Verdict
Confirmed exploited in the wild
CISA has evidence of active exploitation. This is not theoretical risk — someone has already used it against someone. 686 vulnerabilities in this band.
- CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Fortinet · FortiOS
- CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista · VeloCloud Orchestrator
- CVE-2026-16232 Check Point SmartConsole Improper Authentication Vulnerability Check Point · SmartConsole
- CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability DD-WRT · DD-WRT
- CVE-2026-58644 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-46817 Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle · E-Business Suite
- CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability KNX Association · KNX Protocol Connection Authorization Option 1
- CVE-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft · Active Directory Federation Services
- CVE-2026-56164 Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft · SharePoint Server
- CVE-2008-4128 Cisco IOS Cross-Site Request Forgery Vulnerability Cisco · IOS
- CVE-2026-48939 iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability iCagenda · iCagenda
- CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability Langflow · Langflow
- CVE-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint Server
- CVE-2026-48558 SimpleHelp Authentication Bypass Vulnerability SimpleHelp · SimpleHelp
- CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability Lantronix · EDS5000
- CVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed · cPanel Plugin
- CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google · Chromium V8
- CVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista · Extensible Operating System
- CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds · Serv-U
- CVE-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Mirasvit · Mirasvit Full Page Cache Warmer
- CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability Linux · Kernel
- CVE-2025-48595 Android Framework Integer Overflow Vulnerability Android · Framework
- CVE-2024-21182 Oracle WebLogic Server Unspecified Vulnerability Oracle · WebLogic Server
- CVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability Daemon · Daemon Tools Lite
- CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed · cPanel Plugin
- CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Trend Micro · Apex One
- CVE-2026-41091 Microsoft Defender Link Following Vulnerability Microsoft · Defender
- CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability Microsoft · Microsoft
- CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco · Catalyst SD-WAN Manger
- CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-2749 Kentico Xperience Path Traversal Vulnerability Kentico · Kentico Xperience
- CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest · KACE Systems Management Appliance (SMA)
- CVE-2009-0238 Microsoft Office Remote Code Execution Microsoft · Office
- CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft · SharePoint Server
- CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft · Visual Basic for Applications (VBA)
- CVE-2025-60710 Microsoft Windows Link Following Vulnerability Microsoft · Windows
- CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability Adobe · Acrobat
- CVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe · Acrobat and Reader
- CVE-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf · Client
- CVE-2026-5281 Google Dawn Use-After-Free Vulnerability Google · Dawn
- CVE-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 · BIG-IP
- CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability Apple · Multiple Products
- CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google · Chromium V8
- CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability Google · Skia
- CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple · Multiple Products
- CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability Apple · iOS and iPadOS
- CVE-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom · VMware Aria Operations
- CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm · Multiple Chipsets
- CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability Cisco · SD-WAN
- CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K · FileZen
- CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability Roundcube · Webmail
- CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell · RecoverPoint for Virtual Machines (RP4VMs)
- CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 · ThreatSonar Anti-Ransomware
- CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability Google · Chromium
- CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ · Notepad++
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability Microsoft · Windows
- CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft · Office
- CVE-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab · Community and Enterprise Editions
- CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability Sangoma · FreePBX
- CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability Linux · Kernel
- CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom · VMware vCenter Server
- CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier · eslint-config-prettier
- CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability Cisco · Unified Communications Manager
- CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability ASUS · Live Update
- CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability SonicWall · SMA1000 appliance
- CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability Cisco · Multiple Products
- CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability Apple · Multiple Products
- CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability Sierra Wireless · AirLink ALEOS
- CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability Google · Chromium
- CVE-2025-62221 Microsoft Windows Use After Free Vulnerability Microsoft · Windows
- CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks · ArrayOS AG
- CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC · ScadaBR
- CVE-2025-48633 Android Framework Information Disclosure Vulnerability Android · Framework
- CVE-2025-48572 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC · ScadaBR
- CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-62215 Microsoft Windows Race Condition Vulnerability Microsoft · Windows
- CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom · VMware Aria Operations and VMware Tools
- CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex · LANSCOPE Endpoint Manager
- CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL · IGEL OS
- CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability Microsoft · Windows
- CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability SKYSEA · Client View
- CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability Libraesva · Email Security Gateway
- CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-38352 Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability Linux · Kernel
- CVE-2025-48543 Android Runtime Use-After-Free Vulnerability Android · Runtime
- CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore · Multiple Products
- CVE-2023-50224 TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability TP-Link · TL-WR841N
- CVE-2025-9377 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link · Multiple Routers
- CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability TP-Link · TL-WA855RE
- CVE-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Meta Platforms · WhatsApp
- CVE-2025-7775 Citrix NetScaler Memory Overflow Vulnerability Citrix · NetScaler
Nothing on this page matches that filter.