CISA Known Exploited Vulnerabilities
1,779 vulnerabilities confirmed exploited in the wild. 114 were added in the last 90 days, of which 100 are past their federal remediation deadline. 361 are linked to ransomware campaigns.
Source: CISA KEV · synced 11 Nov 2026, 12:26 · nothing on this page is our own assessment
ThinkPHP ThinkPHP ThinkPHP Remote Code Execution Vulnerability
CVE-2019-9082
Past due
Trend Micro OfficeScan Trend Micro OfficeScan Directory Traversal Vulnerability
CVE-2019-18187
Past due
Trend Micro Apex One and OfficeScan Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
CVE-2020-8467
Past due
Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents Trend Micro Multiple Products Content Validation Escape Vulnerability
CVE-2020-8468
Past due
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security Trend Micro Multiple Products Improper Access Control Vulnerability
CVE-2020-24557
Past due
Trend Micro Apex One and OfficeScan Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
CVE-2020-8599
Past due
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability
CVE-2021-36742
Past due
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability
CVE-2021-36741
Past due
TVT NVMS-1000 TVT NVMS-1000 Directory Traversal Vulnerability
CVE-2019-20085
Past due
Unraid Unraid Unraid Authentication Bypass Vulnerability
CVE-2020-5849
Past due
Unraid Unraid Unraid Remote Code Execution Vulnerability
CVE-2020-5847
Past due
vBulletin vBulletin vBulletin PHP Module Remote Code Execution Vulnerability
CVE-2019-16759
Past due
vBulletin vBulletin vBulletin PHP Module Remote Code Execution Vulnerability
CVE-2020-17496
Past due
VMware VMware ESXi and Horizon DaaS VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
CVE-2019-5544
Ransomware
VMware ESXi VMware ESXi OpenSLP Use-After-Free Vulnerability
CVE-2020-3992
Ransomware
VMware Multiple Products VMware Multiple Products Privilege Escalation Vulnerability
CVE-2020-3950
Past due
VMware vCenter Server VMware vCenter Server File Upload Vulnerability
CVE-2021-22005
Ransomware
VMware vCenter Server VMware vCenter Server Information Disclosure Vulnerability
CVE-2020-3952
Past due
VMware vCenter Server VMware vCenter Server Remote Code Execution Vulnerability
CVE-2021-21972
Ransomware
VMware vCenter Server VMware vCenter Server Improper Input Validation Vulnerability
CVE-2021-21985
Ransomware
VMware Multiple Products Multiple VMware Products Command Injection Vulnerability
CVE-2020-4006
Past due
WordPress File Manager Plugin WordPress File Manager Plugin Remote Code Execution Vulnerability
CVE-2020-25213
Past due
WordPress Snap Creek Duplicator Plugin WordPress Snap Creek Duplicator Plugin File Download Vulnerability
CVE-2020-11738
Past due
WordPress Social Warfare Plugin WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
CVE-2019-9978
Past due
Yealink Device Management Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
CVE-2021-27561
Past due
Zoho ManageEngine Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
CVE-2021-40539
Ransomware
Zoho ManageEngine Zoho ManageEngine Desktop Central File Upload Vulnerability
CVE-2020-10189
Past due
Zoho ManageEngine Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
CVE-2019-8394
Past due
Zyxel Multiple Products Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
CVE-2020-29583
Past due