Full CISA KEV catalog

Every CVE the U.S. cybersecurity agency has ever flagged as actively exploited. Filter by category, sort by severity or exploit-likelihood, search by vendor or product.

Showing 31–60 of 1,619 CVEs · Page 2 of 54 30 per page

Added	CVE	Vendor / Product	Name & description	CVSS	EPSS
May 7, 2026	CVE-2026-6973	Ivanti Endpoint Manager Mobile (EPMM) endpoint vpn remote	Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote co…	—	5.9%
May 6, 2026	CVE-2026-0300	Palo Alto Networks PAN-OS network vpn remote	Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacke…	—	6.1%
May 1, 2026	CVE-2026-31431	Linux Kernel server os	Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.	—	2.7%
Apr 30, 2026	CVE-2026-41940 Ransomware	WebPros cPanel & WHM and WP2 (WordPress Squared)	WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to…	—	91.2%
Apr 28, 2026	CVE-2024-1708 Ransomware	ConnectWise ScreenConnect enterprise smb essential	ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.	—	84.8%
Apr 28, 2026	CVE-2026-32202	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.	—	53.1%
Apr 24, 2026	CVE-2024-57726 Ransomware	SimpleHelp SimpleHelp	SimpleHelp Missing Authorization Vulnerability SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to …	—	38.8%
Apr 24, 2026	CVE-2024-57728 Ransomware	SimpleHelp SimpleHelp	SimpleHelp Path Traversal Vulnerability SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). T…	—	53.4%
Apr 24, 2026	CVE-2024-7399	Samsung MagicINFO 9 Server mobile	Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.	—	72.9%
Apr 24, 2026	CVE-2025-29635	D-Link DIR-823X network	D-Link DIR-823X Command Injection Vulnerability D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/…	—	19.9%
Apr 23, 2026	CVE-2026-39987	Marimo Marimo	Marimo Remote Code Execution Vulnerability Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands.	—	80.7%
Apr 22, 2026	CVE-2026-33825	Microsoft Defender endpoint m365 smb essential	Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.	—	9.0%
Apr 20, 2026	CVE-2023-27351 Ransomware	PaperCut NG/MF	PaperCut NG/MF Improper Authentication Vulnerability PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter…	—	65.6%
Apr 20, 2026	CVE-2024-27199 Ransomware	JetBrains TeamCity	JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.	—	90.9%
Apr 20, 2026	CVE-2025-2749	Kentico Kentico Xperience	Kentico Xperience Path Traversal Vulnerability Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.	—	4.8%
Apr 20, 2026	CVE-2025-32975	Quest KACE Systems Management Appliance (SMA)	Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest KACE Systems Management Appliance (SMA) contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credential…	—	39.3%
Apr 20, 2026	CVE-2025-48700	Synacor Zimbra Collaboration Suite (ZCS)	Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potent…	—	18.2%
Apr 20, 2026	CVE-2026-20122	Cisco Catalyst SD-WAN Manger network	Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker coul…	—	1.4%
Apr 20, 2026	CVE-2026-20128	Cisco Catalyst SD-WAN Manager network	Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by access…	—	0.1%
Apr 20, 2026	CVE-2026-20133	Cisco Catalyst SD-WAN Manager network	Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information …	—	2.0%
Apr 16, 2026	CVE-2026-34197	Apache ActiveMQ web server	Apache ActiveMQ Improper Input Validation Vulnerability Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.	—	83.5%
Apr 14, 2026	CVE-2009-0238	Microsoft Office endpoint m365 smb essential	Microsoft Office Remote Code Execution Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially craft…	—	74.7%
Apr 14, 2026	CVE-2026-32201	Microsoft SharePoint Server endpoint m365 smb essential	Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network.	—	7.9%
Apr 13, 2026	CVE-2012-1854	Microsoft Visual Basic for Applications (VBA) endpoint m365 smb essential	Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.	—	3.1%
Apr 13, 2026	CVE-2020-9715	Adobe Acrobat smb essential	Adobe Acrobat Use-After-Free Vulnerability Adobe Acrobat contains a use-after-free vulnerability that allows for code execution	—	79.2%
Apr 13, 2026	CVE-2023-21529 Ransomware	Microsoft Exchange Server email endpoint m365 smb essential	Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.	—	27.0%
Apr 13, 2026	CVE-2023-36424	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation	—	9.8%
Apr 13, 2026	CVE-2025-60710	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Link Following Vulnerability Microsoft Windows contains a link following vulnerability that allows for privilege escalation	—	19.0%
Apr 13, 2026	CVE-2026-21643	Fortinet FortiClient EMS network vpn remote	Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP r…	—	70.9%
Apr 13, 2026	CVE-2026-34621	Adobe Acrobat and Reader smb essential	Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.	—	11.0%

Source: CISA KEV catalog. Severity (CVSS) and exploit-probability (EPSS) sync nightly from NVD and FIRST.