Exploited in the wild

Recent additions to the CISA Known Exploited Vulnerabilities catalog, newest first. These are the hunt priorities.

• 80
  CVE-2015-3306ProFTPD ProFTPD

  KEV 2026-10-08PoC ×18nucleipublished 2026-10-08
• 70
  CVE-2015-5477ISC BIND

  KEV 2026-10-08PoC ×7published 2026-10-08
• 70
  CVE-2023-22894Strapi Strapi

  KEV 2026-10-08PoC ×2published 2026-10-08
• 65
  CVE-2016-3081Apache Struts

  KEV 2026-10-08nucleipublished 2026-10-08
• 55
  CVE-2021-3199ONLYOFFICE Docs

  KEV 2026-10-08published 2026-10-08
• 85
  CVE-2026-88779Citrix NetScaler

  KEV 2026-10-04high 8.7citrixpublished 2026-10-04
• 95
  CVE-2026-102489Zammad GmbH Zammad

  KEV 2026-10-02PoC ×2critical 9.4published 2026-10-02
• 80
  CVE-2026-102490Zammad GmbH Zammad

  KEV 2026-10-02critical 9.4published 2026-10-02
• 85
  CVE-2026-104286Fortinet FortiMail

  KEV 2026-10-01PoC ×2fortinetpublished 2026-10-01
• 90
  CVE-2026-76504Cisco Catalyst SD-WAN Manager

  KEV 2026-09-30PoC ×1cisco1 mentionpublished 2026-09-30
• 85
  CVE-2026-86950Apple Multiple Products

  KEV 2026-09-29PoC ×5applepublished 2026-09-29
• 115
  CVE-2026-88772Citrix NetScaler

  KEV 2026-09-27PoC ×3critical 9.5citrixpublished 2026-09-27
• 115
  CVE-2026-88771Citrix NetScaler

  KEV 2026-09-27PoC ×12critical 9.5citrixpublished 2026-09-27
• 90
  CVE-2026-65660Microsoft SharePoint

  KEV 2026-09-25PoC ×2microsoft1 mentionpublished 2026-09-25
• 75
  CVE-2026-87902WordPress Core

  KEV 2026-09-25PoC ×26nucleipublished 2026-09-25
• 65
  CVE-2026-67279MikroTik RouterOS

  KEV 2026-09-25PoC ×3published 2026-09-25
• 75
  CVE-2026-71362Adobe Commerce and Magento

  KEV 2026-09-24PoC ×1nucleipublished 2026-09-24
• 65
  CVE-2026-5430WSO2 Multiple Products

  KEV 2026-09-24PoC ×4published 2026-09-24
• 85
  CVE-2026-94127F5 BIG-IP APM

  KEV 2026-09-22PoC ×2f5published 2026-09-22
• 65
  CVE-2026-93616Check Point Multiple Products

  KEV 2026-09-22PoC ×2published 2026-09-22
• 65
  CVE-2026-85102Check Point Multiple Products

  KEV 2026-09-22PoC ×1published 2026-09-22
• 50
  CVE-2026-93952Arista VeloCloud Orchestrator

  KEV 2026-09-22published 2026-09-22
• 50
  CVE-2026-7273Zyxel GS1900 Series Switches

  KEV 2026-09-21published 2026-09-21
• 85
  CVE-2025-39964Linux Kernel

  KEV 2026-09-18PoC ×2linux kernelpublished 2026-09-18
• 85
  CVE-2026-53266Linux Kernel

  KEV 2026-09-18PoC ×1linux kernelpublished 2026-09-18
• 85
  CVE-2025-39682Linux Kernel

  KEV 2026-09-18PoC ×2linux kernelpublished 2026-09-18
• 95
  CVE-2026-76460Cisco Identity Services Engine

  KEV 2026-09-16PoC ×1cisco2 mentionspublished 2026-09-16
• 50
  CVE-2026-58704Google Pixel

  KEV 2026-09-16published 2026-09-16
• 50
  CVE-2026-87886Acronis Backup

  KEV 2026-09-16published 2026-09-16
• 90
  CVE-2026-76461Cisco Secure Email Gateway

