CVE-2025-62593
Added Aug 17, 2026
Ray-Project Ray Code Injection Vulnerability
Ray-Project · Ray
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 2 of 35
CVE-2026-20349
Added Aug 11, 2026
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
Ransomware: Unknown
CVE-2026-68820
Added Aug 11, 2026
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft · Windows Ancillary Function Driver for WinSock
Ransomware: Unknown
CVE-2026-72898
Added Aug 11, 2026
Metabase SQL Injection Vulnerability
Metabase · Metabase
Ransomware: Unknown
CVE-2026-8037
Added Aug 7, 2026
Progress LoadMaster Command Injection Vulnerability
Progress · LoadMaster
Ransomware: Unknown
CVE-2026-63077
Added Aug 5, 2026
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
JetBrains · TeamCity
Ransomware: Unknown
CVE-2026-18556
Added Aug 4, 2026
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able · N-central
Ransomware: Unknown
CVE-2026-34486
Added Aug 4, 2026
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Apache · Tomcat
Ransomware: Unknown
CVE-2026-9198
Added Aug 4, 2026
IBM Langflow Code Injection Vulnerability
IBM · Langflow
Ransomware: Unknown
CVE-2026-18577
Added Aug 3, 2026
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able · N-central
Ransomware: Unknown
CVE-2026-20316
Added Jul 29, 2026
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Cisco · Secure Firewall Management Center (FMC)
Ransomware: Known
CVE-2025-68686
Added Jul 27, 2026
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet · FortiOS
Ransomware: Unknown
CVE-2026-16812
Added Jul 27, 2026
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Arista · VeloCloud Orchestrator
Ransomware: Unknown
CVE-2026-16232
Added Jul 22, 2026
Check Point SmartConsole Improper Authentication Vulnerability
Check Point · SmartConsole
Ransomware: Unknown
CVE-2026-50522
Added Jul 22, 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft · SharePoint
Ransomware: Unknown
CVE-2021-27137
Added Jul 21, 2026
DD-WRT Stack-Based Buffer Overflow Vulnerability
DD-WRT · DD-WRT
Ransomware: Unknown
CVE-2026-0770
Added Jul 21, 2026
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Langflow · Langflow
Ransomware: Unknown
CVE-2026-60137
Added Jul 21, 2026
WordPress Core SQL Injection Vulnerability
WordPress · Core
Ransomware: Unknown
CVE-2026-63030
Added Jul 21, 2026
WordPress Core Interpretation Conflict Vulnerability
WordPress · Core
Ransomware: Unknown
CVE-2026-25089
Added Jul 16, 2026
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · FortiSandbox
Ransomware: Unknown
CVE-2026-39808
Added Jul 16, 2026
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · FortiSandbox
Ransomware: Unknown
CVE-2026-58644
Added Jul 16, 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft · SharePoint
Ransomware: Unknown
CVE-2023-4346
Added Jul 15, 2026
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
KNX Association · KNX Protocol Connection Authorization Option 1
Ransomware: Unknown
CVE-2026-46817
Added Jul 15, 2026
Oracle E-Business Suite Improper Privilege Management Vulnerability
Oracle · E-Business Suite
Ransomware: Unknown
CVE-2026-15409
Added Jul 14, 2026
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliances
Ransomware: Known
CVE-2026-15410
Added Jul 14, 2026
SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall · SMA1000 Appliances
Ransomware: Known
CVE-2026-56155
Added Jul 14, 2026
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft · Active Directory Federation Services
Ransomware: Unknown
CVE-2026-56164
Added Jul 14, 2026
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
Microsoft · SharePoint Server
Ransomware: Unknown
CVE-2008-4128
Added Jul 13, 2026
Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco · IOS
Ransomware: Unknown
CVE-2026-48939
Added Jul 10, 2026
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
iCagenda · iCagenda
Ransomware: Unknown
CVE-2026-56291
Added Jul 10, 2026
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
Balbooa · Forms
Ransomware: Unknown
CVE-2026-48282
Added Jul 7, 2026
Adobe ColdFusion Path Traversal Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2026-48908
Added Jul 7, 2026
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
JoomShaper · SP Page Builder
Ransomware: Unknown
CVE-2026-55255
Added Jul 7, 2026
Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow · Langflow
Ransomware: Unknown
CVE-2026-56290
Added Jul 7, 2026
Joomlack Page Builder Improper Access Control Vulnerability
Joomlack · Page Builder
Ransomware: Unknown
CVE-2026-45659
Added Jul 1, 2026
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft · SharePoint Server
Ransomware: Known
CVE-2026-48558
Added Jun 29, 2026
SimpleHelp Authentication Bypass Vulnerability
SimpleHelp · SimpleHelp
Ransomware: Unknown
CVE-2026-12569
Added Jun 25, 2026
PTC Windchill and FlexPLM Improper Input Validation Vulnerability
PTC · Windchill and FlexPLM
Ransomware: Known
CVE-2026-20230
Added Jun 25, 2026
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
Cisco · Unified Communications Manager
Ransomware: Unknown
CVE-2025-67038
Added Jun 23, 2026
Lantronix EDS5000 Code Injection Vulnerability
Lantronix · EDS5000
Ransomware: Unknown
CVE-2026-34908
Added Jun 23, 2026
Ubiquiti UniFi OS Improper Access Control Vulnerability
Ubiquiti · UniFi OS
Ransomware: Unknown
CVE-2026-34909
Added Jun 23, 2026
Ubiquiti UniFi OS Path Traversal Vulnerability
Ubiquiti · UniFi OS
Ransomware: Unknown
CVE-2026-34910
Added Jun 23, 2026
Ubiquiti UniFi OS Improper Input Validation Vulnerability
Ubiquiti · UniFi OS
Ransomware: Unknown
CVE-2026-20253
Added Jun 18, 2026
Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Splunk · Enterprise
Ransomware: Unknown
CVE-2026-48907
Added Jun 16, 2026
Widget Factory Joomla Content Editor Improper Access Control Vulnerability
Widget Factory · Joomla Content Editor
Ransomware: Unknown
CVE-2026-20262
Added Jun 15, 2026
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
Cisco · Catalyst SD-WAN Manager
Ransomware: Unknown
CVE-2026-54420
Added Jun 15, 2026
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed · cPanel Plugin
Ransomware: Unknown
CVE-2026-35273
Added Jun 12, 2026
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
Oracle · PeopleSoft Enterprise PeopleTools
Ransomware: Known
CVE-2026-10520
Added Jun 11, 2026
Ivanti Sentry OS Command Injection Vulnerability
Ivanti · Sentry
Ransomware: Unknown
CVE-2026-11645
Added Jun 9, 2026
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · Chromium V8
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.