HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

Added this week 12 entries

$ kev --since 7d --show due

CVE-2026-114713UnrealIRCd UnrealIRCddue 16 Nov

CVE-2026-123039Check Point Multiple Productsdue 16 Nov

CVE-2026-111560Barracuda Networks Multiple Productsdue 13 Nov

CVE-2026-111793Openwave Messaging Limited Webtop Media Transcoderdue 24 Nov

CVE-2026-116606Barracuda Networks Barracuda Email Security Gateway (ESG)due 13 Nov

CVE-2026-124194Microsoft Officedue 24 Nov

CVE-2026-125350Google Chromiumdue 24 Nov

CVE-2026-20320Cisco BroadWorksdue 24 Nov

CVE-2026-102895GPUStack GPUStackdue 12 Nov

CVE-2026-116779SignalWire FreeSwitchdue 12 Nov

CVE-2026-123158OpenBSD OpenSSHdue 12 Nov

CVE-2026-123218IBM Aspera Faspexdue 12 Nov

Vendors with the most entries

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2026-114713UnrealIRCdUnrealIRCdUnrealIRCd Improper Neutralization of Delimiters Vulnerability13 Nov 202616 Nov 2026Unknown
CVE-2026-123039Check PointMultiple ProductsCheck Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability13 Nov 202616 Nov 2026Unknown
CVE-2026-111560Barracuda NetworksMultiple ProductsBarracuda Networks Multiple Products OS Command Injection Vulnerability10 Nov 202613 Nov 2026Unknown
CVE-2026-111793Openwave Messaging LimitedWebtop Media TranscoderOpenwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability10 Nov 202624 Nov 2026Unknown
CVE-2026-116606Barracuda NetworksBarracuda Email Security Gateway (ESG)Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability10 Nov 202613 Nov 2026Unknown
CVE-2026-124194MicrosoftOfficeMicrosoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability10 Nov 202624 Nov 2026Unknown
CVE-2026-125350GoogleChromiumGoogle Chromium Use-After-Free Vulnerability10 Nov 202624 Nov 2026Unknown
CVE-2026-20320CiscoBroadWorksCisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability10 Nov 202624 Nov 2026Unknown
CVE-2026-102895GPUStackGPUStackGPUStack Improper Authentication Vulnerability9 Nov 202612 Nov 2026Unknown
CVE-2026-116779SignalWireFreeSwitchSignalWire FreeSwitch Code Injection Vulnerability9 Nov 202612 Nov 2026Unknown
CVE-2026-123158OpenBSDOpenSSHOpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability9 Nov 202612 Nov 2026Unknown
CVE-2026-123218IBMAspera FaspexIBM Aspera Faspex Incorrect Authorization Vulnerability9 Nov 202612 Nov 2026Unknown
CVE-2026-19868SonicWallSonicOS SSLVPNSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability6 Nov 202620 Nov 2026Unknown
CVE-2024-27834AppleMultiple ProductsApple Multiple Products Improper Authentication Vulnerability4 Nov 202618 Nov 2026Unknown
CVE-2026-119977WordPressWordPress CoreWordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability3 Nov 20266 Nov 2026Unknown
CVE-2026-111357IvantiConnect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability30 Oct 20262 Nov 2026Unknown
CVE-2026-118527IvantiConnect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability30 Oct 202613 Nov 2026Unknown
CVE-2026-76418CiscoSecure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability29 Oct 20261 Nov 2026Unknown
CVE-2026-97229GitLabCommunity Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability29 Oct 20261 Nov 2026Unknown
CVE-2026-41709BroadcomVMware ESXBroadcom VMWare ESX Insufficient Logging Vulnerability28 Oct 202611 Nov 2026Unknown
CVE-2026-46300LinuxKernelLinux Kernel Missing Initialization of a Variable Vulnerability28 Oct 202631 Oct 2026Unknown
CVE-2026-111497GoogleBrotliGoogle Brotli Unchecked Return Value Vulnerability27 Oct 202610 Nov 2026Unknown
CVE-2026-48356AdobeCommerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability27 Oct 202610 Nov 2026Unknown
CVE-2026-109618PHP GroupPHPPHP Memory Corruption Vulnerability26 Oct 202629 Oct 2026Unknown
CVE-2026-109619PHP GroupPHPPHP Stale Internal Request-State Vulnerability26 Oct 202629 Oct 2026Unknown
CVE-2026-110447CollaboraCollabora Online – Built-in CODE ServerCollabora Online – Built-in CODE Server OS Command Injection Vulnerability23 Oct 202626 Oct 2026Unknown
CVE-2026-114625AristaVeloCloud OrchestratorArista VeloCloud Orchestrator SQL Injection Vulnerability23 Oct 202626 Oct 2026Unknown
