CISA Known Exploited Vulnerabilities
Every CVE that CISA lists as exploited in the wild, with its federal remediation deadline and our coverage. Kept in step with CISA’s feed; the latest addition was 26 Oct.
Latest additions40
| CVE | Vulnerability | Added | CVSS | Articles |
|---|---|---|---|---|
| CVE-2026-109619 | PHP Stale Internal Request-State VulnerabilityPHP Group · PHP | 26 OctDue in 2 days | 9.2Critical | 42 articles |
| CVE-2026-109618 | PHP Memory Corruption VulnerabilityPHP Group · PHP | 26 OctDue in 2 days | 9.2Critical | 43 articles |
| CVE-2026-114625 | Arista VeloCloud Orchestrator SQL Injection VulnerabilityArista · VeloCloud Orchestrator | 23 Oct | 9.9Critical | 8 articles |
| CVE-2026-110447 | Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCollabora · Collabora Online – Built-in CODE Server | 23 Oct | 9.2Critical | 7 articles |
| CVE-2026-96656 | Plex Media Server External Control of File Name or Path VulnerabilityPlex · Media Server | 20 Oct | 8.6High | 6 articles |
| CVE-2026-96655 | Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex · Media Server | 20 OctDue 3 Nov | 5.3Medium | 5 articles |
| CVE-2026-96654 | Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityPlex · Media Server | 20 Oct | 6.9Medium | 6 articles |
| CVE-2026-96652 | Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex · Media Server | 20 OctDue 3 Nov | 5.3Medium | 5 articles |
| CVE-2026-110936 | Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens · Software Center | 20 OctDue 3 Nov | 8.4High | 5 articles |
| CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions · SiteGuard Server Edition | 20 Oct | 8.5High | 4 articles |
| CVE-2026-102764 | BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityBeyondTrust · Remote Support | 16 Oct | 9.3Critical | 12 articles |
| CVE-2025-61624 | Fortinet Multiple Products Path Traversal VulnerabilityFortinet · Multiple Products | 16 Oct | 5.4Medium | 7 articles |
| CVE-2026-21589 | Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityAtlassian · Multiple Products | 15 Oct | 9.3Critical | 15 articles |
| CVE-2026-76519 | Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCisco · Secure Email Gateway | 14 Oct | 9.8Critical | 9 articles |
| CVE-2026-105134 | Ahsay AhsayCBS Command Injection VulnerabilityAhsay · AhsayCBS | 14 Oct | 10.0Critical | 7 articles |
| CVE-2026-105133 | Ahsay AhsayCBS Improper Authentication VulnerabilityAhsay · AhsayCBS | 14 Oct | 7.5High | 8 articles |
| CVE-2026-0322 | Palo Alto Networks PAN-OS Code Injection VulnerabilityPalo Alto Networks · PAN-OS | 14 Oct | 8.6High | 6 articles |
| CVE-2026-96951 | Microsoft Windows Command Injection VulnerabilityMicrosoft · Windows | 13 Oct | 8.8High | 13 articles |
| CVE-2026-104935 | Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityIvanti · Connect Secure | 13 Oct | 8.6High | 15 articles |
| CVE-2023-22894 | Strapi Cleartext Storage of Sensitive Information VulnerabilityStrapi | 8 Oct | 7.2High | 4 articles |
| CVE-2021-3199 | ONLYOFFICE Docs Server Path Traversal VulnerabilityONLYOFFICE · Docs | 8 Oct | 9.8Critical | 4 articles |
| CVE-2016-3081 | Apache Struts Command Injection VulnerabilityApache · Struts | 8 Oct | 8.1High | 5 articles |
| CVE-2015-5477 | ISC BIND Data Processing Errors VulnerabilityISC · BIND | 8 Oct | 7.5High | 5 articles |
| CVE-2015-3306 | ProFTPD Improper Access Control VulnerabilityProFTPD | 8 Oct | 10.0Critical | 5 articles |
| CVE-2026-88779 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix · NetScaler | 4 Oct | 8.7High | 9 articles |
| CVE-2026-102490 | Zammad GmbH Zammad Improper Privilege Management VulnerabilityZammad GmbH · Zammad | 2 Oct | 9.4Critical | 9 articles |
| CVE-2026-102489 | Zammad GmbH Zammad Session Fixation VulnerabilityZammad GmbH · Zammad | 2 Oct | 9.4Critical | 9 articles |
| CVE-2026-104286 | Fortinet FortiMail Path Traversal VulnerabilityFortinet · FortiMail | 1 Oct | 9.8Critical | 6 articles |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCisco · Catalyst SD-WAN Manager | 30 Sep | 9.8Critical | 10 articles |
| CVE-2026-86950 | Apple Multiple Products Out-of-Bounds Write VulnerabilityApple · Multiple Products | 29 Sep | 8.8High | 15 articles |
| CVE-2026-88772 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix · NetScaler | 27 Sep | 9.5Critical | 29 articles |
| CVE-2026-88771 | Citrix NetScaler Improper Input Validation VulnerabilityCitrix · NetScaler | 27 Sep | 9.5Critical | 28 articles |
| CVE-2026-87902 | WordPress Core Remote File Inclusion VulnerabilityWordPress · Core | 25 Sep | 8.1High | 10 articles |
| CVE-2026-67279 | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityMikroTik · RouterOS | 25 Sep | 6.9Medium | 6 articles |
| CVE-2026-65660 | Microsoft SharePoint Code Injection VulnerabilityMicrosoft · SharePoint | 25 Sep | 8.8High | 5 articles |
| CVE-2026-71362 | Adobe Commerce and Magento Incorrect Authorization VulnerabilityAdobe · Commerce and Magento | 24 Sep | 9.1Critical | 6 articles |
| CVE-2026-5430 | WSO2 Multiple Products Path Traversal VulnerabilityWSO2 · Multiple Products | 24 Sep | 10.0Critical | 6 articles |
| CVE-2026-94127 | F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityF5 · BIG-IP APM | 22 Sep | 9.8Critical | 10 articles |
| CVE-2026-93952 | Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityArista · VeloCloud Orchestrator | 22 Sep | 10.0Critical | 6 articles |
| CVE-2026-93616 | Check Point Multiple Products Path Traversal VulnerabilityCheck Point · Multiple Products | 22 Sep | 9.8Critical | 4 articles |
Open federal deadlines5
US federal agencies must remediate these by the date CISA set; the soonest first.
| CVE | Vulnerability | Deadline | CVSS | Articles |
|---|---|---|---|---|
| CVE-2026-109618 | PHP Memory Corruption VulnerabilityPHP Group · PHP | Due in 2 days | 9.2Critical | 43 articles |
| CVE-2026-109619 | PHP Stale Internal Request-State VulnerabilityPHP Group · PHP | Due in 2 days | 9.2Critical | 42 articles |
| CVE-2026-110936 | Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens · Software Center | Due 3 Nov | 8.4High | 5 articles |
| CVE-2026-96652 | Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex · Media Server | Due 3 Nov | 5.3Medium | 5 articles |
| CVE-2026-96655 | Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex · Media Server | Due 3 Nov | 5.3Medium | 5 articles |