Skip to main content
Meo

Security tracker

Tracked vulnerabilities

Vulnerability pages

Pages cover CISA KEV entries added within the trailing 365-day window with CVSS at least 9.0 or known ransomware use, subject to a daily cap. Read the sources and method.

Vendor, product, KEV date and ransomware use: CISA KEV catalog 2026.10.30, retrieved 2026-11-01. CVSS: NVD, retrieved 2026-11-01.
CVEVendor / productCVSSKEV addedRansomware
CVE-2026-97229GitLab Community Edition and Enterprise Edition102026-10-29Not reported by CISA
CVE-2026-111497Google Brotli9.22026-10-27Not reported by CISA
CVE-2026-48356Adobe Commerce and Magento9.32026-10-27Not reported by CISA
CVE-2026-109618PHP Group PHP9.22026-10-26Not reported by CISA
CVE-2026-109619PHP Group PHP9.22026-10-26Not reported by CISA
CVE-2026-110447Collabora Collabora Online – Built-in CODE Server9.22026-10-23Not reported by CISA
CVE-2026-114625Arista VeloCloud Orchestrator9.42026-10-23Not reported by CISA
CVE-2026-102764BeyondTrust Remote Support9.32026-10-16Not reported by CISA
CVE-2026-21589Atlassian Multiple Products9.32026-10-15Not reported by CISA
CVE-2026-105134Ahsay AhsayCBS102026-10-14Not reported by CISA
CVE-2026-76519Cisco Secure Email Gateway9.82026-10-14Not reported by CISA
CVE-2021-3199ONLYOFFICE Docs9.82026-10-08Not reported by CISA
CVE-2026-102489Zammad GmbH Zammad9.42026-10-02Not reported by CISA
CVE-2026-102490Zammad GmbH Zammad9.42026-10-02Not reported by CISA
CVE-2026-104286Fortinet FortiMail9.82026-10-01Not reported by CISA
CVE-2026-76504Cisco Catalyst SD-WAN Manager9.82026-09-30Not reported by CISA
CVE-2026-88771Citrix NetScaler9.52026-09-27Not reported by CISA
CVE-2026-88772Citrix NetScaler9.52026-09-27Not reported by CISA
CVE-2026-5430WSO2 Multiple Products102026-09-24Not reported by CISA
CVE-2026-71362Adobe Commerce and Magento9.12026-09-24Not reported by CISA
CVE-2026-85102Check Point Multiple Products9.82026-09-22Not reported by CISA
CVE-2026-93616Check Point Multiple Products9.82026-09-22Not reported by CISA
CVE-2026-93952Arista VeloCloud Orchestrator9.52026-09-22Not reported by CISA
CVE-2026-94127F5 BIG-IP APM9.32026-09-22Not reported by CISA
CVE-2025-39682Linux Kernel9.82026-09-18Not reported by CISA
CVE-2026-76460Cisco Identity Services Engine102026-09-16Not reported by CISA
CVE-2026-76461Cisco Secure Email Gateway9.82026-09-14Not reported by CISA
CVE-2026-84869ConnectWise ScreenConnect9.92026-09-11Not reported by CISA
CVE-2026-85706GitLab Community Edition and Enterprise Edition102026-09-11Not reported by CISA
CVE-2026-86060MikroTik RouterOS9.22026-09-10Not reported by CISA
CVE-2025-25249Fortinet Multiple Products9.82026-09-09Not reported by CISA
CVE-2026-19490Citrix NetScaler9.32026-09-09Not reported by CISA
CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management102026-09-09Not reported by CISA
CVE-2026-75650Adobe Commerce and Magento102026-09-08Not reported by CISA
CVE-2026-86218N-able N-central102026-09-08Not reported by CISA
CVE-2026-49869Kestra Kestra OSS102026-09-02Not reported by CISA
CVE-2026-82329JFrog Artifactory9.82026-09-02Not reported by CISA
CVE-2026-9586Sangoma Switchvox9.32026-09-02Not reported by CISA
CVE-2026-82078PaperCut NG/MF9.42026-08-31Not reported by CISA
CVE-2023-49105ownCloud ownCloud9.82026-08-27Not reported by CISA
CVE-2021-23758Ajax.NET Professional Ajax.NET Professional9.82026-08-26Not reported by CISA
