Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.
CVECVE-2026-8037
Progress LoadMaster Command Injection Vulnerability
Progress · LoadMasterremediation: CISA due date imminent
P2added 2026-08-07due 2026-08-10
CVECVE-2026-63077
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
JetBrains · TeamCityremediation: past CISA due date
P2added 2026-08-05due 2026-08-08
CVECVE-2026-9198
IBM Langflow Code Injection Vulnerability
IBM · Langflowremediation: past CISA due date
P2added 2026-08-04due 2026-08-07
CVECVE-2026-18556
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able · N-centralremediation: past CISA due date
P2added 2026-08-04due 2026-08-07
CVECVE-2026-34486
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Apache · Tomcatremediation: past CISA due date
P2added 2026-08-04due 2026-08-07
CVECVE-2026-18577
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able · N-centralremediation: past CISA due date
P2added 2026-08-03due 2026-08-06
CVECVE-2026-20316
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Cisco · Secure Firewall Management Center (FMC)remediation: past CISA due date
P2added 2026-07-29due 2026-08-01
CVECVE-2025-68686
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet · FortiOSremediation: CISA due date imminent
P2added 2026-07-27due 2026-08-10
CVECVE-2026-16812
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Arista · VeloCloud Orchestratorremediation: past CISA due date
P2added 2026-07-27due 2026-07-30
CVECVE-2026-16232MENA
Check Point SmartConsole Improper Authentication Vulnerability
Check Point · SmartConsoleremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-27-checkpoint-weekly
P2added 2026-07-22due 2026-07-25
CVECVE-2026-50522MENA
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft · SharePointremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-27-checkpoint-weekly
P2added 2026-07-22due 2026-07-25
CVECVE-2026-60137
WordPress Core SQL Injection Vulnerability
WordPress · Coreremediation: past CISA due date
P2added 2026-07-21due 2026-08-04
CVECVE-2026-63030MENA
WordPress Core Interpretation Conflict Vulnerability
WordPress · Coreremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly
P2added 2026-07-21due 2026-07-24
CVECVE-2026-0770
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Langflow · Langflowremediation: past CISA due date
P2added 2026-07-21due 2026-07-24
CVECVE-2021-27137
DD-WRT Stack-Based Buffer Overflow Vulnerability
DD-WRT · DD-WRTremediation: past CISA due date
P2added 2026-07-21due 2026-07-24
CVECVE-2026-58644MENA
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft · SharePointremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly
P2added 2026-07-16due 2026-07-19
CVECVE-2026-25089
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · FortiSandboxremediation: past CISA due date
P2added 2026-07-16due 2026-07-19
CVECVE-2026-39808
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet · FortiSandboxremediation: past CISA due date
P2added 2026-07-16due 2026-07-19
CVECVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
Oracle · E-Business Suiteremediation: past CISA due date
P2added 2026-07-15due 2026-07-18
CVECVE-2023-4346
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
KNX Association · KNX Protocol Connection Authorization Option 1remediation: past CISA due date
P2added 2026-07-15due 2026-07-29
CVECVE-2026-56155MENA
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft · Active Directory Federation Servicesremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly
P2added 2026-07-14due 2026-07-28
CVECVE-2026-56164MENA
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
Microsoft · SharePoint Serverremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-20-checkpoint-weekly
P2added 2026-07-14due 2026-07-17
CVECVE-2026-15409
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliancesremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-07-14due 2026-07-17
CVECVE-2026-15410
SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall · SMA1000 Appliancesremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-07-14due 2026-07-17
CVECVE-2008-4128
Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco · IOSremediation: past CISA due date
P2added 2026-07-13due 2026-07-16
CVECVE-2026-56291
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
Balbooa · Formsremediation: past CISA due date
P2added 2026-07-10due 2026-07-13
CVECVE-2026-48939
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
iCagenda · iCagendaremediation: past CISA due date
P2added 2026-07-10due 2026-07-13
CVECVE-2026-48908
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
JoomShaper · SP Page Builderremediation: past CISA due date
P2added 2026-07-07due 2026-07-10
CVECVE-2026-55255
Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow · Langflowremediation: past CISA due date
P2added 2026-07-07due 2026-07-10
CVECVE-2026-56290
Joomlack Page Builder Improper Access Control Vulnerability
Joomlack · Page Builderremediation: past CISA due date
P2added 2026-07-07due 2026-07-10
CVECVE-2026-48282
Adobe ColdFusion Path Traversal Vulnerability
Adobe · ColdFusionremediation: past CISA due date
P2added 2026-07-07due 2026-07-10
CVECVE-2026-45659
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft · SharePoint Serverremediation: past CISA due date
P2added 2026-07-01due 2026-07-04
CVECVE-2026-48558
SimpleHelp Authentication Bypass Vulnerability
SimpleHelp · SimpleHelpremediation: past CISA due date
P2added 2026-06-29due 2026-07-02
CVECVE-2026-12569
PTC Windchill and FlexPLM Improper Input Validation Vulnerability
PTC · Windchill and FlexPLMremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-06-25due 2026-06-28
CVECVE-2026-20230
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
Cisco · Unified Communications Managerremediation: past CISA due date
P2added 2026-06-25due 2026-06-28
CVECVE-2025-67038
Lantronix EDS5000 Code Injection Vulnerability
Lantronix · EDS5000remediation: past CISA due date
P2added 2026-06-23due 2026-06-26
CVECVE-2026-34910
Ubiquiti UniFi OS Improper Input Validation Vulnerability
Ubiquiti · UniFi OSremediation: past CISA due date
P2added 2026-06-23due 2026-06-26
CVECVE-2026-34909
Ubiquiti UniFi OS Path Traversal Vulnerability
Ubiquiti · UniFi OSremediation: past CISA due date
P2added 2026-06-23due 2026-06-26
CVECVE-2026-34908
Ubiquiti UniFi OS Improper Access Control Vulnerability
Ubiquiti · UniFi OSremediation: past CISA due date
P2added 2026-06-23due 2026-06-26
CVECVE-2026-20253
Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Splunk · Enterpriseremediation: past CISA due date
P2added 2026-06-18due 2026-06-21
CVECVE-2026-48907
Widget Factory Joomla Content Editor Improper Access Control Vulnerability
Widget Factory · Joomla Content Editor remediation: past CISA due date
P2added 2026-06-16due 2026-06-19
CVECVE-2026-54420
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed · cPanel Pluginremediation: past CISA due date
P2added 2026-06-15due 2026-06-18
CVECVE-2026-20262
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
Cisco · Catalyst SD-WAN Managerremediation: past CISA due date
P2added 2026-06-15due 2026-06-29
CVECVE-2026-35273
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
Oracle · PeopleSoft Enterprise PeopleToolsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-06-12due 2026-06-15
CVECVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
Ivanti · Sentryremediation: past CISA due date
P2added 2026-06-11due 2026-06-14
CVECVE-2026-11645
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · Chromium V8remediation: past CISA due date
P2added 2026-06-09due 2026-06-23
CVECVE-2026-7473
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista · Extensible Operating Systemremediation: past CISA due date
P2added 2026-06-09due 2026-06-23
CVECVE-2026-20245
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Cisco · Catalyst SD-WAN Managerremediation: past CISA due date
P2added 2026-06-09due 2026-06-23
CVECVE-2026-42271
BerriAI LiteLLM Command Injection Vulnerability
BerriAI · LiteLLMremediation: past CISA due date
P2added 2026-06-08due 2026-06-22
CVECVE-2026-50751
Check Point Security Gateway Improper Authentication Vulnerability
Check Point · Security Gatewayremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-06-08due 2026-06-11
CVECVE-2026-28318
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
SolarWinds · Serv-Uremediation: past CISA due date
P2added 2026-06-05due 2026-06-19
CVECVE-2026-45247
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
Mirasvit · Mirasvit Full Page Cache Warmerremediation: past CISA due date
P2added 2026-06-03due 2026-06-06
CVECVE-2022-0492
Linux Kernel Improper Authentication Vulnerability
Linux · Kernelremediation: past CISA due date
P2added 2026-06-02due 2026-06-05
CVECVE-2025-48595
Android Framework Integer Overflow Vulnerability
Android · Frameworkremediation: past CISA due date
P2added 2026-06-02due 2026-06-05
CVECVE-2024-21182
Oracle WebLogic Server Unspecified Vulnerability
Oracle · WebLogic Serverremediation: past CISA due date
P2added 2026-06-01due 2026-06-04
CVECVE-2026-0257
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-05-29due 2026-06-01
CVECVE-2026-48027
Nx Console Embedded Malicious Code Vulnerability
Nx · Nx Consoleremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-05-27due 2026-06-10
CVECVE-2026-45321
TanStack Unspecified Vulnerability
TanStack · TanStackremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-05-27due 2026-06-10
CVECVE-2026-8398
