How often is this vulnerability database updated?

This page syncs against the official CISA KEV feed every night. Newly added CVEs are enriched with CVSS scoring from the NVD and given an AI-generated plain-English breakdown covering what the vulnerability is, why it matters, and what action to take.

What does it mean if a vulnerability has known ransomware use?

CISA flags entries that have been directly used in ransomware campaigns. These represent the highest real-world urgency in the catalog and should be prioritized for immediate patching or mitigation ahead of other entries.

Updated Nightly

Known Exploited Vulnerabilities Database

Q: What is the CISA Known Exploited Vulnerabilities (KEV) catalog?

The KEV catalog is an authoritative list maintained by the US Cybersecurity and Infrastructure Security Agency (CISA) of CVEs that are known to be actively exploited in the wild. It is the single best signal for prioritizing patching, since every entry represents a real-world attack, not a theoretical risk.

A live mirror of the CISA Known Exploited Vulnerabilities (KEV) catalog — CVEs confirmed to be actively exploited in the wild, enriched nightly with CVSS scoring and AI-generated plain-English breakdowns.

1,766

Tracked CVEs

361

Linked to ransomware

Added in last 7 days

Today's Top Exploited Vulnerabilities

AI-generated breakdowns of the most recently catalogued, actively exploited vulnerabilities.

CVE-2026-111357

Ivanti Connect Secure

Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

CVE-2026-111357 is a flaw in Ivanti Connect Secure where the system improperly trusts internal configuration data without proper authentication checks. This allows an attacker who already has local authenticated access to escalate their permissions to full root control. Threat actors can also chain this weakness with CVE-2026-104935 and CVE-2026-118527 to achieve broader compromise.

CVSS 7.0

CVE-2026-118527

Ivanti Connect Secure

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Ivanti Connect Secure contains a vulnerability where predictable numbers or identifiers are generated by the system. This allows a remote authenticated attacker to upload custom files directly to a known location on disk. Attackers can also chain this vulnerability with CVE-2026-104935 and CVE-2026-111357 to deepen their access.

CVE-2026-76418

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability

A flaw in the Remote Access SSL VPN service of Cisco Secure Firewall ASA and FTD software allows an unauthenticated remote attacker to crash the firewall. This occurs due to a logic error when secondary authentication is configured on a tunnel group. An attacker can trigger the issue by sending a crafted request during an SSL VPN connection attempt, forcing the device into an unexpected reload.

CVSS 8.6

Latest Catalogued Vulnerabilities

Most recently added entries in the CISA KEV catalog, ordered by date added.

