Cleartext

Reference data

Exploited CVEs (CISA KEV)

Reference pages for the latest vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog, mirrored from the official feed on every build.

CISA KEV 2026.09.23released rebuilt
Entries in catalog
1,721
Added in last 30 days
46
Known ransomware use
361
Vendors and projects
283

Answers from this data #

  • What is the CISA KEV catalog?

    The Known Exploited Vulnerabilities (KEV) catalog is CISA’s list of vulnerabilities with reliable evidence of active exploitation.

    Verified · Rev. 1

  • How many vulnerabilities are in the CISA KEV catalog?

    CISA’s Known Exploited Vulnerabilities catalog lists 1,721 vulnerabilities as of catalog version 2026.09.23, released September 23, 2026.

    Verified · Rev. 1

  • Which vendors have the most CISA KEV entries?

    Microsoft has the most entries in CISA’s Known Exploited Vulnerabilities catalog, with 388 of 1,721 (22.5%), followed by Cisco (99) and Apple (94), as of catalog 2026.09.23.

    Verified · Rev. 1

  • What does the due date in the CISA KEV catalog mean?

    It is the date by which US federal civilian executive branch agencies must complete the entry’s required action, usually applying the vendor’s update or mitigation, or stop using the product.

    Verified · Rev. 1

Latest entries #

The 60 most recently added entries in CISA KEV catalog 2026.09.23.
CVEVendor and productAddedDueRansomware
CVE-2026-94127F5 BIG-IP APMUnknown
CVE-2026-93952Arista VeloCloud OrchestratorUnknown
CVE-2026-93616Check Point Multiple ProductsUnknown
CVE-2026-85102Check Point Multiple ProductsUnknown
CVE-2026-7273Zyxel GS1900 Series SwitchesUnknown
CVE-2026-53266Linux KernelUnknown
CVE-2025-39964Linux KernelUnknown
CVE-2025-39682Linux KernelUnknown
CVE-2026-87886Acronis BackupUnknown
CVE-2026-76460Cisco Identity Services EngineUnknown
CVE-2026-58704Google PixelUnknown
CVE-2026-76461Cisco Secure Email GatewayUnknown
CVE-2026-85706GitLab Community Edition and Enterprise EditionUnknown
CVE-2026-84869ConnectWise ScreenConnectUnknown
CVE-2026-42018JFrog ArtifactoryUnknown
CVE-2026-42016JFrog ArtifactoryUnknown
CVE-2026-86060MikroTik RouterOSUnknown
CVE-2026-67277MikroTik RouterOSUnknown
CVE-2026-87491Google Chromium V8Unknown
CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementUnknown
CVE-2026-19490Citrix NetScalerUnknown
CVE-2025-25249Fortinet Multiple ProductsUnknown
CVE-2026-86218N-able N-centralUnknown
CVE-2026-85880Microsoft WindowsUnknown
CVE-2026-81963Microsoft WindowsUnknown
CVE-2026-75650Adobe Commerce and MagentoUnknown
CVE-2026-85046Google Chromium V8Unknown
CVE-2026-9586Sangoma SwitchvoxUnknown
CVE-2026-83549SonicWall SMA1000 AppliancesUnknown
CVE-2026-83548SonicWall SMA1000 AppliancesUnknown
CVE-2026-82329JFrog ArtifactoryUnknown
CVE-2026-59822BerriAI LiteLLMUnknown
CVE-2026-49869Kestra Kestra OSSUnknown
CVE-2026-48710Kludex StarletteUnknown
CVE-2026-82078PaperCut NG/MFUnknown
CVE-2026-81578PaperCut NG/MFUnknown
CVE-2026-66384JFrog ArtifactoryUnknown
CVE-2026-53362Linux KernelUnknown
CVE-2023-49105ownCloud ownCloudUnknown
CVE-2026-8452Citrix NetScaler ADC and NetScaler GatewayUnknown
CVE-2022-0995Linux KernelUnknown
CVE-2021-23758Ajax.NET Professional Ajax.NET ProfessionalUnknown
CVE-2019-1068Microsoft SQL ServerUnknown
CVE-2015-5287Red Hat Automatic Bug Reporting ToolUnknown
CVE-2015-3246Red Hat LibuserUnknown
CVE-2026-60004Gitea GiteaUnknown
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-inUnknown
CVE-2026-73570Synacor Zimbra Collaboration Suite (ZCS)Unknown
CVE-2026-72530TrueConf ServerUnknown
CVE-2026-72529TrueConf ServerUnknown
CVE-2026-64849MLflow MLflowUnknown
CVE-2026-65400Apple macOSUnknown
CVE-2026-59310Broadcom VMware vCenterKnown
CVE-2026-55040Microsoft SharePointUnknown
CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service ExtensionsUnknown
CVE-2025-62593Ray-Project RayUnknown
CVE-2026-72898Metabase MetabaseUnknown
CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Unknown
CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Unknown
CVE-2026-8037Progress LoadMasterUnknown

Individual CVE pages are marked noindex until an editor adds analysis. Source: CISA. Download the full catalog from CISA as JSON.