CISA Known Exploited Vulnerabilities

Apple Multiple Products Apple Multiple Products Out-of-Bounds Write Vulnerability CVE-2026-86950 Past due Citrix NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88772 Past due Citrix NetScaler Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88771 Past due MikroTik RouterOS Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CVE-2026-67279 Past due Microsoft SharePoint Microsoft SharePoint Code Injection Vulnerability CVE-2026-65660 Past due WordPress Core WordPress Core Remote File Inclusion Vulnerability CVE-2026-87902 Past due WSO2 Multiple Products WSO2 Multiple Products Path Traversal Vulnerability CVE-2026-5430 Past due Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability CVE-2026-71362 Past due Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CVE-2026-93952 Past due F5 BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 Past due Check Point Multiple Products Check Point Multiple Products Path Traversal Vulnerability CVE-2026-93616 Past due Check Point Multiple Products Check Point Multiple Products Improper Certificate Validation Vulnerability CVE-2026-85102 Past due Zyxel GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability CVE-2026-7273 Past due Linux Kernel Linux Kernel Race Condition Vulnerability CVE-2025-39964 Past due Linux Kernel Linux Kernel Out-of-Bounds Write Vulnerability CVE-2026-53266 Past due Linux Kernel Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CVE-2025-39682 Past due Google Pixel Google Pixel Improper Authorization Vulnerability CVE-2026-58704 Past due Cisco Identity Services Engine Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CVE-2026-76460 Past due Acronis Backup Acronis Backup Incorrect Default Permissions Vulnerability CVE-2026-87886 Past due Cisco Secure Email Gateway Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 Past due ConnectWise ScreenConnect ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability CVE-2026-84869 Past due JFrog Artifactory JFrog Artifactory Incorrect Authorization Vulnerability CVE-2026-42016 Past due JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability CVE-2026-42018 Past due GitLab Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability CVE-2026-85706 Past due MikroTik RouterOS MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CVE-2026-86060 Past due MikroTik RouterOS MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-67277 Past due Citrix NetScaler Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-19490 Past due Fortinet Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2025-25249 Past due Google Chromium V8 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-87491 Past due Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-20079 Past due Adobe Commerce and Magento Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2026-75650 Past due Microsoft Windows Microsoft Windows Link Following Vulnerability CVE-2026-81963 Past due N-able N-central N-able N-central Static Code Injection Vulnerability CVE-2026-86218 Past due Microsoft Windows Microsoft Windows Heap-Based Buffer Overflow Vulnerability CVE-2026-85880 Past due Google Chromium V8 Google Chromium V8 Type Confusion Vulnerability CVE-2026-85046 Past due BerriAI LiteLLM BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-59822 Past due Kludex Starlette Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-48710 Past due Kestra Kestra OSS Kestra OSS OS Command Injection Vulnerability CVE-2026-49869 Past due JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability CVE-2026-82329 Past due Sangoma Switchvox Sangoma Switchvox SQL Injection Vulnerability CVE-2026-9586 Past due SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-83548 Past due SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability CVE-2026-83549 Past due PaperCut NG/MF PaperCut NG/MF Unsafe Reflection Vulnerability CVE-2026-82078 Past due PaperCut NG/MF PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CVE-2026-81578 Past due ownCloud ownCloud ownCloud Improper Authentication Vulnerability CVE-2023-49105 Past due Linux Kernel Linux Kernel Unspecified Vulnerability CVE-2026-53362 Past due JFrog Artifactory JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability CVE-2026-66384 Past due Ajax.NET Professional Ajax.NET Professional Ajax.NET Professional Deserialization of Untrusted Data Vulnerability CVE-2021-23758 Past due Red Hat Libuser Red Hat Libuser Race Condition Vulnerability CVE-2015-3246 Past due Red Hat Automatic Bug Reporting Tool Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CVE-2015-5287 Past due