CVE ID	Vendor / Product	Date Added	CVSS
CVE-2026-118527	Ivanti Connect Secure Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability	30 Oct 2026	—	Details
CVE-2026-111357	Ivanti Connect Secure Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability	30 Oct 2026	7.0	Details
CVE-2026-97229	GitLab Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability	29 Oct 2026	—	Details
CVE-2026-76418	Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability	29 Oct 2026	8.6	Details
CVE-2026-46300	Linux Kernel Linux Kernel Missing Initialization of a Variable Vulnerability	28 Oct 2026	7.8	Details
CVE-2026-41709	Broadcom VMware ESX Broadcom VMWare ESX Insufficient Logging Vulnerability	28 Oct 2026	—	Details
CVE-2026-48356	Adobe Commerce and Magento Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability	27 Oct 2026	—	Details
CVE-2026-111497	Google Brotli Google Brotli Unchecked Return Value Vulnerability	27 Oct 2026	—	Details
CVE-2026-109619	PHP Group PHP PHP Stale Internal Request-State Vulnerability	26 Oct 2026	8.1	Details
CVE-2026-109618	PHP Group PHP PHP Memory Corruption Vulnerability	26 Oct 2026	—	Details
CVE-2026-114625	Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator SQL Injection Vulnerability	23 Oct 2026	—	Details
CVE-2026-110447	Collabora Collabora Online – Built-in CODE Server Collabora Online – Built-in CODE Server OS Command Injection Vulnerability	23 Oct 2026	—	Details
CVE-2026-96656	Plex Media Server Plex Media Server External Control of File Name or Path Vulnerability	20 Oct 2026	7.2	Details
CVE-2026-96655	Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability	20 Oct 2026	4.3	Details
CVE-2026-96654	Plex Media Server Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability	20 Oct 2026	6.5	Details
CVE-2026-96652	Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability	20 Oct 2026	4.3	Details
CVE-2026-110936	Siemens Software Center Siemens Software Center Uncontrolled Search Path Element Vulnerability	20 Oct 2026	6.7	Details
CVE-2026-106931	EG Secure Solutions SiteGuard Server Edition EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability	20 Oct 2026	7.8	Details
CVE-2026-102764	BeyondTrust Remote Support BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability	16 Oct 2026	9.8	Details
CVE-2025-61624	Fortinet Multiple Products Fortinet Multiple Products Path Traversal Vulnerability	16 Oct 2026	6.0	Details
CVE-2026-21589	Atlassian Multiple Products Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability	15 Oct 2026	7.5	Details
CVE-2026-76519	Cisco Secure Email Gateway Cisco Secure Email Gateway Relative Path Traversal Vulnerability	14 Oct 2026	—	Details
CVE-2026-105134	Ahsay AhsayCBS Ahsay AhsayCBS Command Injection Vulnerability	14 Oct 2026	—	Details
CVE-2026-105133	Ahsay AhsayCBS Ahsay AhsayCBS Improper Authentication Vulnerability	14 Oct 2026	—	Details
CVE-2026-0322	Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Code Injection Vulnerability	14 Oct 2026	—	Details
CVE-2026-96951	Microsoft Windows Microsoft Windows Command Injection Vulnerability	13 Oct 2026	8.8	Details
CVE-2026-104935	Ivanti Connect Secure Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability	13 Oct 2026	8.6	Details
CVE-2023-22894	Strapi Strapi Strapi Cleartext Storage of Sensitive Information Vulnerability	08 Oct 2026	4.9	Details
CVE-2021-3199	ONLYOFFICE Docs ONLYOFFICE Docs Server Path Traversal Vulnerability	08 Oct 2026	9.8	Details
CVE-2016-3081	Apache Struts Apache Struts Command Injection Vulnerability	08 Oct 2026	8.1	Details
CVE-2015-5477	ISC BIND ISC BIND Data Processing Errors Vulnerability	08 Oct 2026	—	Details
CVE-2015-3306	ProFTPD ProFTPD ProFTPD Improper Access Control Vulnerability	08 Oct 2026	10.0	Details
CVE-2026-88779	Citrix NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	04 Oct 2026	—	Details
CVE-2026-102490	Zammad GmbH Zammad Zammad GmbH Zammad Improper Privilege Management Vulnerability	02 Oct 2026	9.8	Details
CVE-2026-102489	Zammad GmbH Zammad Zammad GmbH Zammad Session Fixation Vulnerability	02 Oct 2026	9.8	Details
CVE-2026-104286	Fortinet FortiMail Fortinet FortiMail Path Traversal Vulnerability	01 Oct 2026	9.8	Details
CVE-2026-76504	Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability	30 Sept 2026	—	Details
CVE-2026-86950	Apple Multiple Products Apple Multiple Products Out-of-Bounds Write Vulnerability	29 Sept 2026	8.8	Details
CVE-2026-88772	Citrix NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	27 Sept 2026	—	Details
CVE-2026-88771	Citrix NetScaler Citrix NetScaler Improper Input Validation Vulnerability	27 Sept 2026	—	Details
CVE-2026-87902	WordPress Core WordPress Core Remote File Inclusion Vulnerability	25 Sept 2026	8.1	Details
CVE-2026-67279	MikroTik RouterOS Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability	25 Sept 2026	6.5	Details
CVE-2026-65660	Microsoft SharePoint Microsoft SharePoint Code Injection Vulnerability	25 Sept 2026	8.8	Details
CVE-2026-71362	Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability	24 Sept 2026	—	Details
CVE-2026-5430	WSO2 Multiple Products WSO2 Multiple Products Path Traversal Vulnerability	24 Sept 2026	10.0	Details
CVE-2026-94127	F5 BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability	22 Sept 2026	9.8	Details
CVE-2026-93952	Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator Improper Input Validation Vulnerability	22 Sept 2026	—	Details
CVE-2026-93616	Check Point Multiple Products Check Point Multiple Products Path Traversal Vulnerability	22 Sept 2026	9.8	Details
CVE-2026-85102	Check Point Multiple Products Check Point Multiple Products Improper Certificate Validation Vulnerability	22 Sept 2026	9.8	Details
CVE-2026-7273	Zyxel GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability	21 Sept 2026	8.8	Details
CVE-2026-53266	Linux Kernel Linux Kernel Out-of-Bounds Write Vulnerability	18 Sept 2026	—	Details
CVE-2025-39964	Linux Kernel Linux Kernel Race Condition Vulnerability	18 Sept 2026	7.8	Details
CVE-2025-39682	Linux Kernel Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability	18 Sept 2026	9.8	Details
CVE-2026-87886	Acronis Backup Acronis Backup Incorrect Default Permissions Vulnerability	16 Sept 2026	—	Details
CVE-2026-76460	Cisco Identity Services Engine Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	16 Sept 2026	10.0	Details
CVE-2026-58704	Google Pixel Google Pixel Improper Authorization Vulnerability	16 Sept 2026	—	Details
CVE-2026-76461	Cisco Secure Email Gateway Cisco Secure Email Gateway SQL Injection Vulnerability	14 Sept 2026	9.8	Details
CVE-2026-85706	GitLab Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability	11 Sept 2026	10.0	Details
CVE-2026-84869	ConnectWise ScreenConnect ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability	11 Sept 2026	9.9	Details
CVE-2026-42018	JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability	11 Sept 2026	7.5	Details

Sources & Methodology

This catalog mirrors the official CISA Known Exploited Vulnerabilities catalog via a nightly sync. Newly added entries are enriched with CVSS scoring from the NIST National Vulnerability Database and given an AI-generated summary, impact assessment, and recommended action. AI breakdowns are generated from the underlying CISA and NVD data and should be treated as a starting point, not a substitute for your own risk assessment.

Patch With Confidence

Know Which Vulnerabilities Actually Matter

A VAPT assessment tells you which of these actively exploited vulnerabilities exist in your own environment. CRS delivers continuous, compliance-grade penetration testing across Africa and North America.

Explore VAPT Services Contact Us