CVE-2026-106931EG Secure SolutionsSiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability20 Oct 202623 Oct 2026Unknown
CVE-2026-110936SiemensSoftware CenterSiemens Software Center Uncontrolled Search Path Element Vulnerability20 Oct 20263 Nov 2026Unknown
CVE-2026-96652PlexMedia ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability20 Oct 20263 Nov 2026Unknown
CVE-2026-96654PlexMedia ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability20 Oct 202623 Oct 2026Unknown
CVE-2026-96655PlexMedia ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability20 Oct 20263 Nov 2026Unknown
CVE-2026-96656PlexMedia ServerPlex Media Server External Control of File Name or Path Vulnerability20 Oct 202623 Oct 2026Unknown
CVE-2025-61624FortinetMultiple ProductsFortinet Multiple Products Path Traversal Vulnerability16 Oct 202619 Oct 2026Unknown
CVE-2026-102764BeyondTrustRemote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability16 Oct 202619 Oct 2026Unknown
CVE-2026-21589AtlassianMultiple ProductsAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability15 Oct 202618 Oct 2026Unknown
CVE-2026-0322Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Code Injection Vulnerability14 Oct 202617 Oct 2026Unknown
CVE-2026-105133AhsayAhsayCBSAhsay AhsayCBS Improper Authentication Vulnerability14 Oct 202617 Oct 2026Unknown
CVE-2026-105134AhsayAhsayCBSAhsay AhsayCBS Command Injection Vulnerability14 Oct 202617 Oct 2026Unknown
CVE-2026-76519CiscoSecure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability14 Oct 202617 Oct 2026Unknown
CVE-2026-104935IvantiConnect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability13 Oct 202616 Oct 2026Unknown
CVE-2026-96951MicrosoftWindowsMicrosoft Windows Command Injection Vulnerability13 Oct 202616 Oct 2026Unknown
CVE-2015-3306ProFTPDProFTPDProFTPD Improper Access Control Vulnerability8 Oct 202611 Oct 2026Unknown
CVE-2015-5477ISCBINDISC BIND Data Processing Errors Vulnerability8 Oct 202611 Oct 2026Unknown
CVE-2016-3081ApacheStrutsApache Struts Command Injection Vulnerability8 Oct 202611 Oct 2026Unknown
CVE-2021-3199ONLYOFFICEDocsONLYOFFICE Docs Server Path Traversal Vulnerability8 Oct 202611 Oct 2026Unknown
CVE-2023-22894StrapiStrapiStrapi Cleartext Storage of Sensitive Information Vulnerability8 Oct 202611 Oct 2026Unknown
CVE-2026-88779CitrixNetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability4 Oct 20267 Oct 2026Unknown
CVE-2026-102489Zammad GmbHZammadZammad GmbH Zammad Session Fixation Vulnerability2 Oct 20265 Oct 2026Unknown
CVE-2026-102490Zammad GmbHZammadZammad GmbH Zammad Improper Privilege Management Vulnerability2 Oct 20265 Oct 2026Unknown
CVE-2026-104286FortinetFortiMailFortinet FortiMail Path Traversal Vulnerability1 Oct 20264 Oct 2026Unknown
CVE-2026-76504CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability30 Sep 20263 Oct 2026Unknown
CVE-2026-86950AppleMultiple ProductsApple Multiple Products Out-of-Bounds Write Vulnerability29 Sep 202613 Oct 2026Unknown
CVE-2026-88771CitrixNetScalerCitrix NetScaler Improper Input Validation Vulnerability27 Sep 202630 Sep 2026Unknown
CVE-2026-88772CitrixNetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability27 Sep 202630 Sep 2026Unknown
CVE-2026-65660MicrosoftSharePointMicrosoft SharePoint Code Injection Vulnerability25 Sep 202628 Sep 2026Unknown
CVE-2026-67279MikroTikRouterOSMikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability25 Sep 202628 Sep 2026Unknown
CVE-2026-87902WordPressCoreWordPress Core Remote File Inclusion Vulnerability25 Sep 202628 Sep 2026Unknown
CVE-2026-5430WSO2Multiple ProductsWSO2 Multiple Products Path Traversal Vulnerability24 Sep 202627 Sep 2026Unknown
CVE-2026-71362AdobeCommerce and MagentoAdobe Commerce and Magento Incorrect Authorization Vulnerability24 Sep 202627 Sep 2026Unknown
CVE-2026-85102Check PointMultiple ProductsCheck Point Multiple Products Improper Certificate Validation Vulnerability22 Sep 202625 Sep 2026Unknown
CVE-2026-93616Check PointMultiple ProductsCheck Point Multiple Products Path Traversal Vulnerability22 Sep 202625 Sep 2026Unknown
CVE-2026-93952AristaVeloCloud OrchestratorArista VeloCloud Orchestrator Improper Input Validation Vulnerability22 Sep 202625 Sep 2026Unknown