Daemon Tools Lite Embedded Malicious Code Vulnerability
Daemon · Daemon Tools Literemediation: past CISA due date
P2added 2026-05-27due 2026-05-30
CVECVE-2026-48172
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
LiteSpeed · cPanel Pluginremediation: past CISA due date
P2added 2026-05-26due 2026-05-29
CVECVE-2026-9082
Drupal Core SQL Injection Vulnerability
Drupal · Coreremediation: past CISA due date
P2added 2026-05-22due 2026-05-27
CVECVE-2025-34291
Langflow Origin Validation Error Vulnerability
Langflow · Langflowremediation: past CISA due date
P2added 2026-05-21due 2026-06-04
CVECVE-2026-34926
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
Trend Micro · Apex Oneremediation: past CISA due date
P2added 2026-05-21due 2026-06-04
CVECVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
Microsoft · Windowsremediation: past CISA due date
P2added 2026-05-20due 2026-06-03
CVECVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft · DirectXremediation: past CISA due date
P2added 2026-05-20due 2026-06-03
CVECVE-2009-3459
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
Adobe · Acrobat and Readerremediation: past CISA due date
P2added 2026-05-20due 2026-06-03
CVECVE-2010-0249
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorerremediation: past CISA due date
P2added 2026-05-20due 2026-06-03
CVECVE-2010-0806
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorerremediation: past CISA due date
P2added 2026-05-20due 2026-06-03
CVECVE-2026-41091
Microsoft Defender Link Following Vulnerability
Microsoft · Defenderremediation: past CISA due date
P2added 2026-05-20due 2026-06-03
CVECVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
Microsoft · Defenderremediation: past CISA due date
P2added 2026-05-20due 2026-06-03
CVECVE-2026-42897
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft · Microsoftremediation: past CISA due date
P2added 2026-05-15due 2026-05-29
CVECVE-2026-20182
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Cisco · Catalyst SD-WANremediation: past CISA due date
P2added 2026-05-14due 2026-05-17
CVECVE-2026-42208
BerriAI LiteLLM SQL Injection Vulnerability
BerriAI · LiteLLMremediation: past CISA due date
P2added 2026-05-08due 2026-05-11
CVECVE-2026-6973
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)remediation: past CISA due date
P2added 2026-05-07due 2026-05-10
CVECVE-2026-0300
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
Palo Alto Networks · PAN-OSremediation: past CISA due date
P2added 2026-05-06due 2026-05-09
CVECVE-2026-31431
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux · Kernelremediation: past CISA due date
P2added 2026-05-01due 2026-05-15
CVECVE-2026-41940
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
WebPros · cPanel & WHM and WP2 (WordPress Squared)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-30due 2026-05-03
CVECVE-2024-1708
ConnectWise ScreenConnect Path Traversal Vulnerability
ConnectWise · ScreenConnectremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-28due 2026-05-12
CVECVE-2026-32202
Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft · Windowsremediation: past CISA due date
P2added 2026-04-28due 2026-05-12
CVECVE-2025-29635
D-Link DIR-823X Command Injection Vulnerability
D-Link · DIR-823Xremediation: past CISA due date
P2added 2026-04-24due 2026-05-08
CVECVE-2024-57728
SimpleHelp Path Traversal Vulnerability
SimpleHelp · SimpleHelpremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-24due 2026-05-08
CVECVE-2024-57726
SimpleHelp Missing Authorization Vulnerability
SimpleHelp · SimpleHelpremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-24due 2026-05-08
CVECVE-2024-7399
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung · MagicINFO 9 Serverremediation: past CISA due date
P2added 2026-04-24due 2026-05-08
CVECVE-2026-39987
Marimo Remote Code Execution Vulnerability
Marimo · Marimoremediation: past CISA due date
P2added 2026-04-23due 2026-05-07
CVECVE-2026-33825
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft · Defenderremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-22due 2026-05-06
CVECVE-2026-20122
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
Cisco · Catalyst SD-WAN Mangerremediation: past CISA due date
P2added 2026-04-20due 2026-04-23
CVECVE-2026-20133
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Cisco · Catalyst SD-WAN Managerremediation: past CISA due date
P2added 2026-04-20due 2026-04-23
CVECVE-2025-2749
Kentico Xperience Path Traversal Vulnerability
Kentico · Kentico Xperienceremediation: past CISA due date
P2added 2026-04-20due 2026-05-04
CVECVE-2023-27351
PaperCut NG/MF Improper Authentication Vulnerability
PaperCut · NG/MFremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-20due 2026-05-04
CVECVE-2025-48700
