Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,730 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-10-01.
- Kevscope API $5 pack $5 for 2,000 calls, never expires: patch-priority verdicts for up to 20 CVEs per call from today's KEV, EPSS, CVSS and SSVC data, by REST API or MCP. Pay by card, your API key is on screen the moment checkout ends; no account, no subscription.
- Exploited Vulnerabilities Brief: Weekly Edition $9/month: a fresh KEV + EPSS brief every Monday (PDF + CSVs): new exploited CVEs, what to patch first, upcoming CISA deadlines.
- Kevscope CVE priority API 200 free calls a day, $5 for 2,000 calls (no expiry), or $19/month for 10,000: returns a patch-priority verdict for up to 20 CVEs per call with the evidence (KEV, EPSS, CVSS, CISA SSVC), most urgent first, by API or MCP.
- Exploited Vulnerabilities Brief (September 2026) $15: this month's KEV additions ranked by EPSS, ransomware use and due date, as a one-off report.
- All Three Monday Briefs: Rates, Recalls + Exploited Vulns $25/month: all three weekly briefs (Treasury/BLS rates & macro, NHTSA recalls, CISA KEV/EPSS) for $25/month instead of $37.
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-21385 | Qualcomm Multiple Chipsets | 2026-03-03 | 1.3% | |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | 2026-02-25 | 88.5% | |
| CVE-2022-20775 | Cisco SD-WAN | 2026-02-25 | 12.5% | |
| CVE-2026-25108 | Soliton Systems K.K FileZen | 2026-02-24 | 5.1% | |
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 26.8% | |
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 98.9% | |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | 13.3% | |
| CVE-2021-22175 | GitLab GitLab | 2026-02-18 | 53.4% | |
| CVE-2026-2441 | Google Chromium | 2026-02-17 | 55.1% | |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | 2026-02-17 | 1.8% | |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | 2026-02-17 | 84.4% | |
| CVE-2008-0015 | Microsoft Windows | 2026-02-17 | 76.6% | |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 91.0% | known |
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 1.4% | |
| CVE-2025-40536 | SolarWinds Web Help Desk | 2026-02-12 | 73.6% | |
| CVE-2025-15556 | Notepad++ Notepad++ | 2026-02-12 | 1.7% | |
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 80.9% | |
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 4.1% | |
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 4.8% | |
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2.5% | |
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 1.6% | |
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 15.6% | |
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 24.2% | |
| CVE-2026-24423 | SmarterTools SmarterMail | 2026-02-05 | 88.2% | known |
| CVE-2025-11953 | React Native Community CLI | 2026-02-05 | 94.0% | |
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 84.6% | |
| CVE-2025-40551 | SolarWinds Web Help Desk | 2026-02-03 | 84.2% | |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | 2026-02-03 | 35.6% | |
| CVE-2019-19006 | Sangoma FreePBX | 2026-02-03 | 55.9% | |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 98.7% | |
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 85.8% | |
| CVE-2026-24061 | GNU InetUtils | 2026-01-26 | 99.0% | |
| CVE-2026-23760 | SmarterTools SmarterMail | 2026-01-26 | 96.5% | known |
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 70.8% | |
| CVE-2025-52691 | SmarterTools SmarterMail | 2026-01-26 | 85.7% | known |
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | 14.7% | |
