Actively exploited vulnerabilities

    Vulnerabilities from CISA's Known Exploited Vulnerabilities (KEV) catalog that are confirmed to be exploited. Close these gaps before anything else.

    1,764 CVEs in the CISA KEV catalog · How we calculate priority

    Export (max. 1,000 rows):CSVJSON

    Entries in the CISA KEV catalog
    SeverityCVETitlePriority (0–325)Published (CVE)
    CriticalCVE-2026-2441Google Chromium CSS Use-After-Free Vulnerability246.9
    CriticalCVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation246.9
    CriticalCVE-2026-34909Ubiquiti UniFi OS Path Traversal Vulnerability246.7
    CriticalCVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability246.6
    CriticalCVE-2022-41082Microsoft Exchange Server Remote Code Execution Vulnerability246.5
    CriticalCVE-2017-6884Zyxel EMG2926 Routers Command Injection Vulnerability246.4
    CriticalCVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-004246.4
    CriticalCVE-2026-8037Progress LoadMaster Command Injection Vulnerability246.3
    CriticalCVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability246.1
    CriticalCVE-2018-19323GIGABYTE Multiple Products Privilege Escalation Vulnerability246.1
    CriticalCVE-2024-27199JetBrains TeamCity Relative Path Traversal Vulnerability246.1
    CriticalCVE-2026-102490Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package246.0
    CriticalCVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability245.9
    CriticalCVE-2026-105133Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication245.9
    CriticalCVE-2026-42208LiteLLM: SQL injection in Proxy API key verification245.8
    CriticalCVE-2012-1710Oracle Fusion Middleware Unspecified Vulnerability245.7
    CriticalCVE-2026-9586Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB245.6
    CriticalCVE-2021-27878Veritas Backup Exec Agent Command Execution Vulnerability245.6
    CriticalCVE-2023-36884Windows Search Remote Code Execution Vulnerability245.4
    CriticalCVE-2017-12615Apache Tomcat on Windows Remote Code Execution Vulnerability245.4
    CriticalCVE-2017-0148Microsoft SMBv1 Server Remote Code Execution Vulnerability245.4
    CriticalCVE-2025-26633Microsoft Management Console Security Feature Bypass Vulnerability245.4
    CriticalCVE-2024-1086Linux Kernel Use-After-Free Vulnerability245.4
    CriticalCVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)245.2
    CriticalCVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability245.2
    CriticalCVE-2026-48939iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability245.2
    CriticalCVE-2026-56291Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1245.1
    CriticalCVE-2026-39808Fortinet FortiSandbox OS Command Injection Vulnerability245.0
    CriticalCVE-2026-39987marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass244.9
    CriticalCVE-2024-38094Microsoft SharePoint Remote Code Execution Vulnerability244.9
    CriticalCVE-2026-86060SSH session privilege manipulation via a crafted username in Mikrotik RouterOS244.9
    CriticalCVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability244.9
    CriticalCVE-2026-58644Microsoft SharePoint Remote Code Execution Vulnerability244.8
    CriticalCVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability244.8
    CriticalCVE-2021-27877Veritas Backup Exec Agent Improper Authentication Vulnerability244.8
    CriticalCVE-2023-28252Windows Common Log File System Driver Elevation of Privilege Vulnerability244.7
    CriticalCVE-2024-4671Google Chromium Visuals Use-After-Free Vulnerability244.6
    CriticalCVE-2026-33824Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability244.5
    CriticalCVE-2026-20079Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability244.5
    CriticalCVE-2025-24472Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability244.5
    CriticalCVE-2023-44487HTTP/2 Rapid Reset Attack Vulnerability244.4
    CriticalCVE-2024-30088Windows Kernel Elevation of Privilege Vulnerability244.3
    CriticalCVE-2026-20127Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability244.3
    CriticalCVE-2023-27532Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability244.2
    CriticalCVE-2026-3055Insufficient input validation leading to memory overread244.2
    CriticalCVE-2026-33017Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint244.2
    CriticalCVE-2021-4034Red Hat Polkit Out-of-Bounds Read and Write Vulnerability244.1
    CriticalCVE-2022-24990TerraMaster OS Remote Command Execution Vulnerability244.1
    CriticalCVE-2026-46300Linux Kernel Missing Initialization of a Variable Vulnerability244.0
    CriticalCVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability244.0