CVE-2025-39682
Added Sep 18, 2026
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Linux · Kernel
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 1 of 35
CVE-2025-39964
Added Sep 18, 2026
Linux Kernel Race Condition Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2026-53266
Added Sep 18, 2026
Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2026-58704
Added Sep 16, 2026
Google Pixel Improper Authorization Vulnerability
Google · Pixel
Ransomware: Unknown
CVE-2026-76460
Added Sep 16, 2026
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco · Identity Services Engine
Ransomware: Unknown
CVE-2026-87886
Added Sep 16, 2026
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup
Ransomware: Unknown
CVE-2026-76461
Added Sep 14, 2026
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco · Secure Email Gateway
Ransomware: Unknown
CVE-2026-42016
Added Sep 11, 2026
JFrog Artifactory Incorrect Authorization Vulnerability
JFrog · Artifactory
Ransomware: Unknown
CVE-2026-42018
Added Sep 11, 2026
JFrog Artifactory Improper Authentication Vulnerability
JFrog · Artifactory
Ransomware: Unknown
CVE-2026-84869
Added Sep 11, 2026
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise · ScreenConnect
Ransomware: Unknown
CVE-2026-85706
Added Sep 11, 2026
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab · Community Edition and Enterprise Edition
Ransomware: Unknown
CVE-2026-67277
Added Sep 10, 2026
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik · RouterOS
Ransomware: Unknown
CVE-2026-86060
Added Sep 10, 2026
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
MikroTik · RouterOS
Ransomware: Unknown
CVE-2025-25249
Added Sep 9, 2026
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Fortinet · Multiple Products
Ransomware: Unknown
CVE-2026-19490
Added Sep 9, 2026
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Citrix · NetScaler
Ransomware: Unknown
CVE-2026-20079
Added Sep 9, 2026
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
Ransomware: Unknown
CVE-2026-87491
Added Sep 9, 2026
Google Chromium V8 Out of Bounds Write Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2026-75650
Added Sep 8, 2026
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe · Commerce and Magento
Ransomware: Unknown
CVE-2026-81963
Added Sep 8, 2026
Microsoft Windows Link Following Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-85880
Added Sep 8, 2026
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-86218
Added Sep 8, 2026
N-able N-central Static Code Injection Vulnerability
N-able · N-central
Ransomware: Unknown
CVE-2026-85046
Added Sep 4, 2026
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2026-48710
Added Sep 2, 2026
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex · Starlette
Ransomware: Unknown
CVE-2026-49869
Added Sep 2, 2026
Kestra OSS OS Command Injection Vulnerability
Kestra · Kestra OSS
Ransomware: Unknown
CVE-2026-59822
Added Sep 2, 2026
BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI · LiteLLM
Ransomware: Unknown
CVE-2026-82329
Added Sep 2, 2026
JFrog Artifactory Improper Authentication Vulnerability
JFrog · Artifactory
Ransomware: Unknown
CVE-2026-83548
Added Sep 2, 2026
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliances
Ransomware: Unknown
CVE-2026-83549
Added Sep 2, 2026
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall · SMA1000 Appliances
Ransomware: Unknown
CVE-2026-9586
Added Sep 2, 2026
Sangoma Switchvox SQL Injection Vulnerability
Sangoma · Switchvox
Ransomware: Unknown
CVE-2026-81578
Added Aug 31, 2026
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
PaperCut · NG/MF
Ransomware: Unknown
CVE-2026-82078
Added Aug 31, 2026
PaperCut NG/MF Unsafe Reflection Vulnerability
PaperCut · NG/MF
Ransomware: Unknown
CVE-2023-49105
Added Aug 27, 2026
ownCloud Improper Authentication Vulnerability
ownCloud · ownCloud
Ransomware: Unknown
CVE-2026-53362
Added Aug 27, 2026
Linux Kernel Unspecified Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2026-66384
Added Aug 27, 2026
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog · Artifactory
Ransomware: Unknown
CVE-2015-3246
Added Aug 26, 2026
Red Hat Libuser Race Condition Vulnerability
Red Hat · Libuser
Ransomware: Unknown
CVE-2015-5287
Added Aug 26, 2026
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat · Automatic Bug Reporting Tool
Ransomware: Unknown
CVE-2019-1068
Added Aug 26, 2026
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft · SQL Server
Ransomware: Unknown
CVE-2021-23758
Added Aug 26, 2026
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
Ajax.NET Professional · Ajax.NET Professional
Ransomware: Unknown
CVE-2022-0995
Added Aug 26, 2026
Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2026-8452
Added Aug 26, 2026
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler ADC and NetScaler Gateway
Ransomware: Unknown
CVE-2026-60004
Added Aug 25, 2026
Gitea Code Injection Vulnerability
Gitea · Gitea
Ransomware: Unknown
CVE-2026-21962
Added Aug 24, 2026
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in
Ransomware: Unknown
CVE-2026-73570
Added Aug 21, 2026
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2026-72529
Added Aug 20, 2026
TrueConf Server Missing Authentication for Critical Function Vulnerability
TrueConf · Server
Ransomware: Unknown
CVE-2026-72530
Added Aug 20, 2026
TrueConf Server Code Injection Vulnerability
TrueConf · Server
Ransomware: Unknown
CVE-2026-64849
Added Aug 19, 2026
MLflow Server-Side Request Forgery Vulnerability
MLflow · MLflow
Ransomware: Unknown
CVE-2026-33824
Added Aug 18, 2026
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft · Internet Key Exchange (IKE) Service Extensions
Ransomware: Unknown
CVE-2026-55040
Added Aug 18, 2026
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft · SharePoint
Ransomware: Unknown
CVE-2026-59310
Added Aug 18, 2026
Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom · VMware vCenter
Ransomware: Known
CVE-2026-65400
Added Aug 18, 2026
Apple macOS Improper Authentication Vulnerability
Apple · macOS
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.