| CVE-2024-37079 | Broadcom VMware vCenter Server | 2026-01-23 | 22.4% | |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 48.9% | |
| CVE-2025-54313 | Prettier eslint-config-prettier | 2026-01-22 | 4.5% | |
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | 81.9% | |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 64.7% | |
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 4.5% | |
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 7.2% | |
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 85.2% | |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 2026-01-07 | 90.2% | |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 67.3% | |
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | 2025-12-29 | 83.2% | |
| CVE-2023-52163 | Digiever DS-2105 Pro | 2025-12-22 | 96.9% | |
| CVE-2025-14733 | WatchGuard Firebox | 2025-12-19 | 26.5% | known |
| CVE-2025-59374 | ASUS Live Update | 2025-12-17 | 1.2% | |
| CVE-2025-40602 | SonicWall SMA1000 appliance | 2025-12-17 | 2.8% | |
| CVE-2025-20393 | Cisco Multiple Products | 2025-12-17 | 32.4% | |
| CVE-2025-59718 | Fortinet Multiple Products | 2025-12-16 | 68.3% | |
| CVE-2025-43529 | Apple Multiple Products | 2025-12-15 | 8.8% | |
| CVE-2025-14611 | Gladinet CentreStack and Triofox | 2025-12-15 | 53.3% | |
| CVE-2025-14174 | Google Chromium | 2025-12-12 | 22.3% | |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | 2025-12-12 | 27.1% | |
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | 60.5% | |
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2.5% | |
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 90.5% | |
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 3.4% | |
| CVE-2022-37055 | D-Link Routers | 2025-12-08 | 55.5% | |
| CVE-2025-55182 | Meta React Server Components | 2025-12-05 | 99.8% | known |
| CVE-2021-26828 | OpenPLC ScadaBR | 2025-12-03 | 39.4% | |
| CVE-2025-48633 | Android Framework | 2025-12-02 | 0.3% | |
| CVE-2025-48572 | Android Framework | 2025-12-02 | 0.3% | |
| CVE-2021-26829 | OpenPLC ScadaBR | 2025-11-28 | 48.0% | |
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 88.6% | |
| CVE-2025-13223 | Google Chromium V8 | 2025-11-19 | 5.0% | |
| CVE-2025-58034 | Fortinet FortiWeb | 2025-11-18 | 55.6% | |
| CVE-2025-64446 | Fortinet FortiWeb | 2025-11-14 | 91.8% | |
| CVE-2025-9242 | WatchGuard Firebox | 2025-11-12 | 91.3% | |
| CVE-2025-62215 | Microsoft Windows | 2025-11-12 | 6.0% | |
| CVE-2025-12480 | Gladinet Triofox | 2025-11-12 | 95.4% | |
| CVE-2025-21042 | Samsung Mobile Devices | 2025-11-10 | 33.2% | |
| CVE-2025-48703 | CWP Control Web Panel | 2025-11-04 | 99.7% | |
| CVE-2025-11371 | Gladinet CentreStack and Triofox | 2025-11-04 | 92.1% | |
| CVE-2025-41244 | Broadcom VMware Aria Operations and VMware Tools | 2025-10-30 | 8.4% | |
| CVE-2025-24893 | XWiki Platform | 2025-10-30 | 99.9% | |
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 73.3% | |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 78.0% | |
| CVE-2025-59287 | Microsoft Windows | 2025-10-24 | 100.0% | |
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | 94.5% | |
| CVE-2025-61932 | Motex LANSCOPE Endpoint Manager | 2025-10-22 | 2.8% | |
| CVE-2025-61884 | Oracle E-Business Suite | 2025-10-20 | 95.9% | known |
| CVE-2025-33073 | Microsoft Windows | 2025-10-20 | 82.7% | |
| CVE-2025-2747 | Kentico Xperience CMS | 2025-10-20 | 97.2% | |
| CVE-2025-2746 | Kentico Xperience CMS | 2025-10-20 | 73.0% | |
| CVE-2022-48503 | Apple Multiple Products | 2025-10-20 | 3.2% | |
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | 2025-10-15 | 88.0% | |