  KEV 2026-09-14PoC ×4cisco1 mentionpublished 2026-09-14
• 75
  CVE-2026-85706GitLab Community Edition and Enterprise Edition

  KEV 2026-09-11PoC ×14nucleipublished 2026-09-11
• 60
  CVE-2026-42018JFrog Artifactory

  KEV 2026-09-11nucleipublished 2026-09-11
• 50
  CVE-2026-84869ConnectWise ScreenConnect

  KEV 2026-09-11published 2026-09-11
• 50
  CVE-2026-42016JFrog Artifactory

  KEV 2026-09-11published 2026-09-11
• 65
  CVE-2026-86060MikroTik RouterOS

  KEV 2026-09-10PoC ×3published 2026-09-10
• 50
  CVE-2026-67277MikroTik RouterOS

  KEV 2026-09-10published 2026-09-10
• 100
  CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management

  KEV 2026-09-09PoC ×3nucleicisco1 mentionpublished 2026-09-09
• 85
  CVE-2026-19490Citrix NetScaler

  KEV 2026-09-09PoC ×2citrixpublished 2026-09-09
• 70
  CVE-2025-25249Fortinet Multiple Products

  KEV 2026-09-09fortinetpublished 2026-09-09
• 70
  CVE-2026-87491Google Chromium V8

  KEV 2026-09-09PoC ×11 mentionpublished 2026-09-09
• 75
  CVE-2026-81963Microsoft Windows

  KEV 2026-09-08microsoft1 mentionpublished 2026-09-08
• 75
  CVE-2026-85880Microsoft Windows

  KEV 2026-09-08microsoft1 mentionpublished 2026-09-08
• 75
  CVE-2026-86218N-able N-central

  KEV 2026-09-08PoC ×3nucleipublished 2026-09-08
• 65
  CVE-2026-75650Adobe Commerce and Magento

  KEV 2026-09-08PoC ×6published 2026-09-08
• 65
  CVE-2026-85046Google Chromium V8

  KEV 2026-09-04PoC ×6published 2026-09-04
• 95
  CVE-2026-83548SonicWall SMA1000 Appliances

  KEV 2026-09-02PoC ×3nucleisonicwallpublished 2026-09-02
• 75
  CVE-2026-48710Kludex Starlette

  KEV 2026-09-02PoC ×5nucleipublished 2026-09-02
• 75
  CVE-2026-82329JFrog Artifactory

  KEV 2026-09-02PoC ×8nucleipublished 2026-09-02
• 75
  CVE-2026-9586Sangoma Switchvox

  KEV 2026-09-02PoC ×1nucleipublished 2026-09-02
• 70
  CVE-2026-83549SonicWall SMA1000 Appliances

  KEV 2026-09-02sonicwallpublished 2026-09-02
• 65
  CVE-2026-59822BerriAI LiteLLM

  KEV 2026-09-02PoC ×1published 2026-09-02
• 65
  CVE-2026-49869Kestra Kestra OSS

  KEV 2026-09-02PoC ×2published 2026-09-02
• 75
  CVE-2026-81578PaperCut NG/MF

  KEV 2026-08-31PoC ×2nucleipublished 2026-08-31
• 50
  CVE-2026-82078PaperCut NG/MF

  KEV 2026-08-31published 2026-08-31
• 85
  CVE-2026-53362Linux Kernel

  KEV 2026-08-27PoC ×1linux kernelpublished 2026-08-27
• 65
  CVE-2023-49105ownCloud ownCloud

  KEV 2026-08-27PoC ×1published 2026-08-27
• 65
  CVE-2026-66384JFrog Artifactory

  KEV 2026-08-27PoC ×1published 2026-08-27
• 85
  CVE-2022-0995Linux Kernel

  KEV 2026-08-26PoC ×4linux kernelpublished 2026-08-26
• 85
  CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway

  KEV 2026-08-26PoC ×5citrixpublished 2026-08-26
• 85
  CVE-2019-1068Microsoft SQL Server

  KEV 2026-08-26PoC ×1microsoftpublished 2026-08-26
• 65
  CVE-2021-23758Ajax.NET Professional Ajax.NET Professional