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date
P2added 2026-04-20due 2026-04-23
CVECVE-2026-20128
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Cisco · Catalyst SD-WAN Managerremediation: past CISA due date
P2added 2026-04-20due 2026-04-23
CVECVE-2025-32975
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
Quest · KACE Systems Management Appliance (SMA)remediation: past CISA due date
P2added 2026-04-20due 2026-05-04
CVECVE-2024-27199
JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains · TeamCityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-20due 2026-05-04
CVECVE-2026-34197
Apache ActiveMQ Improper Input Validation Vulnerability
Apache · ActiveMQremediation: past CISA due date
P2added 2026-04-16due 2026-04-30
CVECVE-2009-0238
Microsoft Office Remote Code Execution
Microsoft · Officeremediation: past CISA due date
P2added 2026-04-14due 2026-04-28
CVECVE-2026-32201
Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft · SharePoint Serverremediation: past CISA due date
P2added 2026-04-14due 2026-04-28
CVECVE-2025-60710
Microsoft Windows Link Following Vulnerability
Microsoft · Windowsremediation: past CISA due date
P2added 2026-04-13due 2026-04-27
CVECVE-2020-9715
Adobe Acrobat Use-After-Free Vulnerability
Adobe · Acrobatremediation: past CISA due date
P2added 2026-04-13due 2026-04-27
CVECVE-2012-1854
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft · Visual Basic for Applications (VBA)remediation: past CISA due date
P2added 2026-04-13due 2026-04-27
CVECVE-2023-21529
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-04-13due 2026-04-27
CVECVE-2023-36424
Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft · Windowsremediation: past CISA due date
P2added 2026-04-13due 2026-04-27
CVECVE-2026-21643
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet · FortiClient EMSremediation: past CISA due date
P2added 2026-04-13due 2026-04-16
CVECVE-2026-34621
Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe · Acrobat and Readerremediation: past CISA due date
P2added 2026-04-13due 2026-04-27
CVECVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)remediation: past CISA due date
P2added 2026-04-08due 2026-04-11
CVECVE-2026-35616
Fortinet FortiClient EMS Improper Access Control Vulnerability
Fortinet · FortiClient EMSremediation: past CISA due date
P2added 2026-04-06due 2026-04-09
CVECVE-2026-3502
TrueConf Client Download of Code Without Integrity Check Vulnerability
TrueConf · Clientremediation: past CISA due date
P2added 2026-04-02due 2026-04-16
CVECVE-2026-5281
Google Dawn Use-After-Free Vulnerability
Google · Dawnremediation: past CISA due date
P2added 2026-04-01due 2026-04-15
CVECVE-2026-3055
Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix · NetScalerremediation: past CISA due date
P2added 2026-03-30due 2026-04-02
CVECVE-2025-53521
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
F5 · BIG-IPremediation: past CISA due date
P2added 2026-03-27due 2026-03-30
CVECVE-2026-33634
Aquasecurity Trivy Embedded Malicious Code Vulnerability
Aquasecurity · Trivyremediation: past CISA due date
P2added 2026-03-26due 2026-04-09
CVECVE-2026-33017
Langflow Code Injection Vulnerability
Langflow · Langflowremediation: past CISA due date
P2added 2026-03-25due 2026-04-08
CVECVE-2025-32432
Craft CMS Code Injection Vulnerability
Craft CMS · Craft CMSremediation: past CISA due date
P2added 2026-03-20due 2026-04-03
CVECVE-2025-54068
Laravel Livewire Code Injection Vulnerability
Laravel · Livewireremediation: past CISA due date
P2added 2026-03-20due 2026-04-03
CVECVE-2025-43510
Apple Multiple Products Improper Locking Vulnerability
Apple · Multiple Productsremediation: past CISA due date
P2added 2026-03-20due 2026-04-03
CVECVE-2025-43520
Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple · Multiple Productsremediation: past CISA due date
P2added 2026-03-20due 2026-04-03
CVECVE-2025-31277
Apple Multiple Products Buffer Overflow Vulnerability
Apple · Multiple Productsremediation: past CISA due date
P2added 2026-03-20due 2026-04-03
CVECVE-2026-20131
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Cisco · Secure Firewall Management Center (FMC)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-03-19due 2026-03-22
CVECVE-2025-66376
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date
P2added 2026-03-18due 2026-04-01
CVECVE-2026-20963
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft · SharePointremediation: past CISA due date
P2added 2026-03-18due 2026-03-21
CVECVE-2025-47813
Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server · Wing FTP Serverremediation: past CISA due date
P2added 2026-03-16due 2026-03-30
CVECVE-2026-3910
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Google · Chromium V8remediation: past CISA due date