| CVE-2025-59230 | Microsoft Windows | 2025-10-14 | 2.7% | |
| CVE-2025-47827 | IGEL IGEL OS | 2025-10-14 | 4.9% | |
| CVE-2025-24990 | Microsoft Windows | 2025-10-14 | 6.4% | |
| CVE-2016-7836 | SKYSEA Client View | 2025-10-14 | 19.2% | |
| CVE-2021-43798 | Grafana Labs Grafana | 2025-10-09 | 88.5% | |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 4.0% | |
| CVE-2025-61882 | Oracle E-Business Suite | 2025-10-06 | 99.7% | known |
| CVE-2021-43226 | Microsoft Windows | 2025-10-06 | 3.1% | known |
| CVE-2021-22555 | Linux Kernel | 2025-10-06 | 78.7% | |
| CVE-2013-3918 | Microsoft Windows | 2025-10-06 | 73.7% | |
| CVE-2011-3402 | Microsoft Windows | 2025-10-06 | 78.1% | |
| CVE-2010-3962 | Microsoft Internet Explorer | 2025-10-06 | 96.8% | |
| CVE-2010-3765 | Mozilla Multiple Products | 2025-10-06 | 83.2% | |
| CVE-2025-4008 | Smartbedded Meteobridge | 2025-10-02 | 93.7% | |
| CVE-2025-21043 | Samsung Mobile Devices | 2025-10-02 | 2.1% | |
| CVE-2017-1000353 | Jenkins Jenkins | 2025-10-02 | 99.7% | |
| CVE-2015-7755 | Juniper ScreenOS | 2025-10-02 | 61.1% | |
| CVE-2014-6278 | GNU GNU Bash | 2025-10-02 | 99.6% | |
| CVE-2025-59689 | Libraesva Email Security Gateway | 2025-09-29 | 1.9% | |
| CVE-2025-32463 | Sudo Sudo | 2025-09-29 | 61.0% | |
| CVE-2025-20352 | Cisco IOS and IOS XE | 2025-09-29 | 39.4% | |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | 99.8% | known |
| CVE-2021-21311 | Adminer Adminer | 2025-09-29 | 98.5% | |
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 87.1% | |
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 70.7% | |
| CVE-2025-10585 | Google Chromium V8 | 2025-09-23 | 5.4% | |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso | 2025-09-11 | 96.9% | |
| CVE-2025-53690 | Sitecore Multiple Products | 2025-09-04 | 51.1% | |
| CVE-2025-48543 | Android Runtime | 2025-09-04 | 0.5% | |
| CVE-2025-38352 | Linux Kernel | 2025-09-04 | 1.3% | |
| CVE-2025-9377 | TP-Link Multiple Routers | 2025-09-03 | 33.5% | |
| CVE-2023-50224 | TP-Link TL-WR841N | 2025-09-03 | 15.6% | |
| CVE-2025-55177 | Meta Platforms WhatsApp | 2025-09-02 | 4.3% | |
| CVE-2020-24363 | TP-Link TL-WA855RE | 2025-09-02 | 20.7% | |
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 85.5% | |
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 19.6% | |
| CVE-2025-48384 | Git Git | 2025-08-25 | 4.2% | |
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 14.6% | |
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 3.5% | |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS | 2025-08-21 | 32.5% | |
| CVE-2025-54948 | Trend Micro Apex One | 2025-08-18 | 22.0% | |
| CVE-2025-8876 | N-able N-Central | 2025-08-13 | 3.4% | |
| CVE-2025-8875 | N-able N-Central | 2025-08-13 | 1.9% | |
| CVE-2025-8088 | RARLAB WinRAR | 2025-08-12 | 94.1% | known |
| CVE-2013-3893 | Microsoft Internet Explorer | 2025-08-12 | 87.5% | |
| CVE-2007-0671 | Microsoft Office | 2025-08-12 | 43.2% | |
| CVE-2022-40799 | D-Link DNR-322L | 2025-08-05 | 33.7% | |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 54.0% | |
| CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 97.5% | |
| CVE-2025-20337 | Cisco Identity Services Engine | 2025-07-28 | 67.8% | |
| CVE-2025-20281 | Cisco Identity Services Engine | 2025-07-28 | 97.6% | |
| CVE-2023-2533 | PaperCut NG/MF | 2025-07-28 | 28.6% | |
| CVE-2025-6558 | Google Chromium | 2025-07-22 | 9.6% | |
| CVE-2025-54309 | CrushFTP CrushFTP | 2025-07-22 | 94.9% | |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.1% | known |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 100.0% | known |
