CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2008-0015

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-02-17due 2026-03-10

⋮

CVECVE-2020-7796

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

Synacor · Zimbra Collaboration Suiteremediation: past CISA due date

P2added 2026-02-17due 2026-03-10

⋮

CVECVE-2024-7694

TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

TeamT5 · ThreatSonar Anti-Ransomwareremediation: past CISA due date

P2added 2026-02-17due 2026-03-10

⋮

CVECVE-2026-2441

Google Chromium CSS Use-After-Free Vulnerability

Google · Chromiumremediation: past CISA due date

P2added 2026-02-17due 2026-03-10

⋮

CVECVE-2026-1731

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-02-13due 2026-02-16

⋮

CVECVE-2024-43468

Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft · Configuration Managerremediation: past CISA due date

P2added 2026-02-12due 2026-03-05

⋮

CVECVE-2025-15556

Notepad++ Download of Code Without Integrity Check Vulnerability

Notepad++ · Notepad++remediation: past CISA due date

P2added 2026-02-12due 2026-03-05

⋮

CVECVE-2025-40536

SolarWinds Web Help Desk Security Control Bypass Vulnerability

SolarWinds · Web Help Deskremediation: past CISA due date

P2added 2026-02-12due 2026-02-15

⋮

CVECVE-2026-20700

Apple Multiple Buffer Overflow Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2026-02-12due 2026-03-05

⋮

CVECVE-2026-21510

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-02-10due 2026-03-03

⋮

CVECVE-2026-21513

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-02-10due 2026-03-03

⋮

CVECVE-2026-21514

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2026-02-10due 2026-03-03

⋮

CVECVE-2026-21519

Microsoft Windows Type Confusion Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-02-10due 2026-03-03

⋮

CVECVE-2026-21525

Microsoft Windows NULL Pointer Dereference Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-02-10due 2026-03-03

⋮

CVECVE-2026-21533

Microsoft Windows Improper Privilege Management Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-02-10due 2026-03-03

⋮

CVECVE-2025-11953

React Native Community CLI OS Command Injection Vulnerability

React Native Community · CLIremediation: past CISA due date

P2added 2026-02-05due 2026-02-26

⋮

CVECVE-2026-24423

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

SmarterTools · SmarterMailremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-02-05due 2026-02-26

⋮

CVECVE-2019-19006

Sangoma FreePBX Improper Authentication Vulnerability

Sangoma · FreePBXremediation: past CISA due date

P2added 2026-02-03due 2026-02-24

⋮

CVECVE-2021-39935

GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

GitLab · Community and Enterprise Editionsremediation: past CISA due date

P2added 2026-02-03due 2026-02-24

⋮

CVECVE-2025-40551

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds · Web Help Deskremediation: past CISA due date

P2added 2026-02-03due 2026-02-06

⋮

CVECVE-2025-64328

Sangoma FreePBX OS Command Injection Vulnerability

Sangoma · FreePBX remediation: past CISA due date

P2added 2026-02-03due 2026-02-24

⋮

CVECVE-2026-1281

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM)remediation: past CISA due date

P2added 2026-01-29due 2026-02-01

⋮

CVECVE-2026-24858

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Fortinet · Multiple Productsremediation: past CISA due date

P2added 2026-01-27due 2026-01-30

⋮

CVECVE-2018-14634

Linux Kernel Integer Overflow Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-01-26due 2026-02-16

⋮

CVECVE-2025-52691

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

SmarterTools · SmarterMailremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-01-26due 2026-02-16

⋮

CVECVE-2026-21509

Microsoft Office Security Feature Bypass Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2026-01-26due 2026-02-16

⋮

CVECVE-2026-23760

SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

SmarterTools · SmarterMailremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2026-01-26due 2026-02-16

