CVE-2015-3306
Added Oct 8, 2026
ProFTPD Improper Access Control Vulnerability
ProFTPD · ProFTPD
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,739 catalog entriesReleased Oct 8, 2026
Catalog results
1,739 vulnerabilities
Page 1 of 35
CVE-2015-5477
Added Oct 8, 2026
ISC BIND Data Processing Errors Vulnerability
ISC · BIND
Ransomware: Unknown
CVE-2016-3081
Added Oct 8, 2026
Apache Struts Command Injection Vulnerability
Apache · Struts
Ransomware: Unknown
CVE-2021-3199
Added Oct 8, 2026
ONLYOFFICE Docs Server Path Traversal Vulnerability
ONLYOFFICE · Docs
Ransomware: Unknown
CVE-2023-22894
Added Oct 8, 2026
Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi · Strapi
Ransomware: Unknown
CVE-2026-88779
Added Oct 4, 2026
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler
Ransomware: Unknown
CVE-2026-102489
Added Oct 2, 2026
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH · Zammad
Ransomware: Unknown
CVE-2026-102490
Added Oct 2, 2026
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH · Zammad
Ransomware: Unknown
CVE-2026-104286
Added Oct 1, 2026
Fortinet FortiMail Path Traversal Vulnerability
Fortinet · FortiMail
Ransomware: Unknown
CVE-2026-76504
Added Sep 30, 2026
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Cisco · Catalyst SD-WAN Manager
Ransomware: Unknown
CVE-2026-86950
Added Sep 29, 2026
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2026-88771
Added Sep 27, 2026
Citrix NetScaler Improper Input Validation Vulnerability
Citrix · NetScaler
Ransomware: Unknown
CVE-2026-88772
Added Sep 27, 2026
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler
Ransomware: Unknown
CVE-2026-65660
Added Sep 25, 2026
Microsoft SharePoint Code Injection Vulnerability
Microsoft · SharePoint
Ransomware: Unknown
CVE-2026-67279
Added Sep 25, 2026
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
MikroTik · RouterOS
Ransomware: Unknown
CVE-2026-87902
Added Sep 25, 2026
WordPress Core Remote File Inclusion Vulnerability
WordPress · Core
Ransomware: Unknown
CVE-2026-5430
Added Sep 24, 2026
WSO2 Multiple Products Path Traversal Vulnerability
WSO2 · Multiple Products
Ransomware: Unknown
CVE-2026-71362
Added Sep 24, 2026
Adobe Commerce and Magento Incorrect Authorization Vulnerability
Adobe · Commerce and Magento
Ransomware: Unknown
CVE-2026-85102
Added Sep 22, 2026
Check Point Multiple Products Improper Certificate Validation Vulnerability
Check Point · Multiple Products
Ransomware: Unknown
CVE-2026-93616
Added Sep 22, 2026
Check Point Multiple Products Path Traversal Vulnerability
Check Point · Multiple Products
Ransomware: Unknown
CVE-2026-93952
Added Sep 22, 2026
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista · VeloCloud Orchestrator
Ransomware: Unknown
CVE-2026-94127
Added Sep 22, 2026
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 · BIG-IP APM
Ransomware: Unknown
CVE-2026-7273
Added Sep 21, 2026
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel · GS1900 Series Switches
Ransomware: Unknown
CVE-2025-39682
Added Sep 18, 2026
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2025-39964
Added Sep 18, 2026
Linux Kernel Race Condition Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2026-53266
Added Sep 18, 2026
Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2026-58704
Added Sep 16, 2026
Google Pixel Improper Authorization Vulnerability
Google · Pixel
Ransomware: Unknown
CVE-2026-76460
Added Sep 16, 2026
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco · Identity Services Engine
Ransomware: Unknown
CVE-2026-87886
Added Sep 16, 2026
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup
Ransomware: Unknown
CVE-2026-76461
Added Sep 14, 2026
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco · Secure Email Gateway
Ransomware: Unknown
CVE-2026-42016
Added Sep 11, 2026
JFrog Artifactory Incorrect Authorization Vulnerability
JFrog · Artifactory
Ransomware: Unknown
CVE-2026-42018
Added Sep 11, 2026
JFrog Artifactory Improper Authentication Vulnerability
JFrog · Artifactory
Ransomware: Unknown
CVE-2026-84869
Added Sep 11, 2026
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise · ScreenConnect
Ransomware: Unknown
CVE-2026-85706
Added Sep 11, 2026
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab · Community Edition and Enterprise Edition
Ransomware: Unknown
CVE-2026-67277
Added Sep 10, 2026
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik · RouterOS
Ransomware: Unknown
CVE-2026-86060
Added Sep 10, 2026
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
MikroTik · RouterOS
Ransomware: Unknown
CVE-2025-25249
Added Sep 9, 2026
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Fortinet · Multiple Products
Ransomware: Unknown
CVE-2026-19490
Added Sep 9, 2026
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Citrix · NetScaler
Ransomware: Unknown
CVE-2026-20079
Added Sep 9, 2026
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
Ransomware: Unknown
CVE-2026-87491
Added Sep 9, 2026
Google Chromium V8 Out of Bounds Write Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2026-75650
Added Sep 8, 2026
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe · Commerce and Magento
Ransomware: Unknown
CVE-2026-81963
Added Sep 8, 2026
Microsoft Windows Link Following Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-85880
Added Sep 8, 2026
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-86218
Added Sep 8, 2026
N-able N-central Static Code Injection Vulnerability
N-able · N-central
Ransomware: Unknown
CVE-2026-85046
Added Sep 4, 2026
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2026-48710
Added Sep 2, 2026
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex · Starlette
Ransomware: Unknown
CVE-2026-49869
Added Sep 2, 2026
Kestra OSS OS Command Injection Vulnerability
Kestra · Kestra OSS
Ransomware: Unknown
CVE-2026-59822
Added Sep 2, 2026
BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI · LiteLLM
Ransomware: Unknown
CVE-2026-82329
Added Sep 2, 2026
JFrog Artifactory Improper Authentication Vulnerability
JFrog · Artifactory
Ransomware: Unknown
CVE-2026-83548
Added Sep 2, 2026
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliances
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.