CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1970
Critical
552
Exploited in Wild
552
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-1976 | MEDIUM | Broadcom | 6.7 | KEV | Yes | ✓ | April 24, 2025 | Patch |
| CVE-2025-40602 | MEDIUM | SonicWall | 6.6 | KEV | Yes | ✓ | December 18, 2025 | Patch |
| CVE-2026-67279 | MEDIUM | MikroTik | 6.5 | KEV | Yes | ✓ | September 5, 2026 | Patch |
| CVE-2026-20262 | MEDIUM | Cisco | 6.5 | KEV | Yes | ✓ | June 15, 2026 | Patch |
| CVE-2026-48710 | MEDIUM | Kludex | 6.5 | KEV | Yes | ✓ | May 26, 2026 | Patch |
| CVE-2026-32201 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2025-61624 | MEDIUM | Fortinet | 6.5 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2025-49706 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | July 8, 2025 | Patch |
| CVE-2025-24054 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2025-0111 | MEDIUM | Palo Alto Networks | 6.5 | KEV | Yes | ✓ | February 12, 2025 | Patch |
| CVE-2024-43451 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | November 12, 2024 | Patch |
| CVE-2023-50224 | MEDIUM | TP-Link | 6.5 | KEV | Yes | ✓ | May 3, 2024 | Patch |
| CVE-2021-20035 | MEDIUM | SonicWall | 6.5 | KEV | Yes | ✓ | September 27, 2021 | Patch |
| CVE-2019-6693 | MEDIUM | Fortinet | 6.5 | KEV | Yes | ✓ | November 21, 2019 | Patch |
| CVE-2024-44309 | MEDIUM | Apple | 6.3 | KEV | Yes | ✓ | November 20, 2024 | Patch |
| CVE-2026-21525 | MEDIUM | Microsoft | 6.2 | KEV | Yes | ✓ | February 10, 2026 | Patch |
| CVE-2025-59689 | MEDIUM | Libraesva | 6.1 | KEV | Yes | ✓ | September 19, 2025 | Patch |
| CVE-2025-48700 | MEDIUM | Synacor | 6.1 | KEV | Yes | ✓ | June 23, 2025 | Patch |
| CVE-2025-24200 | MEDIUM | Apple | 6.1 | KEV | Yes | ✓ | February 10, 2025 | Patch |
| CVE-2024-11182 | MEDIUM | MDaemon | 6.1 | KEV | Yes | ✓ | November 15, 2024 | Patch |
| CVE-2024-27443 | MEDIUM | Synacor | 6.1 | KEV | Yes | ✓ | August 12, 2024 | Patch |
| CVE-2020-11023 | MEDIUM | JQuery | 6.1 | KEV | Yes | ✓ | April 29, 2020 | Patch |
| CVE-2014-2120 | MEDIUM | Cisco | 6.1 | KEV | Yes | ✓ | March 19, 2014 | Patch |
| CVE-2025-68686 | MEDIUM | Fortinet | 5.9 | KEV | Yes | ✓ | February 10, 2026 | Patch |
| CVE-2026-7473 | MEDIUM | Arista | 5.8 | KEV | Yes | ✓ | June 5, 2026 | Patch |
| CVE-2026-20805 | MEDIUM | Microsoft | 5.5 | KEV | Yes | ✓ | January 13, 2026 | Patch |
| CVE-2025-43520 | MEDIUM | Apple | 5.5 | KEV | Yes | ✓ | December 12, 2025 | Patch |
| CVE-2025-48633 | MEDIUM | Android | 5.5 | KEV | Yes | ✓ | December 8, 2025 | Patch |
| CVE-2025-24991 | MEDIUM | Microsoft | 5.5 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2024-50302 | MEDIUM | Linux | 5.5 | KEV | Yes | ✓ | November 19, 2024 | Patch |
| CVE-2026-20122 | MEDIUM | Cisco | 5.4 | KEV | Yes | ✓ | February 25, 2026 | Patch |
| CVE-2025-55177 | MEDIUM | Meta Platforms | 5.4 | KEV | Yes | ✓ | August 29, 2025 | Patch |
| CVE-2025-27915 | MEDIUM | Synacor | 5.4 | KEV | Yes | ✓ | March 12, 2025 | Patch |
| CVE-2021-26829 | MEDIUM | OpenPLC | 5.4 | KEV | Yes | ✓ | June 11, 2021 | Patch |
| CVE-2026-66384 | MEDIUM | JFrog | 5.3 | KEV | Yes | ✓ | August 12, 2026 | Patch |
| CVE-2026-20316 | MEDIUM | Cisco | 5.3 | KEV | Yes | ✗ | July 29, 2026 | |
| CVE-2025-48927 | MEDIUM | TeleMessage | 5.3 | KEV | Yes | ✗ | May 28, 2025 | |
| CVE-2025-35939 | MEDIUM | Craft CMS | 5.3 | KEV | Yes | ✓ | May 7, 2025 | Patch |
| CVE-2021-26086 | MEDIUM | Atlassian | 5.3 | KEV | Yes | ✓ | August 16, 2021 | Patch |
| CVE-2015-3246 | MEDIUM | Red Hat | 5.1 | KEV | Yes | ✗ | August 11, 2015 | |
| CVE-2025-47729 | MEDIUM | TeleMessage | 4.9 | KEV | Yes | ✗ | May 8, 2025 | |
| CVE-2023-22894 | MEDIUM | Strapi | 4.9 | KEV | Yes | ✓ | April 19, 2023 | Patch |
| CVE-2025-47827 | MEDIUM | IGEL | 4.6 | KEV | Yes | ✓ | June 5, 2025 | Patch |
| CVE-2025-24984 | MEDIUM | Microsoft | 4.6 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2025-21590 | MEDIUM | Juniper | 4.4 | KEV | Yes | ✓ | March 12, 2025 | Patch |
| CVE-2024-55550 | MEDIUM | Mitel | 4.4 | KEV | Yes | ✓ | December 10, 2024 | Patch |
| CVE-2026-32202 | MEDIUM | Microsoft | 4.3 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2025-47813 | MEDIUM | Wing FTP Server | 4.3 | KEV | Yes | ✓ | July 10, 2025 | Patch |
| CVE-2008-4128 | MEDIUM | Cisco | 4.3 | KEV | Yes | ✓ | September 18, 2008 | Patch |
| CVE-2025-43200 | MEDIUM | Apple | 4.2 | KEV | Yes | ✓ | June 16, 2025 | Patch |