Exploited in the wild

On the CISA Known Exploited Vulnerabilities list. Attacks are happening now.

• CVE-2024-21762 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Fortinet FortiOS Out-of-Bound Write Vulnerability
• CVE-2015-3306 CRITICAL 10.0 EXPLOITED MITIGATE MITIGATE ProFTPD Improper Access Control Vulnerability
• CVE-2025-39682 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
• CVE-2026-88771 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Citrix NetScaler Improper Input Validation Vulnerability
• CVE-2026-85706 CRITICAL 10.0 EXPLOITED UPGRADE GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
• CVE-2026-20079 CRITICAL 10.0 EXPLOITED DOWNGRADE Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-21962 CRITICAL 10.0 EXPLOITED DOWNGRADE DOWNGRADE Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
• CVE-2021-3199 CRITICAL 9.8 EXPLOITED UPGRADE ONLYOFFICE Docs Server Path Traversal Vulnerability
• CVE-2026-19490 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-9586 CRITICAL 9.8 EXPLOITED UPGRADE Sangoma Switchvox SQL Injection Vulnerability
• CVE-2026-83548 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
• CVE-2023-49105 CRITICAL 9.8 EXPLOITED UPGRADE ownCloud Improper Authentication Vulnerability
• CVE-2026-60004 CRITICAL 9.8 EXPLOITED UPGRADE Gitea Code Injection Vulnerability
• CVE-2026-86060 CRITICAL 9.8 EXPLOITED UPGRADE MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
• CVE-2026-86218 CRITICAL 9.8 EXPLOITED UPGRADE N-able N-central Static Code Injection Vulnerability
• CVE-2026-75650 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
• CVE-2026-82329 CRITICAL 9.8 EXPLOITED UPGRADE JFrog Artifactory Improper Authentication Vulnerability
• CVE-2026-71362 CRITICAL 9.1 EXPLOITED UPGRADE UPGRADE Adobe Commerce and Magento Incorrect Authorization Vulnerability
• CVE-2026-81578 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
• CVE-2026-105134 CRITICAL 10.0 EXPLOITED UPGRADE Ahsay AhsayCBS Command Injection Vulnerability
• CVE-2016-3081 HIGH 8.1 EXPLOITED MITIGATE DOWNGRADE Apache Struts Command Injection Vulnerability
• CVE-2026-94127 CRITICAL 9.8 EXPLOITED UPGRADE F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
• CVE-2026-49869 CRITICAL 10.0 EXPLOITED UPGRADE Kestra OSS OS Command Injection Vulnerability
• CVE-2026-76460 CRITICAL 10.0 EXPLOITED DOWNGRADE DOWNGRADE Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
• CVE-2026-85102 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Check Point Multiple Products Improper Certificate Validation Vulnerability
• CVE-2026-93616 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Check Point Multiple Products Path Traversal Vulnerability
• CVE-2026-76461 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Secure Email Gateway SQL Injection Vulnerability
• CVE-2026-104935 HIGH 8.6 EXPLOITED UPGRADE Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
• CVE-2015-5477 HIGH 7.5 EXPLOITED UPGRADE MITIGATE ISC BIND Data Processing Errors Vulnerability
• CVE-2026-76519 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Secure Email Gateway Relative Path Traversal Vulnerability
• CVE-2026-88772 HIGH 8.1 EXPLOITED UPGRADE UPGRADE Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-21589 HIGH 7.5 EXPLOITED UPGRADE UPGRADE Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
• CVE-2026-104286 CRITICAL 9.8 EXPLOITED UPGRADE Fortinet FortiMail Path Traversal Vulnerability
• CVE-2026-87902 HIGH 8.1 EXPLOITED UPGRADE WordPress Core Remote File Inclusion Vulnerability
• CVE-2021-23758 HIGH 8.1 EXPLOITED MITIGATE UPGRADE Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
• CVE-2026-65400 CRITICAL 9.8 EXPLOITED UPGRADE Apple macOS Improper Authentication Vulnerability
• CVE-2026-102764 CRITICAL 9.8 EXPLOITED UPGRADE BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
• CVE-2026-102489 CRITICAL 9.8 EXPLOITED UPGRADE Zammad GmbH Zammad Session Fixation Vulnerability
• CVE-2026-76504 CRITICAL 9.8 EXPLOITED UPGRADE Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• CVE-2026-82078 CRITICAL 9.1 EXPLOITED UPGRADE UPGRADE PaperCut NG/MF Unsafe Reflection Vulnerability
• CVE-2026-18577 HIGH 8.1 EXPLOITED UPGRADE N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2025-25249 HIGH 8.1 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
• CVE-2026-48710 MEDIUM 6.5 EXPLOITED UPGRADE UPGRADE Kludex Starlette HTTP Request/Response Smuggling Vulnerability