CVE-2026-60004Gitea Gitea9.82026-08-25Not reported by CISA
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in102026-08-24Not reported by CISA
CVE-2026-72529TrueConf Server9.32026-08-20Not reported by CISA
CVE-2026-72530TrueConf Server9.52026-08-20Not reported by CISA
CVE-2026-64849MLflow MLflow9.32026-08-19Not reported by CISA
CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions9.82026-08-18Not reported by CISA
CVE-2026-55040Microsoft SharePoint9.12026-08-18Not reported by CISA
CVE-2026-59310Broadcom VMware vCenter9.82026-08-18Known (reported by CISA)
CVE-2025-62593Ray-Project Ray9.42026-08-17Not reported by CISA
CVE-2026-72898Metabase Metabase102026-08-11Not reported by CISA
CVE-2026-8037Progress LoadMaster9.82026-08-07Not reported by CISA
CVE-2026-63077JetBrains TeamCity9.82026-08-05Known (reported by CISA)
CVE-2026-9198IBM Langflow9.82026-08-04Not reported by CISA
CVE-2026-20316Cisco Secure Firewall Management Center (FMC)5.32026-07-29Known (reported by CISA)
CVE-2026-16812Arista VeloCloud Orchestrator102026-07-27Not reported by CISA
CVE-2026-16232Check Point SmartConsole9.32026-07-22Not reported by CISA
CVE-2026-50522Microsoft SharePoint9.82026-07-22Not reported by CISA
CVE-2026-0770Langflow Langflow9.82026-07-21Not reported by CISA
CVE-2026-63030WordPress Core9.82026-07-21Not reported by CISA
CVE-2026-25089Fortinet FortiSandbox9.82026-07-16Not reported by CISA
CVE-2026-39808Fortinet FortiSandbox9.82026-07-16Not reported by CISA
CVE-2026-58644Microsoft SharePoint9.82026-07-16Not reported by CISA
CVE-2026-46817Oracle E-Business Suite9.82026-07-15Not reported by CISA
CVE-2026-15409SonicWall SMA1000 AppliancesNot listed by NVD2026-07-14Known (reported by CISA)
CVE-2026-15410SonicWall SMA1000 AppliancesNot listed by NVD2026-07-14Known (reported by CISA)
CVE-2026-56164Microsoft SharePoint Server9.82026-07-14Not reported by CISA
CVE-2026-48939iCagenda iCagenda102026-07-10Not reported by CISA
CVE-2026-56291Balbooa Forms102026-07-10Not reported by CISA
CVE-2026-48282Adobe ColdFusion102026-07-07Not reported by CISA
CVE-2026-48908JoomShaper SP Page Builder102026-07-07Not reported by CISA
CVE-2026-56290Joomlack Page Builder102026-07-07Not reported by CISA
CVE-2026-45659Microsoft SharePoint Server8.82026-07-01Known (reported by CISA)
CVE-2026-48558SimpleHelp SimpleHelp9.52026-06-29Not reported by CISA
CVE-2026-12569PTC Windchill and FlexPLM9.32026-06-25Known (reported by CISA)
CVE-2025-67038Lantronix EDS50009.32026-06-23Not reported by CISA
CVE-2026-34908Ubiquiti UniFi OS102026-06-23Not reported by CISA
CVE-2026-34909Ubiquiti UniFi OS102026-06-23Not reported by CISA
CVE-2026-34910Ubiquiti UniFi OS102026-06-23Not reported by CISA
CVE-2026-20253Splunk Enterprise9.82026-06-18Not reported by CISA
CVE-2026-48907Widget Factory Joomla Content Editor102026-06-16Not reported by CISA
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools9.82026-06-12Known (reported by CISA)
CVE-2026-10520Ivanti Sentry102026-06-11Not reported by CISA
CVE-2026-50751Check Point Security GatewayNot listed by NVD2026-06-08Known (reported by CISA)
CVE-2026-45247Mirasvit Mirasvit Full Page Cache Warmer9.32026-06-03Not reported by CISA
CVE-2026-0257Palo Alto Networks PAN-OS7.82026-05-29Known (reported by CISA)
CVE-2026-45321TanStack TanStack9.62026-05-27Known (reported by CISA)
CVE-2026-48027Nx Nx Console9.32026-05-27Known (reported by CISA)
CVE-2026-8398Daemon Daemon Tools Lite9.32026-05-27Not reported by CISA