⋮

CVECVE-2026-24061

GNU InetUtils Argument Injection Vulnerability

GNU · InetUtilsremediation: past CISA due date

P2added 2026-01-26due 2026-02-16

⋮

CVECVE-2024-37079

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

Broadcom · VMware vCenter Serverremediation: past CISA due date

P2added 2026-01-23due 2026-02-13

⋮

CVECVE-2025-31125

Vite Vitejs Improper Access Control Vulnerability

Vite · Vitejsremediation: past CISA due date

P2added 2026-01-22due 2026-02-12

⋮

CVECVE-2025-34026

Versa Concerto Improper Authentication Vulnerability

Versa · Concertoremediation: past CISA due date

P2added 2026-01-22due 2026-02-12

⋮

CVECVE-2025-54313

Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

Prettier · eslint-config-prettierremediation: past CISA due date

P2added 2026-01-22due 2026-02-12

⋮

CVECVE-2025-68645

Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2026-01-22due 2026-02-12

⋮

CVECVE-2026-20045

Cisco Unified Communications Products Code Injection Vulnerability

Cisco · Unified Communications Managerremediation: past CISA due date

P2added 2026-01-21due 2026-02-11

⋮

CVECVE-2026-20805

Microsoft Windows Information Disclosure Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-01-13due 2026-02-03

⋮

CVECVE-2025-8110

Gogs Path Traversal Vulnerability

Gogs · Gogsremediation: past CISA due date

P2added 2026-01-12due 2026-02-02

⋮

CVECVE-2009-0556

Microsoft Office PowerPoint Code Injection Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2026-01-07due 2026-01-28

⋮

CVECVE-2025-37164

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Hewlett Packard Enterprise (HPE) · OneViewremediation: past CISA due date

P2added 2026-01-07due 2026-01-28

⋮

CVECVE-2025-14847

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

MongoDB · MongoDB and MongoDB Serverremediation: past CISA due date

P2added 2025-12-29due 2026-01-19

⋮

CVECVE-2023-52163

Digiever DS-2105 Pro Missing Authorization Vulnerability

Digiever · DS-2105 Proremediation: past CISA due date

P2added 2025-12-22due 2026-01-12

⋮

CVECVE-2025-14733

WatchGuard Firebox Out of Bounds Write Vulnerability

WatchGuard · Fireboxremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2025-12-19due 2025-12-26

⋮

CVECVE-2025-20393

Cisco Multiple Products Improper Input Validation Vulnerability

Cisco · Multiple Productsremediation: past CISA due date

P2added 2025-12-17due 2025-12-24

⋮

CVECVE-2025-40602

SonicWall SMA1000 Missing Authorization Vulnerability

SonicWall · SMA1000 applianceremediation: past CISA due date

P2added 2025-12-17due 2025-12-24

⋮

CVECVE-2025-59374

ASUS Live Update Embedded Malicious Code Vulnerability

ASUS · Live Updateremediation: past CISA due date

P2added 2025-12-17due 2026-01-07

⋮

CVECVE-2025-59718

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

Fortinet · Multiple Productsremediation: past CISA due date

P2added 2025-12-16due 2025-12-23

⋮

CVECVE-2025-14611

Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

Gladinet · CentreStack and Triofoxremediation: past CISA due date

P2added 2025-12-15due 2026-01-05

⋮

CVECVE-2025-43529

Apple Multiple Products Use-After-Free WebKit Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2025-12-15due 2026-01-05

⋮

CVECVE-2018-4063

Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

Sierra Wireless · AirLink ALEOSremediation: past CISA due date

P2added 2025-12-12due 2026-01-02

⋮

CVECVE-2025-14174

Google Chromium Out of Bounds Memory Access Vulnerability

Google · Chromiumremediation: past CISA due date

P2added 2025-12-12due 2026-01-02

⋮

CVECVE-2025-58360

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

OSGeo · GeoServerremediation: past CISA due date

P2added 2025-12-11due 2026-01-01

⋮

201–250 of ~1,722

← Prev Next →