CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1003
Critical
521
Exploited in Wild
521
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-9198 | CRITICAL | IBM | 9.8 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-58644 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56164 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-50522 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56291 | CRITICAL | Balbooa | 9.8 | KEV | Yes | ✓ | July 9, 2026 | Patch |
| CVE-2026-8452 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | June 30, 2026 | Patch |
| CVE-2026-56290 | CRITICAL | Joomlack | 9.8 | KEV | Yes | ✓ | June 29, 2026 | Patch |
| CVE-2026-48939 | CRITICAL | iCagenda | 9.8 | KEV | Yes | ✓ | June 20, 2026 | Patch |
| CVE-2026-48908 | CRITICAL | JoomShaper | 9.8 | KEV | Yes | ✓ | June 20, 2026 | Patch |
| CVE-2026-12569 | CRITICAL | PTC | 9.8 | KEV | Yes | ✗ | June 18, 2026 | |
| CVE-2026-35273 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | June 11, 2026 | Patch |
| CVE-2026-20253 | CRITICAL | Splunk | 9.8 | KEV | Yes | ✓ | June 10, 2026 | Patch |
| CVE-2026-25089 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | June 9, 2026 | Patch |
| CVE-2026-48907 | CRITICAL | Widget Factory | 9.8 | KEV | Yes | ✓ | June 5, 2026 | Patch |
| CVE-2026-8037 | CRITICAL | Progress | 9.8 | KEV | Yes | ✓ | June 4, 2026 | Patch |
| CVE-2026-46817 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | May 28, 2026 | Patch |
| CVE-2026-48027 | CRITICAL | Nx | 9.8 | KEV | Yes | ✓ | May 27, 2026 | Patch |
| CVE-2026-45247 | CRITICAL | Mirasvit | 9.8 | KEV | Yes | ✓ | May 26, 2026 | Patch |
| CVE-2026-48172 | CRITICAL | LiteSpeed | 9.8 | KEV | Yes | ✓ | May 21, 2026 | Patch |
| CVE-2026-9082 | CRITICAL | Drupal | 9.8 | KEV | Yes | ✓ | May 20, 2026 | Patch |
| CVE-2026-8398 | CRITICAL | Daemon | 9.8 | KEV | Yes | ✓ | May 15, 2026 | Patch |
| CVE-2026-42208 | CRITICAL | BerriAI | 9.8 | KEV | Yes | ✓ | May 8, 2026 | Patch |
| CVE-2026-0300 | CRITICAL | Palo Alto Networks | 9.8 | KEV | Yes | ✓ | May 6, 2026 | Patch |
| CVE-2026-41940 | CRITICAL | WebPros | 9.8 | KEV | Yes | ✓ | April 29, 2026 | Patch |
| CVE-2026-33824 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2026-39808 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2026-39987 | CRITICAL | Marimo | 9.8 | KEV | Yes | ✓ | April 9, 2026 | Patch |
| CVE-2026-35616 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | April 4, 2026 | Patch |
| CVE-2026-3055 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | March 23, 2026 | Patch |
| CVE-2026-33017 | CRITICAL | Langflow | 9.8 | KEV | Yes | ✓ | March 20, 2026 | Patch |
| CVE-2025-67038 | CRITICAL | Lantronix | 9.8 | KEV | Yes | ✓ | March 11, 2026 | Patch |
| CVE-2026-1731 | CRITICAL | BeyondTrust | 9.8 | KEV | Yes | ✓ | February 6, 2026 | Patch |
| CVE-2026-21643 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | February 6, 2026 | Patch |
| CVE-2026-1340 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 29, 2026 | Patch |
| CVE-2026-1281 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 29, 2026 | Patch |
| CVE-2025-40551 | CRITICAL | SolarWinds | 9.8 | KEV | Yes | ✓ | January 28, 2026 | Patch |
| CVE-2025-40536 | CRITICAL | SolarWinds | 9.8 | KEV | Yes | ✓ | January 28, 2026 | Patch |
| CVE-2026-24858 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | January 27, 2026 | Patch |
| CVE-2026-24423 | CRITICAL | SmarterTools | 9.8 | KEV | Yes | ✓ | January 23, 2026 | Patch |
| CVE-2026-0770 | CRITICAL | Langflow | 9.8 | KEV | Yes | ✓ | January 23, 2026 | Patch |
| CVE-2026-23760 | CRITICAL | SmarterTools | 9.8 | KEV | Yes | ✓ | January 22, 2026 | Patch |
| CVE-2026-20045 | CRITICAL | Cisco | 9.8 | KEV | Yes | ✓ | January 21, 2026 | Patch |
| CVE-2026-24061 | CRITICAL | GNU | 9.8 | KEV | Yes | ✓ | January 21, 2026 | Patch |
| CVE-2026-20963 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | January 13, 2026 | Patch |
| CVE-2025-14733 | CRITICAL | WatchGuard | 9.8 | KEV | Yes | ✓ | December 19, 2025 | Patch |
| CVE-2025-59374 | CRITICAL | ASUS | 9.8 | KEV | Yes | ✓ | December 17, 2025 | Patch |
| CVE-2025-14611 | CRITICAL | Gladinet | 9.8 | KEV | Yes | ✓ | December 12, 2025 | Patch |
| CVE-2025-59718 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | December 9, 2025 | Patch |
| CVE-2025-66644 | CRITICAL | Array Networks | 9.8 | KEV | Yes | ✓ | December 5, 2025 | Patch |
| CVE-2025-58360 | CRITICAL | OSGeo | 9.8 | KEV | Yes | ✓ | November 25, 2025 | Patch |