
- CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability Adobe · ColdFusion
- CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability Lantronix · EDS5000
- CVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed · cPanel Plugin
- CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google · Chromium V8
- CVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista · Extensible Operating System
- CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds · Serv-U
- CVE-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Mirasvit · Mirasvit Full Page Cache Warmer
- CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability Linux · Kernel
- CVE-2025-48595 Android Framework Integer Overflow Vulnerability Android · Framework
- CVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability Daemon · Daemon Tools Lite
- CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed · cPanel Plugin
- CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Trend Micro · Apex One
- CVE-2026-41091 Microsoft Defender Link Following Vulnerability Microsoft · Defender
- CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco · Catalyst SD-WAN Manger
- CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-2749 Kentico Xperience Path Traversal Vulnerability Kentico · Kentico Xperience
- CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest · KACE Systems Management Appliance (SMA)
- CVE-2009-0238 Microsoft Office Remote Code Execution Microsoft · Office
- CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft · SharePoint Server
- CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft · Visual Basic for Applications (VBA)
- CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability Adobe · Acrobat
- CVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe · Acrobat and Reader
- CVE-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf · Client
- CVE-2026-5281 Google Dawn Use-After-Free Vulnerability Google · Dawn
- CVE-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 · BIG-IP
- CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability Apple · Multiple Products
- CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google · Chromium V8
- CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability Google · Skia
- CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple · Multiple Products
- CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability Apple · iOS and iPadOS
- CVE-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom · VMware Aria Operations
- CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm · Multiple Chipsets
- CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability Cisco · SD-WAN
- CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K · FileZen
- CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability Roundcube · Webmail
- CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell · RecoverPoint for Virtual Machines (RP4VMs)
- CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 · ThreatSonar Anti-Ransomware
- CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability Google · Chromium
- CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ · Notepad++
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability Microsoft · Windows
- CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft · Office
- CVE-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab · Community and Enterprise Editions
- CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability Sangoma · FreePBX
- CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability Linux · Kernel
- CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom · VMware vCenter Server
- CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier · eslint-config-prettier
- CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability Cisco · Unified Communications Manager
- CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability ASUS · Live Update
- CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability SonicWall · SMA1000 appliance
Nothing on this page matches that filter.