CyberSecBulletin

Vulnerabilities exploited in the wild

1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.

ScoreVulnerabilityAddedFederal deadlineRansomware use
9.8 Critical severityIvanti Endpoint Manager Mobile (EPMM) Code Injection
CVE-2026-1281
Jan 29, 2026Feb 1, 2026Not reported
9.8 Critical severityFortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel
CVE-2026-24858
Jan 27, 2026Jan 30, 2026Not reported
9.8 Critical severityGNU InetUtils Argument Injection
CVE-2026-24061
Jan 26, 2026Feb 16, 2026Not reported
9.8 Critical severitySmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel
CVE-2026-23760
Jan 26, 2026Feb 16, 2026Known
7.8 High severityMicrosoft Office Security Feature Bypass
CVE-2026-21509
Jan 26, 2026Feb 16, 2026Not reported
10.0 Critical severitySmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type
CVE-2025-52691
Jan 26, 2026Feb 16, 2026Known
7.8 High severityLinux Kernel Integer Overflow
CVE-2018-14634
Jan 26, 2026Feb 16, 2026Not reported
9.8 Critical severityBroadcom VMware vCenter Server Out-of-bounds Write
CVE-2024-37079
Jan 23, 2026Feb 13, 2026Not reported
8.8 High severitySynacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion
CVE-2025-68645
Jan 22, 2026Feb 12, 2026Not reported
7.5 High severityPrettier eslint-config-prettier Embedded Malicious Code
CVE-2025-54313
Jan 22, 2026Feb 12, 2026Not reported
7.5 High severityVersa Concerto Improper Authentication
CVE-2025-34026
Jan 22, 2026Feb 12, 2026Not reported
7.5 High severityVite Vitejs Improper Access Control
CVE-2025-31125
Jan 22, 2026Feb 12, 2026Not reported
9.8 Critical severityCisco Unified Communications Products Code Injection
CVE-2026-20045
Jan 21, 2026Feb 11, 2026Not reported
5.5 Medium severityMicrosoft Windows Information Disclosure
CVE-2026-20805
Jan 13, 2026Feb 3, 2026Not reported
8.8 High severityGogs Path Traversal
CVE-2025-8110
Jan 12, 2026Feb 2, 2026Not reported
9.8 Critical severityHewlett Packard Enterprise (HPE) OneView Code Injection
CVE-2025-37164
Jan 7, 2026Jan 28, 2026Not reported
9.3 High severityMicrosoft Office PowerPoint Code Injection
CVE-2009-0556
Jan 7, 2026Jan 28, 2026Not reported
7.5 High severityMongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency
CVE-2025-14847
Dec 29, 2025Jan 19, 2026Not reported
8.8 High severityDigiever DS-2105 Pro Missing Authorization
CVE-2023-52163
Dec 22, 2025Jan 12, 2026Not reported
9.8 Critical severityWatchGuard Firebox Out of Bounds Write
CVE-2025-14733
Dec 19, 2025Dec 26, 2025Known
9.8 Critical severityASUS Live Update Embedded Malicious Code
CVE-2025-59374
Dec 17, 2025Jan 7, 2026Not reported
6.6 Medium severitySonicWall SMA1000 Missing Authorization
CVE-2025-40602
Dec 17, 2025Dec 24, 2025Not reported
10.0 Critical severityCisco Multiple Products Improper Input Validation
CVE-2025-20393
Dec 17, 2025Dec 24, 2025Not reported
9.8 Critical severityFortinet Multiple Products Improper Verification of Cryptographic Signature
CVE-2025-59718
Dec 16, 2025Dec 23, 2025Not reported
8.8 High severityApple Multiple Products Use-After-Free WebKit
CVE-2025-43529
Dec 15, 2025Jan 5, 2026Not reported
9.8 Critical severityGladinet CentreStack and Triofox Hard Coded Cryptographic
CVE-2025-14611
Dec 15, 2025Jan 5, 2026Not reported
8.8 High severityGoogle Chromium Out of Bounds Memory Access
CVE-2025-14174
Dec 12, 2025Jan 2, 2026Not reported
8.8 High severitySierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type
CVE-2018-4063
Dec 12, 2025Jan 2, 2026Not reported
9.8 Critical severityOSGeo GeoServer Improper Restriction of XML External Entity Reference
CVE-2025-58360
Dec 11, 2025Jan 1, 2026Not reported
7.8 High severityMicrosoft Windows Use After Free
CVE-2025-62221
Dec 9, 2025Dec 30, 2025Not reported
7.8 High severityRARLAB WinRAR Path Traversal
CVE-2025-6218
Dec 9, 2025Dec 30, 2025Not reported
9.8 Critical severityArray Networks ArrayOS AG OS Command Injection
CVE-2025-66644
Dec 8, 2025Dec 29, 2025Not reported
9.8 Critical severityD-Link Routers Buffer Overflow
CVE-2022-37055
Dec 8, 2025Dec 29, 2025Not reported
10.0 Critical severityMeta React Server Components Remote Code Execution
CVE-2025-55182
Dec 5, 2025Dec 12, 2025Known
8.8 High severityOpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type
CVE-2021-26828
Dec 3, 2025Dec 24, 2025Not reported
5.5 Medium severityAndroid Framework Information Disclosure
CVE-2025-48633
Dec 2, 2025Dec 23, 2025Not reported
7.8 High severityAndroid Framework Privilege Escalation
CVE-2025-48572
Dec 2, 2025Dec 23, 2025Not reported
5.4 Medium severityOpenPLC ScadaBR Cross-site Scripting
CVE-2021-26829
Nov 28, 2025Dec 19, 2025Not reported
9.8 Critical severityOracle Fusion Middleware Missing Authentication for Critical Function
CVE-2025-61757
Nov 21, 2025Dec 12, 2025Not reported
8.8 High severityGoogle Chromium V8 Type Confusion
CVE-2025-13223
Nov 19, 2025Dec 10, 2025Not reported

About this list

CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.

A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.