HackZoneLabs News
Newsletter

Known exploited vulnerabilities

From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.

Feed of new additions

In the catalogue
1781
Added in the last 7 days
12
Used in ransomware
361

The catalogue, newest first

CVEVendorProductNameAddedFix dueRansomware
CVE-2024-7399SamsungMagicINFO 9 ServerSamsung MagicINFO 9 Server Path Traversal Vulnerability24 Apr 20268 May 2026Unknown
CVE-2025-29635D-LinkDIR-823XD-Link DIR-823X Command Injection Vulnerability24 Apr 20268 May 2026Unknown
CVE-2026-39987MarimoMarimoMarimo Remote Code Execution Vulnerability23 Apr 20267 May 2026Unknown
CVE-2026-33825MicrosoftDefenderMicrosoft Defender Insufficient Granularity of Access Control Vulnerability22 Apr 20266 May 2026Known
CVE-2023-27351PaperCutNG/MFPaperCut NG/MF Improper Authentication Vulnerability20 Apr 20264 May 2026Known
CVE-2024-27199JetBrainsTeamCityJetBrains TeamCity Relative Path Traversal Vulnerability20 Apr 20264 May 2026Known
CVE-2025-2749KenticoKentico XperienceKentico Xperience Path Traversal Vulnerability20 Apr 20264 May 2026Unknown
CVE-2025-32975QuestKACE Systems Management Appliance (SMA)Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability20 Apr 20264 May 2026Unknown
CVE-2025-48700SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability20 Apr 202623 Apr 2026Unknown
CVE-2026-20122CiscoCatalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability20 Apr 202623 Apr 2026Unknown
CVE-2026-20128CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability20 Apr 202623 Apr 2026Unknown
CVE-2026-20133CiscoCatalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability20 Apr 202623 Apr 2026Unknown
CVE-2026-34197ApacheActiveMQApache ActiveMQ Improper Input Validation Vulnerability16 Apr 202630 Apr 2026Unknown
CVE-2009-0238MicrosoftOfficeMicrosoft Office Remote Code Execution14 Apr 202628 Apr 2026Unknown
CVE-2026-32201MicrosoftSharePoint ServerMicrosoft SharePoint Server Improper Input Validation Vulnerability14 Apr 202628 Apr 2026Unknown
CVE-2012-1854MicrosoftVisual Basic for Applications (VBA)Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability13 Apr 202627 Apr 2026Unknown
CVE-2020-9715AdobeAcrobatAdobe Acrobat Use-After-Free Vulnerability13 Apr 202627 Apr 2026Unknown
CVE-2023-21529MicrosoftExchange ServerMicrosoft Exchange Server Deserialization of Untrusted Data Vulnerability13 Apr 202627 Apr 2026Known
CVE-2023-36424MicrosoftWindowsMicrosoft Windows Out-of-Bounds Read Vulnerability13 Apr 202627 Apr 2026Unknown
CVE-2025-60710MicrosoftWindowsMicrosoft Windows Link Following Vulnerability13 Apr 202627 Apr 2026Known
CVE-2026-21643FortinetFortiClient EMSFortinet FortiClient EMS SQL Injection Vulnerability13 Apr 202616 Apr 2026Unknown
CVE-2026-34621AdobeAcrobat and ReaderAdobe Acrobat and Reader Prototype Pollution Vulnerability13 Apr 202627 Apr 2026Unknown
CVE-2026-1340IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability8 Apr 202611 Apr 2026Unknown
CVE-2026-35616FortinetFortiClient EMSFortinet FortiClient EMS Improper Access Control Vulnerability6 Apr 20269 Apr 2026Unknown
CVE-2026-3502TrueConfClientTrueConf Client Download of Code Without Integrity Check Vulnerability2 Apr 202616 Apr 2026Unknown
CVE-2026-5281GoogleDawnGoogle Dawn Use-After-Free Vulnerability1 Apr 202615 Apr 2026Unknown
CVE-2026-3055CitrixNetScalerCitrix NetScaler Out-of-Bounds Read Vulnerability30 Mar 20262 Apr 2026Unknown
CVE-2025-53521F5BIG-IPF5 BIG-IP Stack-Based Buffer Overflow Vulnerability27 Mar 202630 Mar 2026Unknown
CVE-2026-33634AquasecurityTrivyAquasecurity Trivy Embedded Malicious Code Vulnerability26 Mar 20269 Apr 2026Unknown
CVE-2026-33017LangflowLangflowLangflow Code Injection Vulnerability25 Mar 20268 Apr 2026Unknown
CVE-2025-31277AppleMultiple ProductsApple Multiple Products Buffer Overflow Vulnerability20 Mar 20263 Apr 2026Unknown
CVE-2025-32432Craft CMSCraft CMSCraft CMS Code Injection Vulnerability20 Mar 20263 Apr 2026Unknown
CVE-2025-43510AppleMultiple ProductsApple Multiple Products Improper Locking Vulnerability20 Mar 20263 Apr 2026Unknown
CVE-2025-43520AppleMultiple ProductsApple Multiple Products Classic Buffer Overflow Vulnerability20 Mar 20263 Apr 2026Unknown
CVE-2025-54068LaravelLivewireLaravel Livewire Code Injection Vulnerability20 Mar 20263 Apr 2026Unknown
CVE-2026-20131CiscoSecure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability19 Mar 202622 Mar 2026Known
CVE-2025-66376SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability18 Mar 20261 Apr 2026Unknown
CVE-2026-20963MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability18 Mar 202621 Mar 2026Unknown
CVE-2025-47813Wing FTP ServerWing FTP ServerWing FTP Server Information Disclosure Vulnerability16 Mar 202630 Mar 2026Unknown
CVE-2026-3909GoogleSkiaGoogle Skia Out-of-Bounds Write Vulnerability13 Mar 202627 Mar 2026Unknown
CVE-2026-3910GoogleChromium V8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability13 Mar 202627 Mar 2026Unknown
CVE-2025-68613n8nn8nn8n Improper Control of Dynamically-Managed Code Resources Vulnerability11 Mar 202625 Mar 2026Unknown
CVE-2021-22054OmnissaWorkspace One UEMOmnissa Workspace ONE Server-Side Request Forgery9 Mar 202623 Mar 2026Unknown
CVE-2025-26399SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability9 Mar 202612 Mar 2026Known
CVE-2026-1603IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability9 Mar 202623 Mar 2026Unknown
CVE-2017-7921HikvisionMultiple ProductsHikvision Multiple Products Improper Authentication Vulnerability5 Mar 202626 Mar 2026Unknown
CVE-2021-22681RockwellMultiple ProductsRockwell Multiple Products Insufficient Protected Credentials Vulnerability5 Mar 202626 Mar 2026Unknown
CVE-2021-30952AppleMultiple ProductsApple Multiple Products Integer Overflow or Wraparound Vulnerability5 Mar 202626 Mar 2026Unknown
CVE-2023-41974AppleiOS and iPadOSApple iOS and iPadOS Use-After-Free Vulnerability5 Mar 202626 Mar 2026Unknown
CVE-2023-43000AppleMultiple ProductsApple Multiple products Use-After-Free Vulnerability5 Mar 202626 Mar 2026Unknown
CVE-2026-21385QualcommMultiple ChipsetsQualcomm Multiple Chipsets Memory Corruption Vulnerability3 Mar 202624 Mar 2026Unknown
CVE-2026-22719BroadcomVMware Aria OperationsBroadcom VMware Aria Operations Command Injection Vulnerability3 Mar 202624 Mar 2026Unknown
CVE-2022-20775CiscoSD-WANCisco SD-WAN Path Traversal Vulnerability25 Feb 202627 Feb 2026Unknown
CVE-2026-20127CiscoCatalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability25 Feb 202627 Feb 2026Unknown
CVE-2026-25108Soliton Systems K.KFileZenSoliton Systems K.K FileZen OS Command Injection Vulnerability24 Feb 202617 Mar 2026Unknown
CVE-2025-49113RoundcubeWebmailRoundCube Webmail Deserialization of Untrusted Data Vulnerability20 Feb 202613 Mar 2026Unknown
CVE-2025-68461RoundcubeWebmailRoundCube Webmail Cross-site Scripting Vulnerability20 Feb 202613 Mar 2026Unknown
CVE-2021-22175GitLabGitLabGitLab Server-Side Request Forgery (SSRF) Vulnerability18 Feb 202611 Mar 2026Unknown
CVE-2026-22769DellRecoverPoint for Virtual Machines (RP4VMs)Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability18 Feb 202621 Feb 2026Unknown
CVE-2008-0015MicrosoftWindowsMicrosoft Windows Video ActiveX Control Remote Code Execution Vulnerability17 Feb 202610 Mar 2026Unknown
CVE-2020-7796SynacorZimbra Collaboration SuiteSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability17 Feb 202610 Mar 2026Unknown
CVE-2024-7694TeamT5ThreatSonar Anti-RansomwareTeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability17 Feb 202610 Mar 2026Unknown
CVE-2026-2441GoogleChromiumGoogle Chromium CSS Use-After-Free Vulnerability17 Feb 202610 Mar 2026Unknown
CVE-2026-1731BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA)BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability13 Feb 202616 Feb 2026Known
CVE-2024-43468MicrosoftConfiguration ManagerMicrosoft Configuration Manager SQL Injection Vulnerability12 Feb 20265 Mar 2026Unknown
CVE-2025-15556Notepad++Notepad++Notepad++ Download of Code Without Integrity Check Vulnerability12 Feb 20265 Mar 2026Unknown
CVE-2025-40536SolarWindsWeb Help DeskSolarWinds Web Help Desk Security Control Bypass Vulnerability12 Feb 202615 Feb 2026Unknown
CVE-2026-20700AppleMultiple ProductsApple Multiple Buffer Overflow Vulnerability12 Feb 20265 Mar 2026Unknown
CVE-2026-21510MicrosoftWindowsMicrosoft Windows Shell Protection Mechanism Failure Vulnerability10 Feb 20263 Mar 2026Unknown
CVE-2026-21513MicrosoftWindowsMicrosoft MSHTML Framework Protection Mechanism Failure Vulnerability10 Feb 20263 Mar 2026Unknown
CVE-2026-21514MicrosoftOfficeMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability10 Feb 20263 Mar 2026Unknown
CVE-2026-21519MicrosoftWindowsMicrosoft Windows Type Confusion Vulnerability10 Feb 20263 Mar 2026Unknown
CVE-2026-21525MicrosoftWindowsMicrosoft Windows NULL Pointer Dereference Vulnerability10 Feb 20263 Mar 2026Unknown
CVE-2026-21533MicrosoftWindowsMicrosoft Windows Improper Privilege Management Vulnerability10 Feb 20263 Mar 2026Unknown
CVE-2025-11953React Native CommunityCLIReact Native Community CLI OS Command Injection Vulnerability5 Feb 202626 Feb 2026Unknown
CVE-2026-24423SmarterToolsSmarterMailSmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability5 Feb 202626 Feb 2026Known
CVE-2019-19006SangomaFreePBXSangoma FreePBX Improper Authentication Vulnerability3 Feb 202624 Feb 2026Unknown
CVE-2021-39935GitLabCommunity and Enterprise EditionsGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability3 Feb 202624 Feb 2026Unknown
CVE-2025-40551SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability3 Feb 20266 Feb 2026Unknown
CVE-2025-64328SangomaFreePBXSangoma FreePBX OS Command Injection Vulnerability3 Feb 202624 Feb 2026Unknown
CVE-2026-1281IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability29 Jan 20261 Feb 2026Unknown
CVE-2026-24858FortinetMultiple ProductsFortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability27 Jan 202630 Jan 2026Unknown
CVE-2018-14634LinuxKernelLinux Kernel Integer Overflow Vulnerability26 Jan 202616 Feb 2026Unknown
CVE-2025-52691SmarterToolsSmarterMailSmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability26 Jan 202616 Feb 2026Known
CVE-2026-21509MicrosoftOfficeMicrosoft Office Security Feature Bypass Vulnerability26 Jan 202616 Feb 2026Unknown
CVE-2026-23760SmarterToolsSmarterMailSmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability26 Jan 202616 Feb 2026Known
CVE-2026-24061GNUInetUtilsGNU InetUtils Argument Injection Vulnerability26 Jan 202616 Feb 2026Unknown
CVE-2024-37079BroadcomVMware vCenter ServerBroadcom VMware vCenter Server Out-of-bounds Write Vulnerability23 Jan 202613 Feb 2026Unknown
CVE-2025-31125ViteVitejsVite Vitejs Improper Access Control Vulnerability22 Jan 202612 Feb 2026Unknown
CVE-2025-34026VersaConcertoVersa Concerto Improper Authentication Vulnerability22 Jan 202612 Feb 2026Unknown
CVE-2025-54313Prettiereslint-config-prettierPrettier eslint-config-prettier Embedded Malicious Code Vulnerability22 Jan 202612 Feb 2026Unknown
CVE-2025-68645SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability22 Jan 202612 Feb 2026Unknown
CVE-2026-20045CiscoUnified Communications ManagerCisco Unified Communications Products Code Injection Vulnerability21 Jan 202611 Feb 2026Unknown
CVE-2026-20805MicrosoftWindowsMicrosoft Windows Information Disclosure Vulnerability13 Jan 20263 Feb 2026Unknown
CVE-2025-8110GogsGogsGogs Path Traversal Vulnerability12 Jan 20262 Feb 2026Unknown
CVE-2009-0556MicrosoftOfficeMicrosoft Office PowerPoint Code Injection Vulnerability7 Jan 202628 Jan 2026Unknown
CVE-2025-37164Hewlett Packard Enterprise (HPE)OneViewHewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability7 Jan 202628 Jan 2026Unknown
CVE-2025-14847MongoDBMongoDB and MongoDB ServerMongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability29 Dec 202519 Jan 2026Unknown
CVE-2023-52163DigieverDS-2105 ProDigiever DS-2105 Pro Missing Authorization Vulnerability22 Dec 202512 Jan 2026Unknown
CVE-2025-14733WatchGuardFireboxWatchGuard Firebox Out of Bounds Write Vulnerability19 Dec 202526 Dec 2025Known