  KEV 2026-08-26PoC ×1published 2026-08-26
• 65
  CVE-2015-3246Red Hat Libuser

  KEV 2026-08-26PoC ×1published 2026-08-26
• 65
  CVE-2015-5287Red Hat Automatic Bug Reporting Tool

  KEV 2026-08-26PoC ×1published 2026-08-26
• 75
  CVE-2026-60004Gitea Gitea

  KEV 2026-08-25PoC ×11nucleipublished 2026-08-25
• 85
  CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in

  KEV 2026-08-24PoC ×10oraclepublished 2026-08-24
• 75
  CVE-2026-73570Synacor Zimbra Collaboration Suite (ZCS)

  KEV 2026-08-21PoC ×9nucleipublished 2026-08-21
• 65
  CVE-2026-72530TrueConf Server

  KEV 2026-08-20PoC ×1published 2026-08-20
• 50
  CVE-2026-72529TrueConf Server

  KEV 2026-08-20published 2026-08-20
• 75
  CVE-2026-64849MLflow MLflow

  KEV 2026-08-19PoC ×4nucleipublished 2026-08-19
• 95
  CVE-2026-59310Broadcom VMware vCenter

  KEV 2026-08-18ransomwarePoC ×5vmwarepublished 2026-08-18
• 95
  CVE-2026-55040Microsoft SharePoint

  KEV 2026-08-18PoC ×5nucleimicrosoftpublished 2026-08-18
• 85
  CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions

  KEV 2026-08-18PoC ×2microsoftpublished 2026-08-18
• 85
  CVE-2026-65400Apple macOS

  KEV 2026-08-18PoC ×3applepublished 2026-08-18
• 75
  CVE-2025-62593Ray-Project Ray

  KEV 2026-08-17PoC ×2nucleipublished 2026-08-17
• 85
  CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock

  KEV 2026-08-11PoC ×4microsoftpublished 2026-08-11
• 75
  CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)

  KEV 2026-08-11cisco1 mentionpublished 2026-08-11
• 75
  CVE-2026-72898Metabase Metabase

  KEV 2026-08-11PoC ×10nucleipublished 2026-08-11
• 75
  CVE-2026-8037Progress LoadMaster

  KEV 2026-08-07PoC ×2nucleipublished 2026-08-07
• 85
  CVE-2026-63077JetBrains TeamCity

  KEV 2026-08-05ransomwarePoC ×6nucleipublished 2026-08-05
• 75
  CVE-2026-34486Apache Tomcat

  KEV 2026-08-04PoC ×5nucleipublished 2026-08-04
• 75
  CVE-2026-9198IBM Langflow

  KEV 2026-08-04PoC ×8nucleipublished 2026-08-04
• 65
  CVE-2026-18556N-able N-central

  KEV 2026-08-04PoC ×1published 2026-08-04
• 75
  CVE-2026-18577N-able N-central

  KEV 2026-08-03PoC ×1nucleipublished 2026-08-03
• 85
  CVE-2026-20316Cisco Secure Firewall Management Center (FMC)

  KEV 2026-07-29ransomwarecisco1 mentionpublished 2026-07-29
• 70
  CVE-2025-68686Fortinet FortiOS

  KEV 2026-07-27fortinetpublished 2026-07-27
• 50
  CVE-2026-16812Arista VeloCloud Orchestrator

  KEV 2026-07-27published 2026-07-27
• 85
  CVE-2026-50522Microsoft SharePoint

  KEV 2026-07-22PoC ×5microsoftpublished 2026-07-22
• 75
  CVE-2026-16232Check Point SmartConsole

  KEV 2026-07-22PoC ×3nucleipublished 2026-07-22
• 75
  CVE-2026-63030WordPress Core

  KEV 2026-07-21PoC ×79nucleipublished 2026-07-21
• 75
  CVE-2026-0770Langflow Langflow

  KEV 2026-07-21PoC ×7nucleipublished 2026-07-21
• 65
  CVE-2026-60137WordPress Core

