CyberSecureTodayCSTCyberSecureToday

Advisory hub

CISA KEV Updates: Known Exploited Vulnerabilities and Fixes

82 advisoriesUpdated

A listing in CISA's Known Exploited Vulnerabilities catalog means there is reliable evidence the flaw is being exploited in the wild. US federal civilian agencies must fix each entry by a set due date under Binding Operational Directive 22-01, and most enterprise patch programmes use the catalog as their own priority list.

Every row below is a KEV-listed vulnerability we have written up, newest first: what is affected, how severe it is, which release fixes it and what is known about the activity behind the listing. Where a vendor has shipped mitigations ahead of a full patch, the linked story covers those too.

Advisories

CISA KEV advisories: ID, product, severity, CISA KEV status and fix
IDProduct & issueSeverityKEVFixPublished
CVE-2026-0322Palo Alto PAN-OS Code InjectionHighYesVendor advisory
CVE-2026-105133Ahsay AhsayCBS Auth BypassMediumYesVersion 10.3.2 and later
CVE-2026-21589Atlassian Data Center File LeakCriticalYesVendor advisory
CVE-2026-76519Cisco Email Gateway File WriteCriticalYesVendor advisory
CVE-2026-105134Ahsay AhsayCBS Cmd InjectionCriticalYesVersion 10.3.2 and later
CVE-2026-89310Ivanti Endpoint Manager SQLiCriticalYesIvanti EPM 2022 SU6, Ivanti EPM 2024 SU1
CVE-2015-3306ProFTPD mod_copy RCECriticalYesProFTPD 1.3.5a, 1.3.6 and above
CVE-2026-104935Ivanti Connect Secure SAML RCECriticalYesIvanti Connect Secure 22.7R2.2, 22.7R3, and Hotfix Packages
CVE-2015-5477ISC BIND 9 TKEY Assertion DoSCriticalYesBIND 9.9.7-P2, 9.10.2-P3, 9.16+, 9.18+, 9.20+
CVE-2016-3081Apache Struts 2 S2-032 OGNL RCECriticalYesApache Struts 2.3.20.3, 2.3.24.3, 2.3.28.2, 2.5+
CVE-2026-102490Zammad Helpdesk Root PrivEscCriticalYesZammad 7.1.0 or latest vendor security hotfix
CVE-2026-76504Cisco SD-WAN Manager Auth BypassCriticalYesVendor advisory
CVE-2026-87902WordPress Core Path TraversalCriticalYesVendor advisory
CVE-2026-65660Microsoft SharePoint RCECriticalYesVendor advisory
CVE-2026-67279MikroTik RouterOS Auth BypassMediumYesSee remediation
CVE-2026-71362Adobe Commerce Auth BypassCriticalYesVendor advisory
CVE-2026-5430WSO2 API Manager Path TraversalCriticalYesVendor advisory
CVE-2026-93616Check Point Path TraversalCriticalYesVendor advisory
CVE-2026-93952Arista VeloCloud Auth BypassCriticalYesVendor advisory
CVE-2026-94127F5 BIG-IP APM Heap OverflowCriticalYesVendor advisory
CVE-2026-7273Zyxel GS1900 Buffer OverflowHighYesVendor advisory
CVE-2025-39682Linux Kernel kTLS OOB CorruptionHighYesSee remediation
CVE-2026-12569PTC Windchill and FlexPLM RCECriticalYesVendor advisory
CVE-2025-39964Linux Kernel AF_ALG Race PrivEscHighYesVendor advisory
CVE-2026-53266Linux Kernel ebtables OOB WriteHighYesVendor advisory
CVE-2026-34909Ubiquiti UniFi OS Path TraversalHighYesVendor advisory
CVE-2022-0492Linux Kernel cgroups v1 EscapeHighYesVendor advisory
CVE-2026-50751Check Point Gateway Auth BypassCriticalYesVendor advisory
CVE-2026-20262Cisco SD-WAN Manager TraversalCriticalYesVendor advisory
CVE-2026-20253Splunk Enterprise Auth BypassCriticalYesVendor advisory
CVE-2026-10520Ivanti Sentry Command InjectionCriticalYesVendor advisory
CVE-2025-67038Lantronix EDS5000 Code InjectionCriticalYesVendor advisory
CVE-2008-4128Cisco IOS HTTP Server CSRFHighYesVendor advisory
CVE-2026-58644Microsoft SharePoint Server RCECriticalYesVendor advisory
CVE-2023-4346KNX Protocol Lockout DoSHighYesVendor advisory
CVE-2026-48282Adobe ColdFusion Path TraversalCriticalYesVendor advisory