CVE-2026-94127F5BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability22 Sep 202625 Sep 2026Unknown
CVE-2026-7273ZyxelGS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability21 Sep 202624 Sep 2026Unknown
CVE-2025-39682LinuxKernelLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability18 Sep 202621 Sep 2026Unknown
CVE-2025-39964LinuxKernelLinux Kernel Race Condition Vulnerability18 Sep 202621 Sep 2026Unknown
CVE-2026-53266LinuxKernelLinux Kernel Out-of-Bounds Write Vulnerability18 Sep 202621 Sep 2026Unknown
CVE-2026-58704GooglePixelGoogle Pixel Improper Authorization Vulnerability16 Sep 202619 Sep 2026Unknown
CVE-2026-76460CiscoIdentity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability16 Sep 202619 Sep 2026Unknown
CVE-2026-87886AcronisBackupAcronis Backup Incorrect Default Permissions Vulnerability16 Sep 202619 Sep 2026Unknown
CVE-2026-76461CiscoSecure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability14 Sep 202617 Sep 2026Unknown
CVE-2026-42016JFrogArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability11 Sep 202625 Sep 2026Unknown
CVE-2026-42018JFrogArtifactoryJFrog Artifactory Improper Authentication Vulnerability11 Sep 202625 Sep 2026Unknown
CVE-2026-84869ConnectWiseScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability11 Sep 202614 Sep 2026Unknown
CVE-2026-85706GitLabCommunity Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability11 Sep 202614 Sep 2026Unknown
CVE-2026-67277MikroTikRouterOSMikroTik RouterOS Missing Authentication for Critical Function Vulnerability10 Sep 202613 Sep 2026Unknown
CVE-2026-86060MikroTikRouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability10 Sep 202613 Sep 2026Unknown
CVE-2025-25249FortinetMultiple ProductsFortinet Multiple Products Heap-based Buffer Overflow Vulnerability9 Sep 202612 Sep 2026Unknown
CVE-2026-19490CitrixNetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability9 Sep 202612 Sep 2026Unknown
CVE-2026-20079CiscoSecure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability9 Sep 202612 Sep 2026Unknown
CVE-2026-87491GoogleChromium V8Google Chromium V8 Out of Bounds Write Vulnerability9 Sep 202623 Sep 2026Unknown
CVE-2026-75650AdobeCommerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability8 Sep 202611 Sep 2026Unknown
CVE-2026-81963MicrosoftWindowsMicrosoft Windows Link Following Vulnerability8 Sep 202622 Sep 2026Unknown
CVE-2026-85880MicrosoftWindowsMicrosoft Windows Heap-Based Buffer Overflow Vulnerability8 Sep 202622 Sep 2026Unknown
CVE-2026-86218N-ableN-centralN-able N-central Static Code Injection Vulnerability8 Sep 202611 Sep 2026Unknown
CVE-2026-85046GoogleChromium V8Google Chromium V8 Type Confusion Vulnerability4 Sep 202618 Sep 2026Unknown
CVE-2026-48710KludexStarletteKludex Starlette HTTP Request/Response Smuggling Vulnerability2 Sep 202616 Sep 2026Unknown
CVE-2026-49869KestraKestra OSSKestra OSS OS Command Injection Vulnerability2 Sep 20265 Sep 2026Unknown
CVE-2026-59822BerriAILiteLLMBerriAI LiteLLM Improper Authentication Vulnerability2 Sep 202616 Sep 2026Unknown
CVE-2026-82329JFrogArtifactoryJFrog Artifactory Improper Authentication Vulnerability2 Sep 20265 Sep 2026Unknown
CVE-2026-83548SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability2 Sep 20265 Sep 2026Unknown
CVE-2026-83549SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection Vulnerability2 Sep 20265 Sep 2026Unknown
CVE-2026-9586SangomaSwitchvoxSangoma Switchvox SQL Injection Vulnerability2 Sep 20265 Sep 2026Unknown
CVE-2026-81578PaperCutNG/MFPaperCut NG/MF Missing Authentication for Critical Function Vulnerability31 Aug 202614 Sep 2026Unknown
CVE-2026-82078PaperCutNG/MFPaperCut NG/MF Unsafe Reflection Vulnerability31 Aug 202614 Sep 2026Unknown
CVE-2023-49105ownCloudownCloudownCloud Improper Authentication Vulnerability27 Aug 202630 Aug 2026Unknown
CVE-2026-53362LinuxKernelLinux Kernel Unspecified Vulnerability27 Aug 202630 Aug 2026Unknown
CVE-2026-66384JFrogArtifactoryJFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability27 Aug 202610 Sep 2026Unknown
CVE-2015-3246Red HatLibuserRed Hat Libuser Race Condition Vulnerability26 Aug 20269 Sep 2026Unknown