• CVE-2026-85046 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Google Chromium V8 Type Confusion Vulnerability
• CVE-2022-0995 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2019-1068 HIGH 8.8 EXPLOITED DOWNGRADE UPGRADE Microsoft SQL Server Remote Code Execution Vulnerability
• CVE-2015-3246 HIGH 7.4 EXPLOITED MITIGATE MITIGATE Red Hat Libuser Race Condition Vulnerability
• CVE-2026-8452 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2015-5287 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
• CVE-2026-93952 CRITICAL 10.0 EXPLOITED UPGRADE Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
• CVE-2026-18556 HIGH 7.4 EXPLOITED UPGRADE N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-87491 HIGH 8.8 EXPLOITED UPGRADE Google Chromium V8 Out of Bounds Write Vulnerability
• CVE-2026-110447 CRITICAL 9.2 EXPLOITED MITIGATE Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
• CVE-2026-7273 HIGH 8.8 EXPLOITED MITIGATE MITIGATE Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
• CVE-2026-67277 HIGH 8.2 EXPLOITED UPGRADE MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
• CVE-2026-65660 HIGH 8.8 EXPLOITED UPGRADE Microsoft SharePoint Code Injection Vulnerability
• CVE-2026-83549 HIGH 7.8 EXPLOITED UPGRADE UPGRADE SonicWall SMA1000 Appliances OS Command Injection Vulnerability
• CVE-2026-42018 HIGH 7.5 EXPLOITED UPGRADE JFrog Artifactory Improper Authentication Vulnerability
• CVE-2026-5430 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE WSO2 Multiple Products Path Traversal Vulnerability
• CVE-2026-85880 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-96951 HIGH 8.8 EXPLOITED MITIGATE UPGRADE Microsoft Windows Command Injection Vulnerability
• CVE-2026-105133 HIGH 7.3 EXPLOITED UPGRADE Ahsay AhsayCBS Improper Authentication Vulnerability
• CVE-2026-86950 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Apple Multiple Products Out-of-Bounds Write Vulnerability
• CVE-2026-42016 HIGH 8.1 EXPLOITED UPGRADE JFrog Artifactory Incorrect Authorization Vulnerability
• CVE-2025-39964 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Race Condition Vulnerability
• CVE-2026-53266 HIGH 8.8 EXPLOITED UPGRADE Linux Kernel Out-of-Bounds Write Vulnerability
• CVE-2026-84869 CRITICAL 9.9 EXPLOITED UPGRADE ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
• CVE-2026-67279 MEDIUM 6.5 EXPLOITED UPGRADE Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
• CVE-2026-59822 HIGH 8.2 EXPLOITED UPGRADE BerriAI LiteLLM Improper Authentication Vulnerability
• CVE-2026-114625 CRITICAL 9.9 EXPLOITED UPGRADE Arista VeloCloud Orchestrator SQL Injection Vulnerability
• CVE-2026-53362 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Unspecified Vulnerability
• CVE-2023-22894 MEDIUM 4.9 EXPLOITED UPGRADE Strapi Cleartext Storage of Sensitive Information Vulnerability
• CVE-2026-106931 HIGH 7.8 EXPLOITED UPGRADE UPGRADE EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
• CVE-2026-58704 HIGH 8.8 EXPLOITED MITIGATE Google Pixel Improper Authorization Vulnerability
• CVE-2026-88779 HIGH 7.5 EXPLOITED UPGRADE UPGRADE Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-0322 HIGH 7.2 EXPLOITED UPGRADE Palo Alto Networks PAN-OS Code Injection Vulnerability
• CVE-2026-81963 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Link Following Vulnerability
• CVE-2026-96656 HIGH 7.2 EXPLOITED UPGRADE Plex Media Server External Control of File Name or Path Vulnerability
• CVE-2026-102490 HIGH 7.8 EXPLOITED UPGRADE Zammad GmbH Zammad Improper Privilege Management Vulnerability
• CVE-2026-96654 MEDIUM 6.5 EXPLOITED UPGRADE Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
• CVE-2025-61624 MEDIUM 6.0 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Path Traversal Vulnerability
• CVE-2026-66384 MEDIUM 5.3 EXPLOITED UPGRADE JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
• CVE-2026-87886 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Acronis Backup Incorrect Default Permissions Vulnerability
• CVE-2026-110936 MEDIUM 6.7 EXPLOITED UPGRADE Siemens Software Center Uncontrolled Search Path Element Vulnerability
• CVE-2026-96652 MEDIUM 4.3 EXPLOITED UPGRADE Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2026-96655 MEDIUM 4.3 EXPLOITED UPGRADE Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability