HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2015-5287Red HatAutomatic Bug Reporting ToolRed Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability26 Aug 20269 Sep 2026Unknown
CVE-2019-1068MicrosoftSQL ServerMicrosoft SQL Server Remote Code Execution Vulnerability26 Aug 202629 Aug 2026Unknown
CVE-2021-23758Ajax.NET ProfessionalAjax.NET ProfessionalAjax.NET Professional Deserialization of Untrusted Data Vulnerability26 Aug 20269 Sep 2026Unknown
CVE-2022-0995LinuxKernelLinux Kernel Out-of-Bounds Write Vulnerability26 Aug 202629 Aug 2026Unknown
CVE-2026-8452CitrixNetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability26 Aug 202629 Aug 2026Unknown
CVE-2026-60004GiteaGiteaGitea Code Injection Vulnerability25 Aug 202628 Aug 2026Unknown
CVE-2026-21962OracleHTTP Server and Oracle Weblogic Server Proxy Plug-inOracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability24 Aug 202627 Aug 2026Unknown
CVE-2026-73570SynacorZimbra Collaboration Suite (ZCS)Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability21 Aug 202624 Aug 2026Unknown
CVE-2026-72529TrueConfServerTrueConf Server Missing Authentication for Critical Function Vulnerability20 Aug 202623 Aug 2026Unknown
CVE-2026-72530TrueConfServerTrueConf Server Code Injection Vulnerability20 Aug 20263 Sep 2026Unknown
CVE-2026-64849MLflowMLflowMLflow Server-Side Request Forgery Vulnerability19 Aug 20262 Sep 2026Unknown
CVE-2026-33824MicrosoftInternet Key Exchange (IKE) Service ExtensionsMicrosoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability18 Aug 202621 Aug 2026Unknown
CVE-2026-55040MicrosoftSharePointMicrosoft SharePoint Weak Authentication Vulnerability18 Aug 202621 Aug 2026Unknown
CVE-2026-59310BroadcomVMware vCenterBroadcom VMware vCenter Path Traversal Vulnerability18 Aug 202621 Aug 2026Known
CVE-2026-65400ApplemacOSApple macOS Improper Authentication Vulnerability18 Aug 202621 Aug 2026Unknown
CVE-2025-62593Ray-ProjectRayRay-Project Ray Code Injection Vulnerability17 Aug 202620 Aug 2026Unknown
CVE-2026-20349CiscoSecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability11 Aug 202614 Aug 2026Unknown
CVE-2026-68820MicrosoftWindows Ancillary Function Driver for WinSockMicrosoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability11 Aug 202625 Aug 2026Unknown
CVE-2026-72898MetabaseMetabaseMetabase SQL Injection Vulnerability11 Aug 202614 Aug 2026Unknown
CVE-2026-8037ProgressLoadMasterProgress LoadMaster Command Injection Vulnerability7 Aug 202610 Aug 2026Unknown
CVE-2026-63077JetBrainsTeamCityJetBrains TeamCity Deserialization of Untrusted Data Vulnerability5 Aug 20268 Aug 2026Known
CVE-2026-18556N-ableN-centralN-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability4 Aug 20267 Aug 2026Unknown
CVE-2026-34486ApacheTomcatApache Tomcat Missing Encryption of Sensitive Data Vulnerability4 Aug 20267 Aug 2026Unknown
CVE-2026-9198IBMLangflowIBM Langflow Code Injection Vulnerability4 Aug 20267 Aug 2026Unknown
CVE-2026-18577N-ableN-centralN-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability3 Aug 20266 Aug 2026Unknown
CVE-2026-20316CiscoSecure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability29 Jul 20261 Aug 2026Known
CVE-2025-68686FortinetFortiOSFortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability27 Jul 202610 Aug 2026Unknown
CVE-2026-16812AristaVeloCloud OrchestratorArista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability27 Jul 202630 Jul 2026Unknown
CVE-2026-16232Check PointSmartConsoleCheck Point SmartConsole Improper Authentication Vulnerability22 Jul 202625 Jul 2026Unknown
CVE-2026-50522MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability22 Jul 202625 Jul 2026Unknown
CVE-2021-27137DD-WRTDD-WRTDD-WRT Stack-Based Buffer Overflow Vulnerability21 Jul 202624 Jul 2026Unknown
CVE-2026-0770LangflowLangflowLangflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability21 Jul 202624 Jul 2026Unknown
CVE-2026-60137WordPressCoreWordPress Core SQL Injection Vulnerability21 Jul 20264 Aug 2026Unknown
CVE-2026-63030WordPressCoreWordPress Core Interpretation Conflict Vulnerability21 Jul 202624 Jul 2026Unknown
CVE-2026-25089FortinetFortiSandboxFortinet FortiSandbox OS Command Injection Vulnerability16 Jul 202619 Jul 2026Unknown
CVE-2026-39808FortinetFortiSandboxFortinet FortiSandbox OS Command Injection Vulnerability16 Jul 202619 Jul 2026Unknown
CVE-2026-58644MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability16 Jul 202619 Jul 2026Unknown
CVE-2023-4346KNX AssociationKNX Protocol Connection Authorization Option 1KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability15 Jul 202629 Jul 2026Unknown
CVE-2026-46817OracleE-Business SuiteOracle E-Business Suite Improper Privilege Management Vulnerability15 Jul 202618 Jul 2026Unknown
CVE-2026-15409SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability14 Jul 202617 Jul 2026Known
CVE-2026-15410SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection Vulnerability14 Jul 202617 Jul 2026Known
CVE-2026-56155MicrosoftActive Directory Federation ServicesMicrosoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability14 Jul 202628 Jul 2026Unknown
CVE-2026-56164MicrosoftSharePoint ServerMicrosoft SharePoint Server Missing Authentication for Critical Function Vulnerability14 Jul 202617 Jul 2026Unknown
CVE-2008-4128CiscoIOSCisco IOS Cross-Site Request Forgery Vulnerability13 Jul 202616 Jul 2026Unknown
CVE-2026-48939iCagendaiCagendaiCagenda Unrestricted Upload of File with Dangerous Type Vulnerability10 Jul 202613 Jul 2026Unknown
CVE-2026-56291BalbooaFormsBalbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability10 Jul 202613 Jul 2026Unknown
CVE-2026-48282AdobeColdFusionAdobe ColdFusion Path Traversal Vulnerability7 Jul 202610 Jul 2026Unknown
CVE-2026-48908JoomShaperSP Page BuilderJoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability7 Jul 202610 Jul 2026Unknown
CVE-2026-55255LangflowLangflowLangflow Authorization Bypass Through User-Controlled Key Vulnerability7 Jul 202610 Jul 2026Unknown
CVE-2026-56290JoomlackPage BuilderJoomlack Page Builder Improper Access Control Vulnerability7 Jul 202610 Jul 2026Unknown
CVE-2026-45659MicrosoftSharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data Vulnerability1 Jul 20264 Jul 2026Known
CVE-2026-48558SimpleHelpSimpleHelpSimpleHelp Authentication Bypass Vulnerability29 Jun 20262 Jul 2026Unknown
CVE-2026-12569PTCWindchill and FlexPLMPTC Windchill and FlexPLM Improper Input Validation Vulnerability25 Jun 202628 Jun 2026Known
CVE-2026-20230CiscoUnified Communications ManagerCisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability25 Jun 202628 Jun 2026Unknown
CVE-2025-67038LantronixEDS5000Lantronix EDS5000 Code Injection Vulnerability23 Jun 202626 Jun 2026Unknown
CVE-2026-34908UbiquitiUniFi OSUbiquiti UniFi OS Improper Access Control Vulnerability23 Jun 202626 Jun 2026Unknown
CVE-2026-34909UbiquitiUniFi OSUbiquiti UniFi OS Path Traversal Vulnerability23 Jun 202626 Jun 2026Unknown
CVE-2026-34910UbiquitiUniFi OSUbiquiti UniFi OS Improper Input Validation Vulnerability23 Jun 202626 Jun 2026Unknown
CVE-2026-20253SplunkEnterpriseSplunk Enterprise Missing Authentication for Critical Function Vulnerability18 Jun 202621 Jun 2026Unknown
CVE-2026-48907Widget FactoryJoomla Content EditorWidget Factory Joomla Content Editor Improper Access Control Vulnerability16 Jun 202619 Jun 2026Unknown
CVE-2026-20262CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability15 Jun 202629 Jun 2026Unknown
CVE-2026-54420LiteSpeedcPanel PluginLiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability15 Jun 202618 Jun 2026Unknown
CVE-2026-35273OraclePeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability12 Jun 202615 Jun 2026Known
CVE-2026-10520IvantiSentryIvanti Sentry OS Command Injection Vulnerability11 Jun 202614 Jun 2026Unknown
CVE-2026-11645GoogleChromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability9 Jun 202623 Jun 2026Unknown
CVE-2026-20245CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability9 Jun 202623 Jun 2026Unknown
CVE-2026-7473AristaExtensible Operating SystemArista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability9 Jun 202623 Jun 2026Unknown
CVE-2026-42271BerriAILiteLLMBerriAI LiteLLM Command Injection Vulnerability8 Jun 202622 Jun 2026Unknown
CVE-2026-50751Check PointSecurity GatewayCheck Point Security Gateway Improper Authentication Vulnerability8 Jun 202611 Jun 2026Known
CVE-2026-28318SolarWindsServ-USolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability5 Jun 202619 Jun 2026Unknown
CVE-2026-45247MirasvitMirasvit Full Page Cache WarmerMirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability3 Jun 20266 Jun 2026Unknown
CVE-2022-0492LinuxKernelLinux Kernel Improper Authentication Vulnerability2 Jun 20265 Jun 2026Unknown
CVE-2025-48595AndroidFrameworkAndroid Framework Integer Overflow Vulnerability2 Jun 20265 Jun 2026Unknown
CVE-2024-21182OracleWebLogic ServerOracle WebLogic Server Unspecified Vulnerability1 Jun 20264 Jun 2026Unknown
CVE-2026-0257Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability29 May 20261 Jun 2026Known
CVE-2026-45321TanStackTanStackTanStack Unspecified Vulnerability27 May 202610 Jun 2026Known
CVE-2026-48027NxNx ConsoleNx Console Embedded Malicious Code Vulnerability27 May 202610 Jun 2026Known
CVE-2026-8398DaemonDaemon Tools LiteDaemon Tools Lite Embedded Malicious Code Vulnerability27 May 202630 May 2026Unknown
CVE-2026-48172LiteSpeedcPanel PluginLiteSpeed cPanel Plugin Privilege Escalation Vulnerability26 May 202629 May 2026Unknown
CVE-2026-9082DrupalCoreDrupal Core SQL Injection Vulnerability22 May 202627 May 2026Unknown
CVE-2025-34291LangflowLangflowLangflow Origin Validation Error Vulnerability21 May 20264 Jun 2026Unknown
CVE-2026-34926Trend MicroApex OneTrend Micro Apex One (On-Premise) Directory Traversal Vulnerability21 May 20264 Jun 2026Unknown
CVE-2008-4250MicrosoftWindowsMicrosoft Windows Buffer Overflow Vulnerability20 May 20263 Jun 2026Unknown
CVE-2009-1537MicrosoftDirectXMicrosoft DirectX NULL Byte Overwrite Vulnerability20 May 20263 Jun 2026Unknown
CVE-2009-3459AdobeAcrobat and ReaderAdobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability20 May 20263 Jun 2026Unknown
CVE-2010-0249MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability20 May 20263 Jun 2026Unknown
CVE-2010-0806MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability20 May 20263 Jun 2026Unknown
CVE-2026-41091MicrosoftDefenderMicrosoft Defender Link Following Vulnerability20 May 20263 Jun 2026Unknown
CVE-2026-45498MicrosoftDefenderMicrosoft Defender Denial of Service Vulnerability20 May 20263 Jun 2026Unknown
CVE-2026-42897MicrosoftMicrosoftMicrosoft Exchange Server Cross-Site Scripting Vulnerability15 May 202629 May 2026Unknown
CVE-2026-20182CiscoCatalyst SD-WANCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability14 May 202617 May 2026Unknown
CVE-2026-42208BerriAILiteLLMBerriAI LiteLLM SQL Injection Vulnerability8 May 202611 May 2026Unknown
CVE-2026-6973IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability7 May 202610 May 2026Unknown
CVE-2026-0300Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Out-of-bounds Write Vulnerability6 May 20269 May 2026Unknown
CVE-2026-31431LinuxKernelLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability1 May 202615 May 2026Unknown
CVE-2026-41940WebProscPanel & WHM and WP2 (WordPress Squared)WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability30 Apr 20263 May 2026Known
CVE-2024-1708ConnectWiseScreenConnectConnectWise ScreenConnect Path Traversal Vulnerability28 Apr 202612 May 2026Known
CVE-2026-32202MicrosoftWindowsMicrosoft Windows Protection Mechanism Failure Vulnerability28 Apr 202612 May 2026Unknown
CVE-2024-57726SimpleHelpSimpleHelpSimpleHelp Missing Authorization Vulnerability24 Apr 20268 May 2026Known
CVE-2024-57728SimpleHelpSimpleHelpSimpleHelp Path Traversal Vulnerability24 Apr 20268 May 2026Known