CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 2h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2025-6218

RARLAB WinRAR Path Traversal Vulnerability

RARLAB · WinRARremediation: past CISA due date

P2added 2025-12-09due 2025-12-30

⋮

CVECVE-2025-62221

Microsoft Windows Use After Free Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-12-09due 2025-12-30

⋮

CVECVE-2022-37055

D-Link Routers Buffer Overflow Vulnerability

D-Link · Routersremediation: past CISA due date

P2added 2025-12-08due 2025-12-29

⋮

CVECVE-2025-66644

Array Networks ArrayOS AG OS Command Injection Vulnerability

Array Networks · ArrayOS AGremediation: past CISA due date

P2added 2025-12-08due 2025-12-29

⋮

CVECVE-2025-55182

Meta React Server Components Remote Code Execution Vulnerability

Meta · React Server Componentsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2025-12-05due 2025-12-12

⋮

CVECVE-2021-26828

OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

OpenPLC · ScadaBRremediation: past CISA due date

P2added 2025-12-03due 2025-12-24

⋮

CVECVE-2025-48572

Android Framework Privilege Escalation Vulnerability

Android · Frameworkremediation: past CISA due date

P2added 2025-12-02due 2025-12-23

⋮

CVECVE-2025-48633

Android Framework Information Disclosure Vulnerability

Android · Frameworkremediation: past CISA due date

P2added 2025-12-02due 2025-12-23

⋮

CVECVE-2021-26829

OpenPLC ScadaBR Cross-site Scripting Vulnerability

OpenPLC · ScadaBRremediation: past CISA due date

P2added 2025-11-28due 2025-12-19

⋮

CVECVE-2025-61757

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Oracle · Fusion Middlewareremediation: past CISA due date

P2added 2025-11-21due 2025-12-12

⋮

CVECVE-2025-13223

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2025-11-19due 2025-12-10

⋮

CVECVE-2025-58034

Fortinet FortiWeb OS Command Injection Vulnerability

Fortinet · FortiWebremediation: past CISA due date

P2added 2025-11-18due 2025-11-25

⋮

CVECVE-2025-64446

Fortinet FortiWeb Path Traversal Vulnerability

Fortinet · FortiWebremediation: past CISA due date

P2added 2025-11-14due 2025-11-21

⋮

CVECVE-2025-12480

Gladinet Triofox Improper Access Control Vulnerability

Gladinet · Triofoxremediation: past CISA due date

P2added 2025-11-12due 2025-12-03

⋮

CVECVE-2025-62215

Microsoft Windows Race Condition Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-11-12due 2025-12-03

⋮

CVECVE-2025-9242

WatchGuard Firebox Out-of-Bounds Write Vulnerability

WatchGuard · Fireboxremediation: past CISA due date

P2added 2025-11-12due 2025-12-03

⋮

CVECVE-2025-21042

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2025-11-10due 2025-12-01

⋮

CVECVE-2025-11371

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Gladinet · CentreStack and Triofoxremediation: past CISA due date

P2added 2025-11-04due 2025-11-25

⋮

CVECVE-2025-48703

CWP Control Web Panel OS Command Injection Vulnerability

CWP · Control Web Panelremediation: past CISA due date

P2added 2025-11-04due 2025-11-25

⋮

CVECVE-2025-24893

XWiki Platform Eval Injection Vulnerability

XWiki · Platformremediation: past CISA due date

P2added 2025-10-30due 2025-11-20

⋮

CVECVE-2025-41244

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Broadcom · VMware Aria Operations and VMware Toolsremediation: past CISA due date