| CVE-2025-2776 | SysAid SysAid On-Prem | 2025-07-22 | 64.4% | |
| CVE-2025-2775 | SysAid SysAid On-Prem | 2025-07-22 | 43.0% | |
| CVE-2025-53770 | Microsoft SharePoint | 2025-07-20 | 100.0% | known |
| CVE-2025-25257 | Fortinet FortiWeb | 2025-07-18 | 99.8% | |
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | 2025-07-14 | 93.2% | |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | 100.0% | known |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 81.0% | |
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 98.5% | |
| CVE-2016-10033 | PHP PHPMailer | 2025-07-07 | 99.7% | |
| CVE-2014-3931 | Looking Glass Multi-Router Looking Glass (MRLG) | 2025-07-07 | 29.0% | |
| CVE-2025-6554 | Google Chromium V8 | 2025-07-02 | 12.6% | |
| CVE-2025-48928 | TeleMessage TM SGNL | 2025-07-01 | 0.6% | |
| CVE-2025-48927 | TeleMessage TM SGNL | 2025-07-01 | 11.1% | |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | 10.6% | |
| CVE-2024-54085 | AMI MegaRAC SPx | 2025-06-25 | 60.7% | |
| CVE-2024-0769 | D-Link DIR-859 Router | 2025-06-25 | 82.7% | |
| CVE-2019-6693 | Fortinet FortiOS | 2025-06-25 | 5.8% | known |
| CVE-2023-0386 | Linux Kernel | 2025-06-17 | 7.9% | |
| CVE-2025-43200 | Apple Multiple Products | 2025-06-16 | 1.2% | |
| CVE-2023-33538 | TP-Link Multiple Routers | 2025-06-16 | 41.6% | |
| CVE-2025-33053 | Microsoft Windows | 2025-06-10 | 87.0% | |
| CVE-2025-24016 | Wazuh Wazuh Server | 2025-06-10 | 93.8% | |
| CVE-2025-32433 | Erlang Erlang/OTP | 2025-06-09 | 98.8% | |
| CVE-2024-42009 | Roundcube Webmail | 2025-06-09 | 82.9% | |
| CVE-2025-5419 | Google Chromium V8 | 2025-06-05 | 7.8% | |
| CVE-2025-27038 | Qualcomm Multiple Chipsets | 2025-06-03 | 1.0% | |
| CVE-2025-21480 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.5% | |
| CVE-2025-21479 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.8% | |
| CVE-2025-3935 | ConnectWise ScreenConnect | 2025-06-02 | 3.5% | |
| CVE-2025-35939 | Craft CMS Craft CMS | 2025-06-02 | 1.3% | |
| CVE-2024-56145 | Craft CMS Craft CMS | 2025-06-02 | 97.4% | |
| CVE-2023-39780 | ASUS RT-AX55 Routers | 2025-06-02 | 40.2% | |
| CVE-2021-32030 | ASUS Routers | 2025-06-02 | 99.4% | |
| CVE-2025-4632 | Samsung MagicINFO 9 Server | 2025-05-22 | 24.3% | |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 86.5% | |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 99.9% | |
| CVE-2025-27920 | Srimax Output Messenger | 2025-05-19 | 1.9% | |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 23.6% | |
| CVE-2024-11182 | MDaemon Email Server | 2025-05-19 | 17.6% | |
| CVE-2023-38950 | ZKTeco BioTime | 2025-05-19 | 92.5% | |
| CVE-2025-42999 | SAP NetWeaver | 2025-05-15 | 13.9% | known |
| CVE-2024-12987 | DrayTek Vigor Routers | 2025-05-15 | 98.1% | |
| CVE-2025-32756 | Fortinet Multiple Products | 2025-05-14 | 29.8% | |
| CVE-2025-32709 | Microsoft Windows | 2025-05-13 | 2.1% | |
| CVE-2025-32706 | Microsoft Windows | 2025-05-13 | 2.3% | |
| CVE-2025-32701 | Microsoft Windows | 2025-05-13 | 1.4% | |
| CVE-2025-30400 | Microsoft Windows | 2025-05-13 | 1.9% | |
| CVE-2025-30397 | Microsoft Windows | 2025-05-13 | 26.8% | |
| CVE-2025-47729 | TeleMessage TM SGNL | 2025-05-12 | 0.4% | |
| CVE-2024-6047 | GeoVision Multiple Devices | 2025-05-07 | 10.1% | |
| CVE-2024-11120 | GeoVision Multiple Devices | 2025-05-07 | 28.4% | |
| CVE-2025-27363 | FreeType FreeType | 2025-05-06 | 27.8% | |
| CVE-2025-3248 | Langflow Langflow | 2025-05-05 | 100.0% | known |
| CVE-2025-34028 | Commvault Command Center | 2025-05-02 | 97.6% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.