CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2026-48907

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

Widget Factory · Joomla Content Editor remediation: past CISA due date

P2added 2026-06-16due 2026-06-19

⋮

CVECVE-2026-20262

Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

Cisco · Catalyst SD-WAN Managerremediation: past CISA due date

P2added 2026-06-15due 2026-06-29

⋮

CVECVE-2026-54420

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

LiteSpeed · cPanel Pluginremediation: past CISA due date

P2added 2026-06-15due 2026-06-18

⋮

CVECVE-2026-35273

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Oracle · PeopleSoft Enterprise PeopleToolsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-06-12due 2026-06-15

⋮

CVECVE-2026-10520

Ivanti Sentry OS Command Injection Vulnerability

Ivanti · Sentryremediation: past CISA due date

P2added 2026-06-11due 2026-06-14

⋮

CVECVE-2026-11645

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2026-06-09due 2026-06-23

⋮

CVECVE-2026-20245

Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

Cisco · Catalyst SD-WAN Managerremediation: past CISA due date

P2added 2026-06-09due 2026-06-23

⋮

CVECVE-2026-7473

Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

Arista · Extensible Operating Systemremediation: past CISA due date

P2added 2026-06-09due 2026-06-23

⋮

CVECVE-2026-42271

BerriAI LiteLLM Command Injection Vulnerability

BerriAI · LiteLLMremediation: past CISA due date

P2added 2026-06-08due 2026-06-22

⋮

CVECVE-2026-50751

Check Point Security Gateway Improper Authentication Vulnerability

Check Point · Security Gatewayremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-06-08due 2026-06-11

⋮

CVECVE-2026-28318

SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

SolarWinds · Serv-Uremediation: past CISA due date

P2added 2026-06-05due 2026-06-19

⋮

CVECVE-2026-45247

Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

Mirasvit · Mirasvit Full Page Cache Warmerremediation: past CISA due date

P2added 2026-06-03due 2026-06-06

⋮

CVECVE-2022-0492

Linux Kernel Improper Authentication Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-06-02due 2026-06-05

⋮

CVECVE-2025-48595

Android Framework Integer Overflow Vulnerability

Android · Frameworkremediation: past CISA due date

P2added 2026-06-02due 2026-06-05

⋮

CVECVE-2024-21182

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2026-06-01due 2026-06-04

⋮

CVECVE-2026-0257

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-05-29due 2026-06-01

⋮

CVECVE-2026-45321

TanStack Unspecified Vulnerability

TanStack · TanStackremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-05-27due 2026-06-10

⋮

CVECVE-2026-48027

Nx Console Embedded Malicious Code Vulnerability

Nx · Nx Consoleremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-05-27due 2026-06-10

⋮

CVECVE-2026-8398

Daemon Tools Lite Embedded Malicious Code Vulnerability

Daemon · Daemon Tools Literemediation: past CISA due date

P2added 2026-05-27due 2026-05-30

⋮

CVECVE-2026-48172

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

LiteSpeed · cPanel Pluginremediation: past CISA due date

P2added 2026-05-26due 2026-05-29

⋮

CVECVE-2026-9082

Drupal Core SQL Injection Vulnerability

Drupal · Coreremediation: past CISA due date

P2added 2026-05-22due 2026-05-27

⋮

CVECVE-2025-34291

Langflow Origin Validation Error Vulnerability

Langflow · Langflowremediation: past CISA due date

P2added 2026-05-21due 2026-06-04

⋮

CVECVE-2026-34926

Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

Trend Micro · Apex Oneremediation: past CISA due date

P2added 2026-05-21due 2026-06-04

⋮

CVECVE-2008-4250

Microsoft Windows Buffer Overflow Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-05-20due 2026-06-03

⋮

CVECVE-2009-1537

Microsoft DirectX NULL Byte Overwrite Vulnerability

Microsoft · DirectXremediation: past CISA due date

P2added 2026-05-20due 2026-06-03

⋮

CVECVE-2009-3459

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

P2added 2026-05-20due 2026-06-03

⋮

CVECVE-2010-0249

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2026-05-20due 2026-06-03

⋮

CVECVE-2010-0806

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2026-05-20due 2026-06-03

⋮

CVECVE-2026-41091

Microsoft Defender Link Following Vulnerability

Microsoft · Defenderremediation: past CISA due date

P2added 2026-05-20due 2026-06-03

⋮

CVECVE-2026-45498

Microsoft Defender Denial of Service Vulnerability

Microsoft · Defenderremediation: past CISA due date

P2added 2026-05-20due 2026-06-03

⋮

CVECVE-2026-42897

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Microsoft · Microsoftremediation: past CISA due date

P2added 2026-05-15due 2026-05-29

⋮

CVECVE-2026-20182

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco · Catalyst SD-WANremediation: past CISA due date

P2added 2026-05-14due 2026-05-17

⋮

CVECVE-2026-42208

BerriAI LiteLLM SQL Injection Vulnerability

BerriAI · LiteLLMremediation: past CISA due date

P2added 2026-05-08due 2026-05-11

⋮

CVECVE-2026-6973

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM)remediation: past CISA due date

P2added 2026-05-07due 2026-05-10

⋮

CVECVE-2026-0300

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

Palo Alto Networks · PAN-OSremediation: past CISA due date

P2added 2026-05-06due 2026-05-09

⋮

CVECVE-2026-31431

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-05-01due 2026-05-15

⋮

CVECVE-2026-41940

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros · cPanel & WHM and WP2 (WordPress Squared)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-04-30due 2026-05-03

⋮

CVECVE-2024-1708

ConnectWise ScreenConnect Path Traversal Vulnerability

ConnectWise · ScreenConnectremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-04-28due 2026-05-12

⋮

CVECVE-2026-32202

Microsoft Windows Protection Mechanism Failure Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-04-28due 2026-05-12

⋮

CVECVE-2024-57726

SimpleHelp Missing Authorization Vulnerability

SimpleHelp · SimpleHelpremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-04-24due 2026-05-08

⋮

CVECVE-2024-57728

SimpleHelp Path Traversal Vulnerability

SimpleHelp · SimpleHelpremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-04-24due 2026-05-08

⋮

CVECVE-2024-7399

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Samsung · MagicINFO 9 Serverremediation: past CISA due date

P2added 2026-04-24due 2026-05-08

⋮

CVECVE-2025-29635

D-Link DIR-823X Command Injection Vulnerability

D-Link · DIR-823Xremediation: past CISA due date

P2added 2026-04-24due 2026-05-08

⋮

CVECVE-2026-39987

Marimo Remote Code Execution Vulnerability

Marimo · Marimoremediation: past CISA due date

P2added 2026-04-23due 2026-05-07

⋮

CVECVE-2026-33825

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Microsoft · Defenderremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-04-22due 2026-05-06

⋮

CVECVE-2023-27351

PaperCut NG/MF Improper Authentication Vulnerability

PaperCut · NG/MFremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-04-20due 2026-05-04

⋮

CVECVE-2024-27199

JetBrains TeamCity Relative Path Traversal Vulnerability

JetBrains · TeamCityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-04-20due 2026-05-04

⋮

CVECVE-2025-2749

Kentico Xperience Path Traversal Vulnerability

Kentico · Kentico Xperienceremediation: past CISA due date

P2added 2026-04-20due 2026-05-04

⋮

CVECVE-2025-32975

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

Quest · KACE Systems Management Appliance (SMA)remediation: past CISA due date

P2added 2026-04-20due 2026-05-04

⋮

CVECVE-2025-48700

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2026-04-20due 2026-04-23

⋮

101–150 of ~1,722

← Prev Next →