P2added 2026-03-13due 2026-03-27
CVECVE-2026-3909
Google Skia Out-of-Bounds Write Vulnerability
Google · Skiaremediation: past CISA due date
P2added 2026-03-13due 2026-03-27
CVECVE-2025-68613
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
n8n · n8nremediation: past CISA due date
P2added 2026-03-11due 2026-03-25
CVECVE-2021-22054
Omnissa Workspace ONE Server-Side Request Forgery
Omnissa · Workspace One UEMremediation: past CISA due date
P2added 2026-03-09due 2026-03-23
CVECVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds · Web Help Deskremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-03-09due 2026-03-12
CVECVE-2026-1603
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
Ivanti · Endpoint Manager (EPM)remediation: past CISA due date
P2added 2026-03-09due 2026-03-23
CVECVE-2017-7921
Hikvision Multiple Products Improper Authentication Vulnerability
Hikvision · Multiple Productsremediation: past CISA due date
P2added 2026-03-05due 2026-03-26
CVECVE-2021-22681MENA
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
Rockwell · Multiple Productsremediation: tied to a tracked MENA case · past CISA due datelinked case: 2026-07-22-cyberav3ngers-plc-update
P2added 2026-03-05due 2026-03-26
CVECVE-2023-43000
Apple Multiple products Use-After-Free Vulnerability
Apple · Multiple Productsremediation: past CISA due date
P2added 2026-03-05due 2026-03-26
CVECVE-2021-30952
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple · Multiple Productsremediation: past CISA due date
P2added 2026-03-05due 2026-03-26
CVECVE-2023-41974
Apple iOS and iPadOS Use-After-Free Vulnerability
Apple · iOS and iPadOSremediation: past CISA due date
P2added 2026-03-05due 2026-03-26
CVECVE-2026-22719
Broadcom VMware Aria Operations Command Injection Vulnerability
Broadcom · VMware Aria Operationsremediation: past CISA due date
P2added 2026-03-03due 2026-03-24
CVECVE-2026-21385
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Qualcomm · Multiple Chipsetsremediation: past CISA due date
P2added 2026-03-03due 2026-03-24
CVECVE-2026-20127
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
Cisco · Catalyst SD-WAN Controller and Managerremediation: past CISA due date
P2added 2026-02-25due 2026-02-27
CVECVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability
Cisco · SD-WANremediation: past CISA due date
P2added 2026-02-25due 2026-02-27
CVECVE-2026-25108
Soliton Systems K.K FileZen OS Command Injection Vulnerability
Soliton Systems K.K · FileZenremediation: past CISA due date
P2added 2026-02-24due 2026-03-17
CVECVE-2025-49113
RoundCube Webmail Deserialization of Untrusted Data Vulnerability
Roundcube · Webmailremediation: past CISA due date
P2added 2026-02-20due 2026-03-13
CVECVE-2025-68461
RoundCube Webmail Cross-site Scripting Vulnerability
Roundcube · Webmailremediation: past CISA due date
P2added 2026-02-20due 2026-03-13
CVECVE-2021-22175
GitLab Server-Side Request Forgery (SSRF) Vulnerability
GitLab · GitLabremediation: past CISA due date
P2added 2026-02-18due 2026-03-11
CVECVE-2026-22769
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
Dell · RecoverPoint for Virtual Machines (RP4VMs)remediation: past CISA due date
P2added 2026-02-18due 2026-02-21
CVECVE-2024-7694
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
TeamT5 · ThreatSonar Anti-Ransomwareremediation: past CISA due date
P2added 2026-02-17due 2026-03-10
CVECVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
Microsoft · Windowsremediation: past CISA due date
P2added 2026-02-17due 2026-03-10
CVECVE-2026-2441
Google Chromium CSS Use-After-Free Vulnerability
Google · Chromiumremediation: past CISA due date
P2added 2026-02-17due 2026-03-10
CVECVE-2020-7796
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
Synacor · Zimbra Collaboration Suiteremediation: past CISA due date
P2added 2026-02-17due 2026-03-10
CVECVE-2026-1731
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE
P1added 2026-02-13due 2026-02-16
CVECVE-2026-20700
Apple Multiple Buffer Overflow Vulnerability
Apple · Multiple Productsremediation: past CISA due date
P2added 2026-02-12due 2026-03-05
CVECVE-2024-43468
Microsoft Configuration Manager SQL Injection Vulnerability
Microsoft · Configuration Managerremediation: past CISA due date
P2added 2026-02-12due 2026-03-05
CVECVE-2025-15556
Notepad++ Download of Code Without Integrity Check Vulnerability
Notepad++ · Notepad++remediation: past CISA due date
P2added 2026-02-12due 2026-03-05
CVECVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability
SolarWinds · Web Help Deskremediation: past CISA due date
P2added 2026-02-12due 2026-02-15
CVECVE-2026-21513
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
Microsoft · Windowsremediation: past CISA due date
P2added 2026-02-10due 2026-03-03