CyberSecBulletin

Vulnerabilities exploited in the wild

1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.

ScoreVulnerabilityAddedFederal deadlineRansomware use
8.8 High severityMicrosoft Windows Command Injection
CVE-2026-96951
Oct 13, 2026Oct 16, 2026Not reported
8.6 High severityIvanti Connect Secure Authentication Bypass by Spoofing
CVE-2026-104935
Oct 13, 2026Oct 16, 2026Not reported
4.9 Medium severityStrapi Cleartext Storage of Sensitive Information
CVE-2023-22894
Oct 8, 2026Oct 11, 2026Not reported
9.8 Critical severityONLYOFFICE Docs Server Path Traversal
CVE-2021-3199
Oct 8, 2026Oct 11, 2026Not reported
8.1 High severityApache Struts Command Injection
CVE-2016-3081
Oct 8, 2026Oct 11, 2026Not reported
7.8 High severityISC BIND Data Processing Errors
CVE-2015-5477
Oct 8, 2026Oct 11, 2026Not reported
10.0 High severityProFTPD Improper Access Control
CVE-2015-3306
Oct 8, 2026Oct 11, 2026Not reported
7.5 High severityCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2026-88779
Oct 4, 2026Oct 7, 2026Not reported
7.8 High severityZammad GmbH Zammad Improper Privilege Management
CVE-2026-102490
Oct 2, 2026Oct 5, 2026Not reported
9.8 Critical severityZammad GmbH Zammad Session Fixation
CVE-2026-102489
Oct 2, 2026Oct 5, 2026Not reported
9.8 Critical severityFortinet FortiMail Path Traversal
CVE-2026-104286
Oct 1, 2026Oct 4, 2026Not reported
9.8 Critical severityCisco Catalyst SD-WAN Manager Hex Encoding
CVE-2026-76504
Sep 30, 2026Oct 3, 2026Not reported
8.8 High severityApple Multiple Products Out-of-Bounds Write
CVE-2026-86950
Sep 29, 2026Oct 13, 2026Not reported
8.1 High severityCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2026-88772
Sep 27, 2026Sep 30, 2026Not reported
9.8 Critical severityCitrix NetScaler Improper Input Validation
CVE-2026-88771
Sep 27, 2026Sep 30, 2026Not reported
8.1 High severityWordPress Core Remote File Inclusion
CVE-2026-87902
Sep 25, 2026Sep 28, 2026Not reported
6.5 Medium severityMikrotik RouterOS Improper Enforcement of Behavioral Workflow
CVE-2026-67279
Sep 25, 2026Sep 28, 2026Not reported
8.8 High severityMicrosoft SharePoint Code Injection
CVE-2026-65660
Sep 25, 2026Sep 28, 2026Not reported
9.1 Critical severityAdobe Commerce and Magento Incorrect Authorization
CVE-2026-71362
Sep 24, 2026Sep 27, 2026Not reported
10.0 Critical severityWSO2 Multiple Products Path Traversal
CVE-2026-5430
Sep 24, 2026Sep 27, 2026Not reported
9.8 Critical severityF5 BIG-IP APM Heap-based Buffer Overflow
CVE-2026-94127
Sep 22, 2026Sep 25, 2026Not reported
10.0 Critical severityArista VeloCloud Orchestrator Improper Input Validation
CVE-2026-93952
Sep 22, 2026Sep 25, 2026Not reported
9.8 Critical severityCheck Point Multiple Products Path Traversal
CVE-2026-93616
Sep 22, 2026Sep 25, 2026Not reported
9.8 Critical severityCheck Point Multiple Products Improper Certificate Validation
CVE-2026-85102
Sep 22, 2026Sep 25, 2026Not reported
8.8 High severityZyxel GS1900 Series Switches Stack-Based Buffer Overflow
CVE-2026-7273
Sep 21, 2026Sep 24, 2026Not reported
8.8 High severityLinux Kernel Out-of-Bounds Write
CVE-2026-53266
Sep 18, 2026Sep 21, 2026Not reported
5.5 Medium severityLinux Kernel Race Condition
CVE-2025-39964
Sep 18, 2026Sep 21, 2026Not reported
9.8 Critical severityLinux Kernel Improper Check for Unusual or Exceptional Conditions
CVE-2025-39682
Sep 18, 2026Sep 21, 2026Not reported
7.8 High severityAcronis Backup Incorrect Default Permissions
CVE-2026-87886
Sep 16, 2026Sep 19, 2026Not reported
10.0 Critical severityCisco Identity Services Engine Incorrect Use of Privileged APIs
CVE-2026-76460
Sep 16, 2026Sep 19, 2026Not reported
8.8 High severityGoogle Pixel Improper Authorization
CVE-2026-58704
Sep 16, 2026Sep 19, 2026Not reported
9.8 Critical severityCisco Secure Email Gateway SQL Injection
CVE-2026-76461
Sep 14, 2026Sep 17, 2026Not reported
10.0 Critical severityGitLab Community Edition and Enterprise Edition Path Traversal
CVE-2026-85706
Sep 11, 2026Sep 14, 2026Not reported
9.9 Critical severityConnectWise ScreenConnect Improper Privilege Management and Missing Authorization
CVE-2026-84869
Sep 11, 2026Sep 14, 2026Not reported
7.5 High severityJFrog Artifactory Improper Authentication
CVE-2026-42018
Sep 11, 2026Sep 25, 2026Not reported
8.8 High severityJFrog Artifactory Incorrect Authorization
CVE-2026-42016
Sep 11, 2026Sep 25, 2026Not reported
9.8 Critical severityMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command
CVE-2026-86060
Sep 10, 2026Sep 13, 2026Not reported
8.2 High severityMikroTik RouterOS Missing Authentication for Critical Function
CVE-2026-67277
Sep 10, 2026Sep 13, 2026Not reported
8.8 High severityGoogle Chromium V8 Out of Bounds Write
CVE-2026-87491
Sep 9, 2026Sep 23, 2026Not reported
10.0 Critical severityCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel
CVE-2026-20079
Sep 9, 2026Sep 12, 2026Not reported

About this list

CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.

A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.