All entries, newest first

Download CSV

1,766 entries. Page 1 of 36.

Added	CVE	Vendor	Product	Patch deadline	Ransomware use
Oct 30	CVE-2026-118527	Ivanti	Connect Secure	Nov 13	Unknown
Oct 30	CVE-2026-111357	Ivanti	Connect Secure	Nov 2	Unknown
Oct 29	CVE-2026-97229	GitLab	Community Edition and Enterprise Edition	Nov 1	Unknown
Oct 29	CVE-2026-76418	Cisco	Secure Firewall ASA Software and Cisco Secure FTD Software	Nov 1	Unknown
Oct 28	CVE-2026-46300	Linux	Kernel	Oct 31	Unknown
Oct 28	CVE-2026-41709	Broadcom	VMware ESX	Nov 11	Unknown
Oct 27	CVE-2026-48356	Adobe	Commerce and Magento	Nov 10	Unknown
Oct 27	CVE-2026-111497	Google	Brotli	Nov 10	Unknown
Oct 26	CVE-2026-109619	PHP Group	PHP	Oct 29	Unknown
Oct 26	CVE-2026-109618	PHP Group	PHP	Oct 29	Unknown
Oct 23	CVE-2026-114625	Arista	VeloCloud Orchestrator	Oct 26	Unknown
Oct 23	CVE-2026-110447	Collabora	Collabora Online – Built-in CODE Server	Oct 26	Unknown
Oct 20	CVE-2026-96656	Plex	Media Server	Oct 23	Unknown
Oct 20	CVE-2026-96655	Plex	Media Server	Nov 3	Unknown
Oct 20	CVE-2026-96654	Plex	Media Server	Oct 23	Unknown
Oct 20	CVE-2026-96652	Plex	Media Server	Nov 3	Unknown
Oct 20	CVE-2026-110936	Siemens	Software Center	Nov 3	Unknown
Oct 20	CVE-2026-106931	EG Secure Solutions	SiteGuard Server Edition	Oct 23	Unknown
Oct 16	CVE-2026-102764	BeyondTrust	Remote Support	Oct 19	Unknown
Oct 16	CVE-2025-61624	Fortinet	Multiple Products	Oct 19	Unknown
Oct 15	CVE-2026-21589	Atlassian	Multiple Products	Oct 18	Unknown
Oct 14	CVE-2026-76519	Cisco	Secure Email Gateway	Oct 17	Unknown
Oct 14	CVE-2026-105134	Ahsay	AhsayCBS	Oct 17	Unknown
Oct 14	CVE-2026-105133	Ahsay	AhsayCBS	Oct 17	Unknown
Oct 14	CVE-2026-0322	Palo Alto Networks	PAN-OS	Oct 17	Unknown
Oct 13	CVE-2026-96951	Microsoft	Windows	Oct 16	Unknown
Oct 13	CVE-2026-104935	Ivanti	Connect Secure	Oct 16	Unknown
Oct 8	CVE-2023-22894	Strapi	Strapi	Oct 11	Unknown
Oct 8	CVE-2021-3199	ONLYOFFICE	Docs	Oct 11	Unknown
Oct 8	CVE-2016-3081	Apache	Struts	Oct 11	Unknown
Oct 8	CVE-2015-5477	ISC	BIND	Oct 11	Unknown
Oct 8	CVE-2015-3306	ProFTPD	ProFTPD	Oct 11	Unknown
Oct 4	CVE-2026-88779	Citrix	NetScaler	Oct 7	Unknown
Oct 2	CVE-2026-102490	Zammad GmbH	Zammad	Oct 5	Unknown
Oct 2	CVE-2026-102489	Zammad GmbH	Zammad	Oct 5	Unknown
Oct 1	CVE-2026-104286	Fortinet	FortiMail	Oct 4	Unknown
Sep 30	CVE-2026-76504	Cisco	Catalyst SD-WAN Manager	Oct 3	Unknown
Sep 29	CVE-2026-86950	Apple	Multiple Products	Oct 13	Unknown
Sep 27	CVE-2026-88772	Citrix	NetScaler	Sep 30	Unknown
Sep 27	CVE-2026-88771	Citrix	NetScaler	Sep 30	Unknown
Sep 25	CVE-2026-87902	WordPress	Core	Sep 28	Unknown
Sep 25	CVE-2026-67279	MikroTik	RouterOS	Sep 28	Unknown
Sep 25	CVE-2026-65660	Microsoft	SharePoint	Sep 28	Unknown
Sep 24	CVE-2026-71362	Adobe	Commerce and Magento	Sep 27	Unknown
Sep 24	CVE-2026-5430	WSO2	Multiple Products	Sep 27	Unknown
Sep 22	CVE-2026-94127	F5	BIG-IP APM	Sep 25	Unknown
Sep 22	CVE-2026-93952	Arista	VeloCloud Orchestrator	Sep 25	Unknown
Sep 22	CVE-2026-93616	Check Point	Multiple Products	Sep 25	Unknown
Sep 22	CVE-2026-85102	Check Point	Multiple Products	Sep 25	Unknown
Sep 21	CVE-2026-7273	Zyxel	GS1900 Series Switches	Sep 24	Unknown

How this tracker works

We read CISA’s Known Exploited Vulnerabilities catalog several times a day and count entries by the date CISA added them. The catalog lists flaws with reliable evidence of active exploitation. The patch deadline is the date CISA sets for U.S. federal civilian agencies; CISA urges every organization to treat listed flaws as a priority.

“Known” ransomware use means CISA has confirmed a ransomware campaign used the flaw. “Unknown” means not confirmed, not ruled out. Catalog published October 30, 2026. CISA’s catalog