Full CISA KEV catalog

Every CVE the U.S. cybersecurity agency has ever flagged as actively exploited. Filter by category, sort by severity or exploit-likelihood, search by vendor or product.

Showing 1–30 of 1,619 CVEs · Page 1 of 54 30 per page

Added	CVE	Vendor / Product	Name & description	CVSS	EPSS
Jun 12, 2026	CVE-2026-35273 Ransomware	Oracle PeopleSoft Enterprise PeopleTools database enterprise	Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of …	9.8	0.0%
Jun 11, 2026	CVE-2026-10520	Ivanti Sentry endpoint vpn remote	Ivanti Sentry OS Command Injection Vulnerability Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote cod…	10.0	47.9%
Jun 9, 2026	CVE-2026-11645	Google Chromium V8 browser smb essential	Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerabi…	8.8	5.5%
Jun 9, 2026	CVE-2026-20245	Cisco Catalyst SD-WAN Manager network	Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local att…	7.8	0.4%
Jun 9, 2026	CVE-2026-7473	Arista Extensible Operating System network	Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected…	5.8	27.2%
Jun 8, 2026	CVE-2026-50751 Ransomware	Check Point Security Gateway email network vpn remote	Check Point Security Gateway Improper Authentication Vulnerability Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authenticat…	9.3	11.8%
Jun 8, 2026	CVE-2026-42271	BerriAI LiteLLM	BerriAI LiteLLM Command Injection Vulnerability BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary command…	8.8	60.8%
Jun 5, 2026	CVE-2026-28318	SolarWinds Serv-U enterprise	SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the S…	7.5	6.3%
Jun 3, 2026	CVE-2026-45247	Mirasvit Mirasvit Full Page Cache Warmer	Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying…	9.8	6.1%
Jun 2, 2026	CVE-2025-48595	Android Framework mobile	Android Framework Integer Overflow Vulnerability Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.	8.4	0.5%
Jun 2, 2026	CVE-2022-0492	Linux Kernel server os	Linux Kernel Improper Authentication Vulnerability Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.	—	27.2%
Jun 1, 2026	CVE-2024-21182	Oracle WebLogic Server database enterprise	Oracle WebLogic Server Unspecified Vulnerability Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successfu…	—	89.7%
May 29, 2026	CVE-2026-0257	Palo Alto Networks PAN-OS network vpn remote	Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.	—	58.8%
May 27, 2026	CVE-2026-45321 Ransomware	TanStack TanStack	TanStack Unspecified Vulnerability TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a tr…	—	17.1%
May 27, 2026	CVE-2026-48027 Ransomware	Nx Nx Console	Nx Console Embedded Malicious Code Vulnerability Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payloa…	—	32.1%
May 27, 2026	CVE-2026-8398	Daemon Daemon Tools Lite	Daemon Tools Lite Embedded Malicious Code Vulnerability Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability.	—	14.4%
May 26, 2026	CVE-2026-48172	LiteSpeed cPanel Plugin	LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbit…	—	8.0%
May 22, 2026	CVE-2026-9082	Drupal Core web server	Drupal Core SQL Injection Vulnerability Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstra…	—	10.4%
May 21, 2026	CVE-2025-34291	Langflow Langflow	Langflow Origin Validation Error Vulnerability Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows…	—	37.7%
May 21, 2026	CVE-2026-34926	Trend Micro Apex One endpoint	Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject ma…	—	1.0%
May 20, 2026	CVE-2008-4250	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Buffer Overflow Vulnerability Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that trig…	—	91.8%
May 20, 2026	CVE-2009-1537	Microsoft DirectX endpoint m365 smb essential	Microsoft DirectX NULL Byte Overwrite Vulnerability Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbit…	—	53.0%
May 20, 2026	CVE-2009-3459	Adobe Acrobat and Reader smb essential	Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memor…	—	88.1%
May 20, 2026	CVE-2010-0249	Microsoft Internet Explorer endpoint m365 smb essential	Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted o…	—	88.7%
May 20, 2026	CVE-2010-0806	Microsoft Internet Explorer endpoint m365 smb essential	Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer…	—	87.3%
May 20, 2026	CVE-2026-41091	Microsoft Defender endpoint m365 smb essential	Microsoft Defender Link Following Vulnerability Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.	—	8.1%
May 20, 2026	CVE-2026-45498	Microsoft Defender endpoint m365 smb essential	Microsoft Defender Denial of Service Vulnerability Microsoft Defender contains an unspecified vulnerability that allows for denial of service.	—	3.6%
May 15, 2026	CVE-2026-42897	Microsoft Microsoft email endpoint m365 smb essential	Microsoft Exchange Server Cross-Site Scripting Vulnerability Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary…	—	7.9%
May 14, 2026	CVE-2026-20182	Cisco Catalyst SD-WAN network	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain admin…	—	83.8%
May 8, 2026	CVE-2026-42208	BerriAI LiteLLM	BerriAI LiteLLM SQL Injection Vulnerability BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to …	—	62.6%

Source: CISA KEV catalog. Severity (CVSS) and exploit-probability (EPSS) sync nightly from NVD and FIRST.