CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1970
Critical
552
Exploited in Wild
552
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-39987 | CRITICAL | Marimo | 9.8 | KEV | Yes | ✓ | April 9, 2026 | Patch |
| CVE-2026-35616 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | April 4, 2026 | Patch |
| CVE-2026-3055 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | March 23, 2026 | Patch |
| CVE-2026-33017 | CRITICAL | Langflow | 9.8 | KEV | Yes | ✓ | March 20, 2026 | Patch |
| CVE-2025-67038 | CRITICAL | Lantronix | 9.8 | KEV | Yes | ✓ | March 11, 2026 | Patch |
| CVE-2026-1731 | CRITICAL | BeyondTrust | 9.8 | KEV | Yes | ✓ | February 6, 2026 | Patch |
| CVE-2026-21643 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | February 6, 2026 | Patch |
| CVE-2026-1340 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 29, 2026 | Patch |
| CVE-2026-1281 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 29, 2026 | Patch |
| CVE-2025-40551 | CRITICAL | SolarWinds | 9.8 | KEV | Yes | ✓ | January 28, 2026 | Patch |
| CVE-2025-40536 | CRITICAL | SolarWinds | 9.8 | KEV | Yes | ✓ | January 28, 2026 | Patch |
| CVE-2026-24858 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | January 27, 2026 | Patch |
| CVE-2026-24423 | CRITICAL | SmarterTools | 9.8 | KEV | Yes | ✓ | January 23, 2026 | Patch |
| CVE-2026-0770 | CRITICAL | Langflow | 9.8 | KEV | Yes | ✓ | January 23, 2026 | Patch |
| CVE-2026-23760 | CRITICAL | SmarterTools | 9.8 | KEV | Yes | ✓ | January 22, 2026 | Patch |
| CVE-2026-20045 | CRITICAL | Cisco | 9.8 | KEV | Yes | ✓ | January 21, 2026 | Patch |
| CVE-2026-24061 | CRITICAL | GNU | 9.8 | KEV | Yes | ✓ | January 21, 2026 | Patch |
| CVE-2026-20963 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | January 13, 2026 | Patch |
| CVE-2025-25249 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | January 13, 2026 | Patch |
| CVE-2025-14733 | CRITICAL | WatchGuard | 9.8 | KEV | Yes | ✓ | December 19, 2025 | Patch |
| CVE-2025-59374 | CRITICAL | ASUS | 9.8 | KEV | Yes | ✓ | December 17, 2025 | Patch |
| CVE-2025-14611 | CRITICAL | Gladinet | 9.8 | KEV | Yes | ✓ | December 12, 2025 | Patch |
| CVE-2025-59718 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | December 9, 2025 | Patch |
| CVE-2025-66644 | CRITICAL | Array Networks | 9.8 | KEV | Yes | ✓ | December 5, 2025 | Patch |
| CVE-2025-58360 | CRITICAL | OSGeo | 9.8 | KEV | Yes | ✓ | November 25, 2025 | Patch |
| CVE-2025-64446 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | November 14, 2025 | Patch |
| CVE-2025-11953 | CRITICAL | React Native Community | 9.8 | KEV | Yes | ✓ | November 3, 2025 | Patch |
| CVE-2025-61757 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | October 21, 2025 | Patch |
| CVE-2025-61932 | CRITICAL | Motex | 9.8 | KEV | Yes | ✓ | October 20, 2025 | Patch |
| CVE-2025-53521 | CRITICAL | F5 | 9.8 | KEV | Yes | ✓ | October 15, 2025 | Patch |
| CVE-2025-59287 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | October 14, 2025 | Patch |
| CVE-2025-61882 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | October 5, 2025 | Patch |
| CVE-2025-10585 | CRITICAL | 9.8 | KEV | Yes | ✓ | September 24, 2025 | Patch | |
| CVE-2025-26399 | CRITICAL | SolarWinds | 9.8 | KEV | Yes | ✓ | September 23, 2025 | Patch |
| CVE-2025-9242 | CRITICAL | WatchGuard | 9.8 | KEV | Yes | ✓ | September 17, 2025 | Patch |
| CVE-2025-21043 | CRITICAL | Samsung | 9.8 | KEV | Yes | ✓ | September 12, 2025 | Patch |
| CVE-2025-21042 | CRITICAL | Samsung | 9.8 | KEV | Yes | ✓ | September 12, 2025 | Patch |
| CVE-2025-57819 | CRITICAL | Sangoma | 9.8 | KEV | Yes | ✓ | August 28, 2025 | Patch |
| CVE-2025-7775 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | August 26, 2025 | Patch |
| CVE-2025-54948 | CRITICAL | Trend Micro | 9.8 | KEV | Yes | ✓ | August 5, 2025 | Patch |
| CVE-2025-53770 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 20, 2025 | Patch |
| CVE-2025-54309 | CRITICAL | CrushFTP | 9.8 | KEV | Yes | ✓ | July 18, 2025 | Patch |
| CVE-2025-54068 | CRITICAL | Laravel | 9.8 | KEV | Yes | ✓ | July 17, 2025 | Patch |
| CVE-2025-25257 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | July 17, 2025 | Patch |
| CVE-2025-6543 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | June 25, 2025 | Patch |
| CVE-2025-32756 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | May 13, 2025 | Patch |
| CVE-2025-4632 | CRITICAL | Samsung | 9.8 | KEV | Yes | ✓ | May 13, 2025 | Patch |
| CVE-2025-2776 | CRITICAL | SysAid | 9.8 | KEV | Yes | ✓ | May 7, 2025 | Patch |
| CVE-2025-42599 | CRITICAL | Qualitia | 9.8 | KEV | Yes | ✓ | April 18, 2025 | Patch |
| CVE-2025-31201 | CRITICAL | Apple | 9.8 | KEV | Yes | ✓ | April 16, 2025 | Patch |