CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1970
Critical
552
Exploited in Wild
552
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-20333 | CRITICAL | Cisco | 9.9 | KEV | Yes | ✓ | September 25, 2025 | Patch |
| CVE-2025-49113 | CRITICAL | Roundcube | 9.9 | KEV | Yes | ✓ | June 2, 2025 | Patch |
| CVE-2025-24016 | CRITICAL | Wazuh | 9.9 | KEV | Yes | ✓ | February 10, 2025 | Patch |
| CVE-2024-57968 | CRITICAL | Advantive | 9.9 | KEV | Yes | ✓ | February 3, 2025 | Patch |
| CVE-2024-57726 | CRITICAL | SimpleHelp | 9.9 | KEV | Yes | ✓ | January 15, 2025 | Patch |
| CVE-2023-48365 | CRITICAL | Qlik | 9.9 | KEV | Yes | ✓ | November 15, 2023 | Patch |
| CVE-2026-102764 | CRITICAL | BeyondTrust | 9.8 | KEV | Yes | ✓ | October 15, 2026 | Patch |
| CVE-2026-76519 | CRITICAL | Cisco | 9.8 | KEV | Yes | ✗ | October 14, 2026 | |
| CVE-2026-104286 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✗ | October 1, 2026 | |
| CVE-2026-102490 | CRITICAL | Zammad GmbH | 9.8 | KEV | Yes | ✓ | September 30, 2026 | Patch |
| CVE-2026-102489 | CRITICAL | Zammad GmbH | 9.8 | KEV | Yes | ✓ | September 30, 2026 | Patch |
| CVE-2026-76504 | CRITICAL | Cisco | 9.8 | KEV | Yes | ✗ | September 30, 2026 | |
| CVE-2026-94127 | CRITICAL | F5 | 9.8 | KEV | Yes | ✗ | September 22, 2026 | |
| CVE-2026-93616 | CRITICAL | Check Point | 9.8 | KEV | Yes | ✗ | September 22, 2026 | |
| CVE-2026-76461 | CRITICAL | Cisco | 9.8 | KEV | Yes | ✗ | September 14, 2026 | |
| CVE-2026-85102 | CRITICAL | Check Point | 9.8 | KEV | Yes | ✗ | September 9, 2026 | |
| CVE-2026-86218 | CRITICAL | N-able | 9.8 | KEV | Yes | ✓ | September 6, 2026 | Patch |
| CVE-2026-82329 | CRITICAL | JFrog | 9.8 | KEV | Yes | ✗ | August 28, 2026 | |
| CVE-2026-60004 | CRITICAL | Gitea | 9.8 | KEV | Yes | ✓ | August 26, 2026 | Patch |
| CVE-2026-72529 | CRITICAL | TrueConf | 9.8 | KEV | Yes | ✓ | August 19, 2026 | Patch |
| CVE-2026-65400 | CRITICAL | Apple | 9.8 | KEV | Yes | ✓ | August 6, 2026 | Patch |
| CVE-2026-59310 | CRITICAL | Broadcom | 9.8 | KEV | Yes | ✗ | July 30, 2026 | |
| CVE-2026-63077 | CRITICAL | JetBrains | 9.8 | KEV | Yes | ✓ | July 27, 2026 | Patch |
| CVE-2026-63030 | CRITICAL | WordPress | 9.8 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-9198 | CRITICAL | IBM | 9.8 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-58644 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56164 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-50522 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56291 | CRITICAL | Balbooa | 9.8 | KEV | Yes | ✓ | July 9, 2026 | Patch |
| CVE-2026-8452 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | June 30, 2026 | Patch |
| CVE-2026-56290 | CRITICAL | Joomlack | 9.8 | KEV | Yes | ✓ | June 29, 2026 | Patch |
| CVE-2026-48939 | CRITICAL | iCagenda | 9.8 | KEV | Yes | ✓ | June 20, 2026 | Patch |
| CVE-2026-48908 | CRITICAL | JoomShaper | 9.8 | KEV | Yes | ✓ | June 20, 2026 | Patch |
| CVE-2026-12569 | CRITICAL | PTC | 9.8 | KEV | Yes | ✗ | June 18, 2026 | |
| CVE-2026-35273 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | June 11, 2026 | Patch |
| CVE-2026-20253 | CRITICAL | Splunk | 9.8 | KEV | Yes | ✓ | June 10, 2026 | Patch |
| CVE-2026-25089 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | June 9, 2026 | Patch |
| CVE-2026-48907 | CRITICAL | Widget Factory | 9.8 | KEV | Yes | ✓ | June 5, 2026 | Patch |
| CVE-2026-8037 | CRITICAL | Progress | 9.8 | KEV | Yes | ✓ | June 4, 2026 | Patch |
| CVE-2026-46817 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | May 28, 2026 | Patch |
| CVE-2026-48027 | CRITICAL | Nx | 9.8 | KEV | Yes | ✓ | May 27, 2026 | Patch |
| CVE-2026-45247 | CRITICAL | Mirasvit | 9.8 | KEV | Yes | ✓ | May 26, 2026 | Patch |
| CVE-2026-48172 | CRITICAL | LiteSpeed | 9.8 | KEV | Yes | ✓ | May 21, 2026 | Patch |
| CVE-2026-9082 | CRITICAL | Drupal | 9.8 | KEV | Yes | ✓ | May 20, 2026 | Patch |
| CVE-2026-8398 | CRITICAL | Daemon | 9.8 | KEV | Yes | ✓ | May 15, 2026 | Patch |
| CVE-2026-42208 | CRITICAL | BerriAI | 9.8 | KEV | Yes | ✓ | May 8, 2026 | Patch |
| CVE-2026-0300 | CRITICAL | Palo Alto Networks | 9.8 | KEV | Yes | ✓ | May 6, 2026 | Patch |
| CVE-2026-41940 | CRITICAL | WebPros | 9.8 | KEV | Yes | ✓ | April 29, 2026 | Patch |
| CVE-2026-33824 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2026-39808 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | April 14, 2026 | Patch |