CVE-2026-20245
Added Jun 9, 2026
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Cisco · Catalyst SD-WAN Manager
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 3 of 35
CVE-2026-7473
Added Jun 9, 2026
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista · Extensible Operating System
Ransomware: Unknown
CVE-2026-42271
Added Jun 8, 2026
BerriAI LiteLLM Command Injection Vulnerability
BerriAI · LiteLLM
Ransomware: Unknown
CVE-2026-50751
Added Jun 8, 2026
Check Point Security Gateway Improper Authentication Vulnerability
Check Point · Security Gateway
Ransomware: Known
CVE-2026-28318
Added Jun 5, 2026
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
SolarWinds · Serv-U
Ransomware: Unknown
CVE-2026-45247
Added Jun 3, 2026
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
Mirasvit · Mirasvit Full Page Cache Warmer
Ransomware: Unknown
CVE-2022-0492
Added Jun 2, 2026
Linux Kernel Improper Authentication Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2025-48595
Added Jun 2, 2026
Android Framework Integer Overflow Vulnerability
Android · Framework
Ransomware: Unknown
CVE-2024-21182
Added Jun 1, 2026
Oracle WebLogic Server Unspecified Vulnerability
Oracle · WebLogic Server
Ransomware: Unknown
CVE-2026-0257
Added May 29, 2026
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Known
CVE-2026-45321
Added May 27, 2026
TanStack Unspecified Vulnerability
TanStack · TanStack
Ransomware: Known
CVE-2026-48027
Added May 27, 2026
Nx Console Embedded Malicious Code Vulnerability
Nx · Nx Console
Ransomware: Known
CVE-2026-8398
Added May 27, 2026
Daemon Tools Lite Embedded Malicious Code Vulnerability
Daemon · Daemon Tools Lite
Ransomware: Unknown
CVE-2026-48172
Added May 26, 2026
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
LiteSpeed · cPanel Plugin
Ransomware: Unknown
CVE-2026-9082
Added May 22, 2026
Drupal Core SQL Injection Vulnerability
Drupal · Core
Ransomware: Unknown
CVE-2025-34291
Added May 21, 2026
Langflow Origin Validation Error Vulnerability
Langflow · Langflow
Ransomware: Unknown
CVE-2026-34926
Added May 21, 2026
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
Trend Micro · Apex One
Ransomware: Unknown
CVE-2008-4250
Added May 20, 2026
Microsoft Windows Buffer Overflow Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2009-1537
Added May 20, 2026
Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft · DirectX
Ransomware: Unknown
CVE-2009-3459
Added May 20, 2026
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
Adobe · Acrobat and Reader
Ransomware: Unknown
CVE-2010-0249
Added May 20, 2026
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2010-0806
Added May 20, 2026
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2026-41091
Added May 20, 2026
Microsoft Defender Link Following Vulnerability
Microsoft · Defender
Ransomware: Unknown
CVE-2026-45498
Added May 20, 2026
Microsoft Defender Denial of Service Vulnerability
Microsoft · Defender
Ransomware: Unknown
CVE-2026-42897
Added May 15, 2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft · Microsoft
Ransomware: Unknown
CVE-2026-20182
Added May 14, 2026
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Cisco · Catalyst SD-WAN
Ransomware: Unknown
CVE-2026-42208
Added May 8, 2026
BerriAI LiteLLM SQL Injection Vulnerability
BerriAI · LiteLLM
Ransomware: Unknown
CVE-2026-6973
Added May 7, 2026
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Ransomware: Unknown
CVE-2026-0300
Added May 6, 2026
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Unknown
CVE-2026-31431
Added May 1, 2026
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2026-41940
Added Apr 30, 2026
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
WebPros · cPanel & WHM and WP2 (WordPress Squared)
Ransomware: Known
CVE-2024-1708
Added Apr 28, 2026
ConnectWise ScreenConnect Path Traversal Vulnerability
ConnectWise · ScreenConnect
Ransomware: Known
CVE-2026-32202
Added Apr 28, 2026
Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-57726
Added Apr 24, 2026
SimpleHelp Missing Authorization Vulnerability
SimpleHelp · SimpleHelp
Ransomware: Known
CVE-2024-57728
Added Apr 24, 2026
SimpleHelp Path Traversal Vulnerability
SimpleHelp · SimpleHelp
Ransomware: Known
CVE-2024-7399
Added Apr 24, 2026
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung · MagicINFO 9 Server
Ransomware: Unknown
CVE-2025-29635
Added Apr 24, 2026
D-Link DIR-823X Command Injection Vulnerability
D-Link · DIR-823X
Ransomware: Unknown
CVE-2026-39987
Added Apr 23, 2026
Marimo Remote Code Execution Vulnerability
Marimo · Marimo
Ransomware: Unknown
CVE-2026-33825
Added Apr 22, 2026
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft · Defender
Ransomware: Known
CVE-2023-27351
Added Apr 20, 2026
PaperCut NG/MF Improper Authentication Vulnerability
PaperCut · NG/MF
Ransomware: Known
CVE-2024-27199
Added Apr 20, 2026
JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains · TeamCity
Ransomware: Known
CVE-2025-2749
Added Apr 20, 2026
Kentico Xperience Path Traversal Vulnerability
Kentico · Kentico Xperience
Ransomware: Unknown
CVE-2025-32975
Added Apr 20, 2026
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
Quest · KACE Systems Management Appliance (SMA)
Ransomware: Unknown
CVE-2025-48700
Added Apr 20, 2026
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2026-20122
Added Apr 20, 2026
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
Cisco · Catalyst SD-WAN Manger
Ransomware: Unknown
CVE-2026-20128
Added Apr 20, 2026
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Cisco · Catalyst SD-WAN Manager
Ransomware: Unknown
CVE-2026-20133
Added Apr 20, 2026
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Cisco · Catalyst SD-WAN Manager
Ransomware: Unknown
CVE-2026-34197
Added Apr 16, 2026
Apache ActiveMQ Improper Input Validation Vulnerability
Apache · ActiveMQ
Ransomware: Unknown
CVE-2009-0238
Added Apr 14, 2026
Microsoft Office Remote Code Execution
Microsoft · Office
Ransomware: Unknown
CVE-2026-32201
Added Apr 14, 2026
Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft · SharePoint Server
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.