How often is this vulnerability database updated?

This page syncs against the official CISA KEV feed every night. Newly added CVEs are enriched with CVSS scoring from the NVD and given an AI-generated plain-English breakdown covering what the vulnerability is, why it matters, and what action to take.

What does it mean if a vulnerability has known ransomware use?

CISA flags entries that have been directly used in ransomware campaigns. These represent the highest real-world urgency in the catalog and should be prioritized for immediate patching or mitigation ahead of other entries.

Updated Nightly

Known Exploited Vulnerabilities Database

Q: What is the CISA Known Exploited Vulnerabilities (KEV) catalog?

The KEV catalog is an authoritative list maintained by the US Cybersecurity and Infrastructure Security Agency (CISA) of CVEs that are known to be actively exploited in the wild. It is the single best signal for prioritizing patching, since every entry represents a real-world attack, not a theoretical risk.

A live mirror of the CISA Known Exploited Vulnerabilities (KEV) catalog — CVEs confirmed to be actively exploited in the wild, enriched nightly with CVSS scoring and AI-generated plain-English breakdowns.

1,734

Tracked CVEs

361

Linked to ransomware

Added in last 7 days

Today's Top Exploited Vulnerabilities

AI-generated breakdowns of the most recently catalogued, actively exploited vulnerabilities.

CVE-2026-48939

iCagenda iCagenda

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

This vulnerability, CVE-2026-48939, affects iCagenda, an extension for Joomla, allowing an attacker to upload any type of file, including dangerous ones, through its file attachment feature. This enables them to execute malicious PHP code on the affected system. Essentially, an attacker can trick the system into running their own harmful code.

CVSS 9.8

CVE-2026-56291

Balbooa Forms

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Balbooa Forms, a Joomla extension, has a critical vulnerability that allows an attacker to upload dangerous files without needing to log in. This flaw lets them upload executable files, which can give them full remote control over the affected system. This means an attacker could completely compromise your website or server.

CVSS 9.8

CVE-2026-35273 Ransomware

Oracle PeopleSoft Enterprise PeopleTools

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

This critical vulnerability, CVE-2026-35273, affects Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62. It's a flaw where important system functions lack proper security checks. An attacker can exploit this over the internet without needing a username or password, leading to a complete takeover of your PeopleSoft system.

CVSS 9.8

Latest Catalogued Vulnerabilities

Most recently added entries in the CISA KEV catalog, ordered by date added.