CVE-2026-48172LiteSpeed cPanel Plugin102026-05-26Not reported by CISA
CVE-2026-9082Drupal Core9.82026-05-22Not reported by CISA
CVE-2025-34291Langflow Langflow9.42026-05-21Not reported by CISA
CVE-2026-20182Cisco Catalyst SD-WAN102026-05-14Not reported by CISA
CVE-2026-42208BerriAI LiteLLM9.32026-05-08Not reported by CISA
CVE-2026-0300Palo Alto Networks PAN-OS9.32026-05-06Not reported by CISA
CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared)9.32026-04-30Known (reported by CISA)
CVE-2024-1708ConnectWise ScreenConnect8.42026-04-28Known (reported by CISA)
CVE-2024-57726SimpleHelp SimpleHelp9.92026-04-24Known (reported by CISA)
CVE-2024-57728SimpleHelp SimpleHelp7.22026-04-24Known (reported by CISA)
CVE-2024-7399Samsung MagicINFO 9 Server9.82026-04-24Not reported by CISA
CVE-2026-39987Marimo Marimo9.32026-04-23Not reported by CISA
CVE-2026-33825Microsoft Defender7.82026-04-22Known (reported by CISA)
CVE-2023-27351PaperCut NG/MF7.52026-04-20Known (reported by CISA)
CVE-2024-27199JetBrains TeamCity7.32026-04-20Known (reported by CISA)
CVE-2023-21529Microsoft Exchange Server8.82026-04-13Known (reported by CISA)
CVE-2025-60710Microsoft Windows7.82026-04-13Known (reported by CISA)
CVE-2026-21643Fortinet FortiClient EMS9.82026-04-13Not reported by CISA
CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM)9.82026-04-08Not reported by CISA
CVE-2026-35616Fortinet FortiClient EMS9.82026-04-06Not reported by CISA
CVE-2026-3055Citrix NetScaler9.32026-03-30Not reported by CISA
CVE-2025-53521F5 BIG-IP9.32026-03-27Not reported by CISA
CVE-2026-33634Aquasecurity Trivy9.42026-03-26Not reported by CISA
CVE-2026-33017Langflow Langflow9.32026-03-25Not reported by CISA
CVE-2025-32432Craft CMS Craft CMS102026-03-20Not reported by CISA
CVE-2025-54068Laravel Livewire9.22026-03-20Not reported by CISA
CVE-2026-20131Cisco Secure Firewall Management Center (FMC)102026-03-19Known (reported by CISA)
CVE-2026-20963Microsoft SharePoint9.82026-03-18Not reported by CISA
CVE-2025-26399SolarWinds Web Help Desk9.82026-03-09Known (reported by CISA)
CVE-2017-7921Hikvision Multiple Products9.82026-03-05Not reported by CISA
CVE-2021-22681Rockwell Multiple Products9.82026-03-05Not reported by CISA
CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager102026-02-25Not reported by CISA
CVE-2021-22175GitLab GitLab9.82026-02-18Not reported by CISA
CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs)102026-02-18Not reported by CISA
CVE-2020-7796Synacor Zimbra Collaboration Suite9.82026-02-17Not reported by CISA
CVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)9.92026-02-13Known (reported by CISA)
CVE-2024-43468Microsoft Configuration Manager9.82026-02-12Not reported by CISA
CVE-2025-40536SolarWinds Web Help Desk9.82026-02-12Not reported by CISA
CVE-2025-11953React Native Community CLI9.82026-02-05Not reported by CISA
CVE-2026-24423SmarterTools SmarterMail9.32026-02-05Known (reported by CISA)
CVE-2019-19006Sangoma FreePBX9.82026-02-03Not reported by CISA
CVE-2025-40551SolarWinds Web Help Desk9.82026-02-03Not reported by CISA
CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM)9.82026-01-29Not reported by CISA
CVE-2026-24858Fortinet Multiple Products9.82026-01-27Not reported by CISA
CVE-2025-52691SmarterTools SmarterMail102026-01-26Known (reported by CISA)
CVE-2026-23760SmarterTools SmarterMail9.32026-01-26Known (reported by CISA)