CVE-2026-20230Cisco Unified CM SSRFHighYesVendor advisory
CVE-2026-34910Ubiquiti UniFi OS Access BypassHighYesVendor advisory
CVE-2026-60137WordPress Core SQLiCriticalYesVendor advisory
CVE-2015-5287Red Hat ABRT Local PrivEscHighYesVendor advisory
CVE-2026-48558SimpleHelp Auth BypassCriticalYesVendor advisory
CVE-2026-18577N-able N-central Auth BypassCriticalYesVendor advisory
CVE-2015-3246Red Hat libuser Race PrivEscHighYesVendor advisory
CVE-2021-27137DD-WRT httpd Buffer OverflowCriticalYesVendor advisory
CVE-2019-1068Microsoft SQL Server RCECriticalYesVendor advisory
CVE-2026-72529TrueConf Server Auth BypassCriticalYesVendor advisory
CVE-2026-87886Acronis Backup Plugin RCECriticalYesVendor advisory
CVE-2022-0995Linux Kernel Watch Queue PrivEscHighYesVendor advisory
CVE-2026-76460Cisco ISE API Auth BypassCriticalYesVendor advisory
CVE-2026-34486Apache Tomcat Session ExposureHighYesVendor advisory
CVE-2026-58704Google Pixel Baseband RCECriticalYesVendor advisory
CVE-2026-50522Microsoft SharePoint BDC RCECriticalYesVendor advisory
CVE-2026-16232Check Point SmartConsole BypassCriticalYesVendor advisory
CVE-2026-46817Oracle E-Business Suite PrivEscCriticalYesVendor advisory
CVE-2026-56155Microsoft ADFS SAML PrivEscCriticalYesVendor advisory
CVE-2026-16812Arista VeloCloud Cmd InjectionCriticalYesVendor advisory
CVE-2026-18556N-able N-central Auth BypassCriticalYesVendor advisory
CVE-2025-68686Fortinet FortiOS SSL-VPN LeakHighYesVendor advisory
CVE-2026-20349Cisco ASA/FTD Heap CorruptionCriticalYesVendor advisory
CVE-2026-68820Microsoft Windows AFD PrivEscHighYesVendor advisory
CVE-2026-72898Metabase BI SQLiCriticalYesVendor advisory
CVE-2026-63077JetBrains TeamCity RCECriticalYesVendor advisory
CVE-2026-9198IBM Langflow Code InjectionCriticalYesVendor advisory
CVE-2026-8037Progress LoadMaster Cmd InjectionCriticalYesVendor advisory
CVE-2026-59310VMware vCenter Path TraversalCriticalYesVendor advisory
CVE-2026-65400Apple Screen Sharing Auth BypassCriticalYesVendor advisory
CVE-2025-62593Ray Jobs API Code InjectionCriticalYesVendor advisory
CVE-2026-33824Microsoft Windows IKE RCECriticalYesVendor advisory
CVE-2026-64849MLflow Model Registry SSRFCriticalYesVendor advisory
CVE-2021-23758Ajax.NET Professional RCECriticalYesVendor advisory
CVE-2026-21962Oracle WebLogic Proxy BypassCriticalYesVendor advisory
CVE-2026-73570Zimbra Command InjectionCriticalYesVendor advisory
CVE-2026-72530TrueConf Server Code InjectionCriticalYesVendor advisory
CVE-2026-76461Cisco Secure Email SQLiCriticalYesVendor advisory
CVE-2026-66384JFrog Artifactory Path TraversalCriticalYesVendor advisory
CVE-2026-60004Gitea Diffpatch Code InjectionCriticalYesVendor advisory
CVE-2026-8452Citrix NetScaler Buffer OverflowHighYesVendor advisory
CVE-2023-49105ownCloud Auth BypassCriticalYesVendor advisory
CVE-2026-53362Linux Kernel IPv6 PrivEscCriticalYesVendor advisory
CVE-2026-19490Citrix NetScaler Auth BypassCriticalYesVendor advisory
—Twelve Zero-Days Weaponized in One Week Across Citrix, Cisco and FortinetCriticalYesVendor advisory
CVE-2026-86218N-able N-central Pre-Auth RCECriticalYesVendor advisory

KEV: listed in CISA's Known Exploited Vulnerabilities catalog. “No” means not listed when we published, not that the flaw is safe to defer.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

  • Exploited CVEs, with affected products and patch status
  • Patch priorities ranked by real-world exploitation
  • Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issuePrivacy policy