How often is this vulnerability database updated?

This page syncs against the official CISA KEV feed every night. Newly added CVEs are enriched with CVSS scoring from the NVD and given an AI-generated plain-English breakdown covering what the vulnerability is, why it matters, and what action to take.

What does it mean if a vulnerability has known ransomware use?

CISA flags entries that have been directly used in ransomware campaigns. These represent the highest real-world urgency in the catalog and should be prioritized for immediate patching or mitigation ahead of other entries.

Updated Nightly

Known Exploited Vulnerabilities Database

Q: What is the CISA Known Exploited Vulnerabilities (KEV) catalog?

The KEV catalog is an authoritative list maintained by the US Cybersecurity and Infrastructure Security Agency (CISA) of CVEs that are known to be actively exploited in the wild. It is the single best signal for prioritizing patching, since every entry represents a real-world attack, not a theoretical risk.

A live mirror of the CISA Known Exploited Vulnerabilities (KEV) catalog — CVEs confirmed to be actively exploited in the wild, enriched nightly with CVSS scoring and AI-generated plain-English breakdowns.

1,674

Tracked CVEs

352

Linked to ransomware

Added in last 7 days

Today's Top Exploited Vulnerabilities

AI-generated breakdowns of the most recently catalogued, actively exploited vulnerabilities.

CVE-2026-48939

iCagenda iCagenda

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

This vulnerability, CVE-2026-48939, affects iCagenda, an extension for Joomla, allowing an attacker to upload any type of file, including dangerous ones, through its file attachment feature. This enables them to execute malicious PHP code on the affected system. Essentially, an attacker can trick the system into running their own harmful code.

CVSS 9.8

CVE-2026-56291

Balbooa Forms

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Balbooa Forms, a Joomla extension, has a critical vulnerability that allows an attacker to upload dangerous files without needing to log in. This flaw lets them upload executable files, which can give them full remote control over the affected system. This means an attacker could completely compromise your website or server.

CVSS 9.8

CVE-2026-35273 Ransomware

Oracle PeopleSoft Enterprise PeopleTools

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

This critical vulnerability, CVE-2026-35273, affects Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. It's a flaw where important system functions lack proper security checks. An attacker can exploit this over the internet without needing a username or password, leading to a complete takeover of your PeopleSoft system.

CVSS 9.8

Latest Catalogued Vulnerabilities

Most recently added entries in the CISA KEV catalog, ordered by date added.