CVE ID	Vendor / Product	Date Added	CVSS
CVE-2026-88779	Citrix NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	04 Oct 2026	—	Details
CVE-2026-102490	Zammad GmbH Zammad Zammad GmbH Zammad Improper Privilege Management Vulnerability	02 Oct 2026	9.8	Details
CVE-2026-102489	Zammad GmbH Zammad Zammad GmbH Zammad Session Fixation Vulnerability	02 Oct 2026	9.8	Details
CVE-2026-104286	Fortinet FortiMail Fortinet FortiMail Path Traversal Vulnerability	01 Oct 2026	9.8	Details
CVE-2026-76504	Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability	30 Sept 2026	—	Details
CVE-2026-86950	Apple Multiple Products Apple Multiple Products Out-of-Bounds Write Vulnerability	29 Sept 2026	8.8	Details
CVE-2026-88772	Citrix NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	27 Sept 2026	—	Details
CVE-2026-88771	Citrix NetScaler Citrix NetScaler Improper Input Validation Vulnerability	27 Sept 2026	—	Details
CVE-2026-87902	WordPress Core WordPress Core Remote File Inclusion Vulnerability	25 Sept 2026	8.1	Details
CVE-2026-67279	MikroTik RouterOS Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability	25 Sept 2026	6.5	Details
CVE-2026-65660	Microsoft SharePoint Microsoft SharePoint Code Injection Vulnerability	25 Sept 2026	8.8	Details
CVE-2026-71362	Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability	24 Sept 2026	—	Details
CVE-2026-5430	WSO2 Multiple Products WSO2 Multiple Products Path Traversal Vulnerability	24 Sept 2026	10.0	Details
CVE-2026-94127	F5 BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability	22 Sept 2026	9.8	Details
CVE-2026-93952	Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator Improper Input Validation Vulnerability	22 Sept 2026	—	Details
CVE-2026-93616	Check Point Multiple Products Check Point Multiple Products Path Traversal Vulnerability	22 Sept 2026	9.8	Details
CVE-2026-85102	Check Point Multiple Products Check Point Multiple Products Improper Certificate Validation Vulnerability	22 Sept 2026	9.8	Details
CVE-2026-7273	Zyxel GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability	21 Sept 2026	8.8	Details
CVE-2026-53266	Linux Kernel Linux Kernel Out-of-Bounds Write Vulnerability	18 Sept 2026	—	Details
CVE-2025-39964	Linux Kernel Linux Kernel Race Condition Vulnerability	18 Sept 2026	7.8	Details
CVE-2025-39682	Linux Kernel Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability	18 Sept 2026	9.8	Details
CVE-2026-87886	Acronis Backup Acronis Backup Incorrect Default Permissions Vulnerability	16 Sept 2026	—	Details
CVE-2026-76460	Cisco Identity Services Engine Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	16 Sept 2026	10.0	Details
CVE-2026-58704	Google Pixel Google Pixel Improper Authorization Vulnerability	16 Sept 2026	—	Details
CVE-2026-76461	Cisco Secure Email Gateway Cisco Secure Email Gateway SQL Injection Vulnerability	14 Sept 2026	9.8	Details
CVE-2026-85706	GitLab Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability	11 Sept 2026	10.0	Details
CVE-2026-84869	ConnectWise ScreenConnect ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability	11 Sept 2026	9.9	Details
CVE-2026-42018	JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability	11 Sept 2026	7.5	Details
CVE-2026-42016	JFrog Artifactory JFrog Artifactory Incorrect Authorization Vulnerability	11 Sept 2026	8.1	Details
CVE-2026-86060	MikroTik RouterOS MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability	10 Sept 2026	—	Details
CVE-2026-67277	MikroTik RouterOS MikroTik RouterOS Missing Authentication for Critical Function Vulnerability	10 Sept 2026	—	Details
CVE-2026-87491	Google Chromium V8 Google Chromium V8 Out of Bounds Write Vulnerability	09 Sept 2026	—	Details
CVE-2026-20079	Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability	09 Sept 2026	—	Details
CVE-2026-19490	Citrix NetScaler Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability	09 Sept 2026	—	Details
CVE-2025-25249	Fortinet Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability	09 Sept 2026	—	Details
CVE-2026-86218	N-able N-central N-able N-central Static Code Injection Vulnerability	08 Sept 2026	9.8	Details
CVE-2026-85880	Microsoft Windows Microsoft Windows Heap-Based Buffer Overflow Vulnerability	08 Sept 2026	7.8	Details
CVE-2026-81963	Microsoft Windows Microsoft Windows Link Following Vulnerability	08 Sept 2026	7.8	Details
CVE-2026-75650	Adobe Commerce and Magento Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability	08 Sept 2026	—	Details
CVE-2026-85046	Google Chromium V8 Google Chromium V8 Type Confusion Vulnerability	04 Sept 2026	—	Details
CVE-2026-9586	Sangoma Switchvox Sangoma Switchvox SQL Injection Vulnerability	02 Sept 2026	9.8	Details
CVE-2026-83549	SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability	02 Sept 2026	7.8	Details
CVE-2026-83548	SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability	02 Sept 2026	10.0	Details
CVE-2026-82329	JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability	02 Sept 2026	9.8	Details
CVE-2026-59822	BerriAI LiteLLM BerriAI LiteLLM Improper Authentication Vulnerability	02 Sept 2026	—	Details
CVE-2026-49869	Kestra Kestra OSS Kestra OSS OS Command Injection Vulnerability	02 Sept 2026	10.0	Details
CVE-2026-48710	Kludex Starlette Kludex Starlette HTTP Request/Response Smuggling Vulnerability	02 Sept 2026	6.5	Details
CVE-2026-82078	PaperCut NG/MF PaperCut NG/MF Unsafe Reflection Vulnerability	31 Aug 2026	9.1	Details
CVE-2026-81578	PaperCut NG/MF PaperCut NG/MF Missing Authentication for Critical Function Vulnerability	31 Aug 2026	—	Details
CVE-2026-66384	JFrog Artifactory JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability	27 Aug 2026	5.3	Details
CVE-2026-53362	Linux Kernel Linux Kernel Unspecified Vulnerability	27 Aug 2026	7.8	Details
CVE-2023-49105	ownCloud ownCloud ownCloud Improper Authentication Vulnerability	27 Aug 2026	9.8	Details
CVE-2026-8452	Citrix NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability	26 Aug 2026	9.8	Details
CVE-2022-0995	Linux Kernel Linux Kernel Out-of-Bounds Write Vulnerability	26 Aug 2026	7.8	Details
CVE-2021-23758	Ajax.NET Professional Ajax.NET Professional Ajax.NET Professional Deserialization of Untrusted Data Vulnerability	26 Aug 2026	8.1	Details
CVE-2019-1068	Microsoft SQL Server Microsoft SQL Server Remote Code Execution Vulnerability	26 Aug 2026	8.8	Details
CVE-2015-5287	Red Hat Automatic Bug Reporting Tool Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability	26 Aug 2026	7.8	Details
CVE-2015-3246	Red Hat Libuser Red Hat Libuser Race Condition Vulnerability	26 Aug 2026	5.1	Details
CVE-2026-60004	Gitea Gitea Gitea Code Injection Vulnerability	25 Aug 2026	—	Details
CVE-2026-21962	Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability	24 Aug 2026	10.0	Details

Sources & Methodology

This catalog mirrors the official CISA Known Exploited Vulnerabilities catalog via a nightly sync. Newly added entries are enriched with CVSS scoring from the NIST National Vulnerability Database and given an AI-generated summary, impact assessment, and recommended action. AI breakdowns are generated from the underlying CISA and NVD data and should be treated as a starting point, not a substitute for your own risk assessment.

Patch With Confidence

Know Which Vulnerabilities Actually Matter

A VAPT assessment tells you which of these actively exploited vulnerabilities exist in your own environment. CRS delivers continuous, compliance-grade penetration testing across Africa and North America.

Explore VAPT Services Contact Us