CVE-2026-24061GNU InetUtils9.82026-01-26Not reported by CISA
CVE-2024-37079Broadcom VMware vCenter Server9.82026-01-23Not reported by CISA
CVE-2025-34026Versa Concerto9.22026-01-22Not reported by CISA
CVE-2026-20045Cisco Unified Communications Manager9.82026-01-21Not reported by CISA
CVE-2025-37164Hewlett Packard Enterprise (HPE) OneView9.82026-01-07Not reported by CISA
CVE-2025-14733WatchGuard Firebox9.32025-12-19Known (reported by CISA)
CVE-2025-20393Cisco Multiple Products102025-12-17Not reported by CISA
CVE-2025-59374ASUS Live Update9.32025-12-17Not reported by CISA
CVE-2025-59718Fortinet Multiple Products9.82025-12-16Not reported by CISA
CVE-2025-58360OSGeo GeoServer9.82025-12-11Not reported by CISA
CVE-2022-37055D-Link Routers9.82025-12-08Not reported by CISA
CVE-2025-66644Array Networks ArrayOS AG9.82025-12-08Not reported by CISA
CVE-2025-55182Meta React Server Components102025-12-05Known (reported by CISA)
CVE-2025-61757Oracle Fusion Middleware9.82025-11-21Not reported by CISA
CVE-2025-64446Fortinet FortiWeb9.82025-11-14Not reported by CISA
CVE-2025-12480Gladinet Triofox9.12025-11-12Not reported by CISA
CVE-2025-9242WatchGuard Firebox9.32025-11-12Not reported by CISA
CVE-2025-21042Samsung Mobile Devices9.82025-11-10Not reported by CISA
CVE-2025-48703CWP Control Web Panel92025-11-04Not reported by CISA

Other KEV additions in the last 30 days

KEV additions: CISA KEV catalog 2026.10.30, retrieved 2026-11-01. Reasons apply page rule v1 to NVD data retrieved 2026-11-01.
CVESourcesWhy no page
CVE-2026-111357NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-118527NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; NVD description missing; CVSS vector missing; EPSS score missing; vendor advisory or patch missing
CVE-2026-76418NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-41709NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-46300NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-106931NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-110936NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-96652NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; vendor advisory or patch missing
CVE-2026-96654NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; vendor advisory or patch missing
CVE-2026-96655NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; vendor advisory or patch missing
CVE-2026-96656NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; vendor advisory or patch missing
CVE-2025-61624NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-0322NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-105133NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-104935NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2026-96951NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2015-3306NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; CVSS vector missing; vendor advisory or patch missing
CVE-2015-5477NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; CVSS vector missing
CVE-2016-3081NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use
CVE-2023-22894NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use; vendor advisory or patch missing
CVE-2026-88779NVD · CISA KEVbelow CVSS 9.0 and no known ransomware use

Sources

CISA Known Exploited Vulnerabilities Catalog, CC0 1.0. No endorsement by CISA. This product uses the NVD API but is not endorsed or certified by the NVD. EPSS scores by FIRST.