CVE ID	Vendor / Product	Date Added	CVSS
CVE-2026-73570	Synacor Zimbra Collaboration Suite (ZCS) Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability	21 Aug 2026	8.9	Details
CVE-2026-72530	TrueConf Server TrueConf Server Code Injection Vulnerability	20 Aug 2026	9.0	Details
CVE-2026-72529	TrueConf Server TrueConf Server Missing Authentication for Critical Function Vulnerability	20 Aug 2026	9.8	Details
CVE-2026-64849	MLflow MLflow MLflow Server-Side Request Forgery Vulnerability	19 Aug 2026	—	Details
CVE-2026-65400	Apple macOS Apple macOS Improper Authentication Vulnerability	18 Aug 2026	9.8	Details
CVE-2026-59310	Broadcom VMware vCenter Broadcom VMware vCenter Path Traversal Vulnerability	18 Aug 2026	9.8	Details
CVE-2026-55040	Microsoft SharePoint Microsoft SharePoint Weak Authentication Vulnerability	18 Aug 2026	9.1	Details
CVE-2026-33824	Microsoft Internet Key Exchange (IKE) Service Extensions Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability	18 Aug 2026	—	Details
CVE-2025-62593	Ray-Project Ray Ray-Project Ray Code Injection Vulnerability	17 Aug 2026	8.8	Details
CVE-2026-72898	Metabase Metabase Metabase SQL Injection Vulnerability	11 Aug 2026	10.0	Details
CVE-2026-68820	Microsoft Windows Ancillary Function Driver for WinSock Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability	11 Aug 2026	7.0	Details
CVE-2026-20349	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability	11 Aug 2026	8.6	Details
CVE-2026-8037	Progress LoadMaster Progress LoadMaster Command Injection Vulnerability	07 Aug 2026	9.6	Details
CVE-2026-63077	JetBrains TeamCity JetBrains TeamCity Deserialization of Untrusted Data Vulnerability	05 Aug 2026	9.8	Details
CVE-2026-9198	IBM Langflow IBM Langflow Code Injection Vulnerability	04 Aug 2026	9.8	Details
CVE-2026-34486	Apache Tomcat Apache Tomcat Missing Encryption of Sensitive Data Vulnerability	04 Aug 2026	7.5	Details
CVE-2026-18556	N-able N-central N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability	04 Aug 2026	7.4	Details
CVE-2026-18577	N-able N-central N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability	03 Aug 2026	—	Details
CVE-2026-20316	Cisco Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability	29 Jul 2026	5.3	Details
CVE-2026-16812	Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability	27 Jul 2026	10.0	Details
CVE-2025-68686	Fortinet FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability	27 Jul 2026	5.9	Details
CVE-2026-50522	Microsoft SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	22 Jul 2026	9.8	Details
CVE-2026-16232	Check Point SmartConsole Check Point SmartConsole Improper Authentication Vulnerability	22 Jul 2026	9.1	Details
CVE-2026-63030	WordPress Core WordPress Core Interpretation Conflict Vulnerability	21 Jul 2026	9.8	Details
CVE-2026-60137	WordPress Core WordPress Core SQL Injection Vulnerability	21 Jul 2026	5.9	Details
CVE-2026-0770	Langflow Langflow Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability	21 Jul 2026	9.8	Details
CVE-2021-27137	DD-WRT DD-WRT DD-WRT Stack-Based Buffer Overflow Vulnerability	21 Jul 2026	8.1	Details
CVE-2026-58644	Microsoft SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	16 Jul 2026	9.8	Details
CVE-2026-39808	Fortinet FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability	16 Jul 2026	9.8	Details
CVE-2026-25089	Fortinet FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability	16 Jul 2026	9.8	Details
CVE-2026-46817	Oracle E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability	15 Jul 2026	9.8	Details
CVE-2023-4346	KNX Association KNX Protocol Connection Authorization Option 1 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability	15 Jul 2026	7.5	Details
CVE-2026-56164	Microsoft SharePoint Server Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability	14 Jul 2026	5.3	Details
CVE-2026-56155	Microsoft Active Directory Federation Services Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability	14 Jul 2026	—	Details
CVE-2026-15410 Ransomware	SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Code Injection Vulnerability	14 Jul 2026	—	Details
CVE-2026-15409 Ransomware	SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability	14 Jul 2026	10.0	Details
CVE-2008-4128	Cisco IOS Cisco IOS Cross-Site Request Forgery Vulnerability	13 Jul 2026	4.3	Details
CVE-2026-56291	Balbooa Forms Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability	10 Jul 2026	9.8	Details
CVE-2026-48939	iCagenda iCagenda iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability	10 Jul 2026	9.8	Details
CVE-2026-56290	Joomlack Page Builder Joomlack Page Builder Improper Access Control Vulnerability	07 Jul 2026	—	Details
CVE-2026-55255	Langflow Langflow Langflow Authorization Bypass Through User-Controlled Key Vulnerability	07 Jul 2026	—	Details
CVE-2026-48908	JoomShaper SP Page Builder JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability	07 Jul 2026	—	Details
CVE-2026-48282	Adobe ColdFusion Adobe ColdFusion Path Traversal Vulnerability	07 Jul 2026	—	Details
CVE-2026-45659 Ransomware	Microsoft SharePoint Server Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability	01 Jul 2026	—	Details
CVE-2026-48558	SimpleHelp SimpleHelp SimpleHelp Authentication Bypass Vulnerability	29 Jun 2026	—	Details
CVE-2026-20230	Cisco Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability	25 Jun 2026	—	Details
CVE-2026-12569 Ransomware	PTC Windchill and FlexPLM PTC Windchill and FlexPLM Improper Input Validation Vulnerability	25 Jun 2026	—	Details
CVE-2026-34910	Ubiquiti UniFi OS Ubiquiti UniFi OS Improper Input Validation Vulnerability	23 Jun 2026	—	Details
CVE-2026-34909	Ubiquiti UniFi OS Ubiquiti UniFi OS Path Traversal Vulnerability	23 Jun 2026	—	Details
CVE-2026-34908	Ubiquiti UniFi OS Ubiquiti UniFi OS Improper Access Control Vulnerability	23 Jun 2026	—	Details
CVE-2025-67038	Lantronix EDS5000 Lantronix EDS5000 Code Injection Vulnerability	23 Jun 2026	—	Details
CVE-2026-20253	Splunk Enterprise Splunk Enterprise Missing Authentication for Critical Function Vulnerability	18 Jun 2026	—	Details
CVE-2026-48907	Widget Factory Joomla Content Editor Widget Factory Joomla Content Editor Improper Access Control Vulnerability	16 Jun 2026	—	Details
CVE-2026-54420	LiteSpeed cPanel Plugin LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability	15 Jun 2026	—	Details
CVE-2026-20262	Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability	15 Jun 2026	—	Details
CVE-2026-35273 Ransomware	Oracle PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability	12 Jun 2026	9.8	Details
CVE-2026-10520	Ivanti Sentry Ivanti Sentry OS Command Injection Vulnerability	11 Jun 2026	—	Details
CVE-2026-7473	Arista Extensible Operating System Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability	09 Jun 2026	—	Details
CVE-2026-20245	Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability	09 Jun 2026	—	Details
CVE-2026-11645	Google Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability	09 Jun 2026	—	Details

Sources & Methodology

This catalog mirrors the official CISA Known Exploited Vulnerabilities catalog via a nightly sync. Newly added entries are enriched with CVSS scoring from the NIST National Vulnerability Database and given an AI-generated summary, impact assessment, and recommended action. AI breakdowns are generated from the underlying CISA and NVD data and should be treated as a starting point, not a substitute for your own risk assessment.

Patch With Confidence

Know Which Vulnerabilities Actually Matter

A VAPT assessment tells you which of these actively exploited vulnerabilities exist in your own environment. CRS delivers continuous, compliance-grade penetration testing across Africa and North America.

Explore VAPT Services Contact Us