P2added 2025-10-30due 2025-11-20

⋮

CVECVE-2025-6204

Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

Dassault Systèmes · DELMIA Aprisoremediation: past CISA due date

P2added 2025-10-28due 2025-11-18

⋮

CVECVE-2025-6205

Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

Dassault Systèmes · DELMIA Aprisoremediation: past CISA due date

P2added 2025-10-28due 2025-11-18

⋮

CVECVE-2025-54236

Adobe Commerce and Magento Improper Input Validation Vulnerability

Adobe · Commerce and Magentoremediation: past CISA due date

P2added 2025-10-24due 2025-11-14

⋮

CVECVE-2025-59287

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-10-24due 2025-11-14

⋮

CVECVE-2025-61932

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

Motex · LANSCOPE Endpoint Managerremediation: past CISA due date

P2added 2025-10-22due 2025-11-12

⋮

CVECVE-2022-48503

Apple Multiple Products Unspecified Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2025-10-20due 2025-11-10

⋮

CVECVE-2025-2746

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Kentico · Xperience CMSremediation: past CISA due date

P2added 2025-10-20due 2025-11-10

⋮

CVECVE-2025-2747

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Kentico · Xperience CMSremediation: past CISA due date

P2added 2025-10-20due 2025-11-10

⋮

CVECVE-2025-33073

Microsoft Windows SMB Client Improper Access Control Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-10-20due 2025-11-10

⋮

CVECVE-2025-61884

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Oracle · E-Business Suiteremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2025-10-20due 2025-11-10

⋮

CVECVE-2025-54253

Adobe Experience Manager Forms Code Execution Vulnerability

Adobe · Experience Manager (AEM) Formsremediation: past CISA due date

P2added 2025-10-15due 2025-11-05

⋮

CVECVE-2016-7836

SKYSEA Client View Improper Authentication Vulnerability

SKYSEA · Client Viewremediation: past CISA due date

P2added 2025-10-14due 2025-11-04

⋮

CVECVE-2025-24990

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-10-14due 2025-11-04

⋮

CVECVE-2025-47827

IGEL OS Use of a Key Past its Expiration Date Vulnerability

IGEL · IGEL OSremediation: past CISA due date

P2added 2025-10-14due 2025-11-04

⋮

CVECVE-2025-59230

Microsoft Windows Improper Access Control Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-10-14due 2025-11-04

⋮

CVECVE-2021-43798

Grafana Path Traversal Vulnerability

Grafana Labs · Grafanaremediation: past CISA due date

P2added 2025-10-09due 2025-10-30

⋮

CVECVE-2025-27915

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2025-10-07due 2025-10-28

⋮

CVECVE-2010-3765

Mozilla Multiple Products Remote Code Execution Vulnerability

Mozilla · Multiple Productsremediation: past CISA due date

P2added 2025-10-06due 2025-10-27

⋮

CVECVE-2010-3962

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2025-10-06due 2025-10-27

⋮

CVECVE-2011-3402

Microsoft Windows Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-10-06due 2025-10-27

⋮

CVECVE-2013-3918

Microsoft Windows Out-of-Bounds Write Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2025-10-06due 2025-10-27

⋮

CVECVE-2021-22555

Linux Kernel Heap Out-of-Bounds Write Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2025-10-06due 2025-10-27

⋮

CVECVE-2021-43226

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2025-10-06due 2025-10-27

⋮

CVECVE-2025-61882

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suiteremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2025-10-06due 2025-10-27

⋮

CVECVE-2014-6278

GNU Bash OS Command Injection Vulnerability

GNU · GNU Bashremediation: past CISA due date

P2added 2025-10-02due 2025-10-23

⋮

CVECVE-2015-7755

Juniper ScreenOS Improper Authentication Vulnerability

Juniper · ScreenOSremediation: past CISA due date

P2added 2025-10-02due 2025-10-23

⋮

CVECVE-2017-1000353

Jenkins Remote Code Execution Vulnerability

Jenkins · Jenkinsremediation: past CISA due date

P2added 2025-10-02due 2025-10-23

⋮

CVECVE-2025-21043

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2025-10-02due 2025-10-23

⋮

CVECVE-2025-4008

Smartbedded Meteobridge Command Injection Vulnerability

Smartbedded · Meteobridgeremediation: past CISA due date

P2added 2025-10-02due 2025-10-23

⋮

251–300 of ~1,722

← Prev Next →