Alerts
Vulnerabilities that are actively exploited
This list comes from CISA's Known Exploited Vulnerabilities catalog and the NVD database. No sample or invented entries - real data only, refreshed automatically.
Source data
Current threats
Updated:
| Date | Identifier | Vulnerability | Severity | Source |
|---|---|---|---|---|
| CVE-2026-20316 | Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityCisco · Secure Firewall Management Center (FMC) | Medium CVSS 5.3 | CISA KEV | |
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityFortinet · FortiOS | Medium CVSS 5.9 | CISA KEV | |
| CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityArista · VeloCloud Orchestrator | Critical CVSS 10.0 | CISA KEV | |
| CVE-2026-16232 | Check Point SmartConsole Improper Authentication VulnerabilityCheck Point · SmartConsole | Critical CVSS 9.1 | CISA KEV | |
| CVE-2026-50522 | Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityMicrosoft · SharePoint | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-60137 | WordPress Core SQL Injection VulnerabilityWordPress · Core | Medium CVSS 5.9 | CISA KEV | |
| CVE-2026-63030 | WordPress Core Interpretation Conflict VulnerabilityWordPress · Core | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-0770 | Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityLangflow · Langflow | Critical CVSS 9.8 | CISA KEV | |
| CVE-2021-27137 | DD-WRT Stack-Based Buffer Overflow VulnerabilityDD-WRT · DD-WRT | High CVSS 8.1 | CISA KEV | |
| CVE-2026-58644 | Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityMicrosoft · SharePoint | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet · FortiSandbox | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet · FortiSandbox | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-46817 | Oracle E-Business Suite Improper Privilege Management VulnerabilityOracle · E-Business Suite | Critical CVSS 9.8 | CISA KEV | |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityKNX Association · KNX Protocol Connection Authorization Option 1 | High CVSS 7.5 | CISA KEV | |
| CVE-2026-56155 | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control VulnerabilityMicrosoft · Active Directory Federation Services | High CVSS 7.8 | CISA KEV | |
| CVE-2026-56164 | Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityMicrosoft · SharePoint Server | Medium CVSS 5.3 | CISA KEV | |
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySonicWall · SMA1000 Appliances | Critical CVSS 10.0 | CISA KEV | |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection VulnerabilitySonicWall · SMA1000 Appliances | High CVSS 7.2 | CISA KEV | |
| CVE-2008-4128 | Cisco IOS Cross-Site Request Forgery VulnerabilityCisco · IOS | Medium CVSS 4.3 | CISA KEV | |
| CVE-2026-56291 | Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityBalbooa · Forms | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-48939 | iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityiCagenda · iCagenda | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-48908 | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityJoomShaper · SP Page Builder | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-55255 | Langflow Authorization Bypass Through User-Controlled Key VulnerabilityLangflow · Langflow | High CVSS 8.4 | CISA KEV | |
| CVE-2026-56290 | Joomlack Page Builder Improper Access Control VulnerabilityJoomlack · Page Builder | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-48282 | Adobe ColdFusion Path Traversal VulnerabilityAdobe · ColdFusion | Critical CVSS 10.0 | CISA KEV | |
| CVE-2026-45659 | Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityMicrosoft · SharePoint Server | High CVSS 8.8 | CISA KEV | |
| CVE-2026-48558 | SimpleHelp Authentication Bypass VulnerabilitySimpleHelp · SimpleHelp | Critical CVSS 10.0 | CISA KEV | |
| CVE-2026-12569 | PTC Windchill and FlexPLM Improper Input Validation VulnerabilityPTC · Windchill and FlexPLM | Critical CVSS 9.8 | CISA KEV | |
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityCisco · Unified Communications Manager | High CVSS 8.6 | CISA KEV | |
| CVE-2025-67038 | Lantronix EDS5000 Code Injection VulnerabilityLantronix · EDS5000 | Critical CVSS 9.8 | CISA KEV |
No entries match the current filters.