  KEV 2026-07-21PoC ×11published 2026-07-21
• 50
  CVE-2021-27137DD-WRT DD-WRT

  KEV 2026-07-21published 2026-07-21
• 95
  CVE-2026-39808Fortinet FortiSandbox

  KEV 2026-07-16PoC ×6nucleifortinetpublished 2026-07-16
• 85
  CVE-2026-25089Fortinet FortiSandbox

  KEV 2026-07-16PoC ×2fortinetpublished 2026-07-16
• 80
  CVE-2026-58644Microsoft SharePoint

  KEV 2026-07-16nucleimicrosoftpublished 2026-07-16
• 85
  CVE-2026-46817Oracle E-Business Suite

  KEV 2026-07-15PoC ×2oraclepublished 2026-07-15
• 50
  CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1

  KEV 2026-07-15published 2026-07-15
• 105
  CVE-2026-15409SonicWall SMA1000 Appliances

  KEV 2026-07-14ransomwarePoC ×6nucleisonicwallpublished 2026-07-14
• 95
  CVE-2026-15410SonicWall SMA1000 Appliances

  KEV 2026-07-14ransomwarePoC ×1sonicwallpublished 2026-07-14
• 85
  CVE-2026-56164Microsoft SharePoint Server

  KEV 2026-07-14PoC ×2microsoftpublished 2026-07-14
• 70
  CVE-2026-56155Microsoft Active Directory Federation Services

  KEV 2026-07-14microsoftpublished 2026-07-14
• 70
  CVE-2008-4128Cisco IOS

  KEV 2026-07-13ciscopublished 2026-07-13
• 75
  CVE-2026-56291Balbooa Forms

  KEV 2026-07-10PoC ×5nucleipublished 2026-07-10
• 75
  CVE-2026-48939iCagenda iCagenda

  KEV 2026-07-10PoC ×3nucleipublished 2026-07-10
• 75
  CVE-2026-48908JoomShaper SP Page Builder

  KEV 2026-07-07PoC ×12nucleipublished 2026-07-07
• 75
  CVE-2026-56290Joomlack Page Builder

  KEV 2026-07-07PoC ×5nucleipublished 2026-07-07
• 75
  CVE-2026-48282Adobe ColdFusion

  KEV 2026-07-07PoC ×3nucleipublished 2026-07-07
• 65
  CVE-2026-55255Langflow Langflow

  KEV 2026-07-07PoC ×1published 2026-07-07
• 95
  CVE-2026-45659Microsoft SharePoint Server

  KEV 2026-07-01ransomwarePoC ×1microsoftpublished 2026-07-01
• 75
  CVE-2026-48558SimpleHelp SimpleHelp

  KEV 2026-06-29PoC ×1nucleipublished 2026-06-29
• 85
  CVE-2026-20230Cisco Unified Communications Manager

  KEV 2026-06-25PoC ×3ciscopublished 2026-06-25
• 60
  CVE-2026-12569PTC Windchill and FlexPLM

  KEV 2026-06-25ransomwarepublished 2026-06-25
• 75
  CVE-2026-34910Ubiquiti UniFi OS

  KEV 2026-06-23PoC ×2nucleipublished 2026-06-23
• 75
  CVE-2026-34908Ubiquiti UniFi OS

  KEV 2026-06-23PoC ×1nucleipublished 2026-06-23
• 65
  CVE-2025-67038Lantronix EDS5000

  KEV 2026-06-23PoC ×1published 2026-06-23
• 50
  CVE-2026-34909Ubiquiti UniFi OS

  KEV 2026-06-23published 2026-06-23
• 95
  CVE-2026-20253Splunk Enterprise

  KEV 2026-06-18PoC ×7nucleisplunkpublished 2026-06-18
• 75
  CVE-2026-48907Widget Factory Joomla Content Editor

  KEV 2026-06-16PoC ×20nucleipublished 2026-06-16
• 85
  CVE-2026-20262Cisco Catalyst SD-WAN Manager

  KEV 2026-06-15PoC ×2ciscopublished 2026-06-15
• 65
  CVE-2026-54420LiteSpeed cPanel Plugin

  KEV 2026-06-15PoC ×4published 2026-06-15