MSRXMSRXSecurity
Catalog 2026.10.29 · live from CISA

Exploited vulnerabilities by vendor

119 vendors had flaws attacked in the wild in the past 365 days. Pick one to see every CVE, the ones used in ransomware, and when each fix is due.

Microsoft

42 exploited · 4 in ransomware

latest 2026-10-13
Cisco

21 exploited · 2 in ransomware

latest 2026-10-29
Fortinet

12 exploited

latest 2026-10-16
Google

11 exploited

latest 2026-10-27
Apple

10 exploited

latest 2026-09-29
Linux

9 exploited

latest 2026-10-28
Adobe

7 exploited

latest 2026-10-27
Citrix

6 exploited

latest 2026-10-04
Ivanti

6 exploited

latest 2026-10-13
Broadcom

5 exploited · 1 in ransomware

latest 2026-10-28
Oracle

5 exploited · 1 in ransomware

latest 2026-08-24
SonicWall

5 exploited · 2 in ransomware

latest 2026-09-02
Synacor

5 exploited

latest 2026-08-21
Arista

4 exploited

latest 2026-10-23
Check Point

4 exploited · 1 in ransomware

latest 2026-09-22
GitLab

4 exploited

latest 2026-10-29
JFrog

4 exploited

latest 2026-09-11
Langflow

4 exploited

latest 2026-07-21
Plex

4 exploited

latest 2026-10-20
SolarWinds

4 exploited · 1 in ransomware

latest 2026-06-05
Android

3 exploited

latest 2026-06-02
Apache

3 exploited

latest 2026-10-08
BerriAI

3 exploited

latest 2026-09-02
Gladinet

3 exploited

latest 2025-12-15
MikroTik

3 exploited

latest 2026-09-25
N-able

3 exploited

latest 2026-09-08
Palo Alto Networks

3 exploited · 1 in ransomware

latest 2026-10-14
PaperCut

3 exploited · 1 in ransomware

latest 2026-08-31
Sangoma

3 exploited

latest 2026-09-02
SimpleHelp

3 exploited · 2 in ransomware

latest 2026-06-29
SmarterTools

3 exploited · 3 in ransomware

latest 2026-02-05
TrueConf

3 exploited

latest 2026-08-20
Ubiquiti

3 exploited

latest 2026-06-23
WordPress

3 exploited

latest 2026-09-25
Ahsay

2 exploited

latest 2026-10-14
BeyondTrust

2 exploited · 1 in ransomware

latest 2026-10-16
ConnectWise

2 exploited · 1 in ransomware

latest 2026-09-11
D-Link

2 exploited

latest 2026-04-24
F5

2 exploited

latest 2026-09-22
JetBrains

2 exploited · 2 in ransomware

latest 2026-08-05
LiteSpeed

2 exploited

latest 2026-06-15
OpenPLC

2 exploited

latest 2025-12-03
PHP Group

2 exploited

latest 2026-10-26
Red Hat

2 exploited

latest 2026-08-26
Roundcube

2 exploited

latest 2026-02-20
Samsung

2 exploited

latest 2026-04-24
WatchGuard

2 exploited · 1 in ransomware

latest 2025-12-19
Zammad GmbH

2 exploited

latest 2026-10-02
Acronis

1 exploited

latest 2026-09-16
Ajax.NET Professional

1 exploited

latest 2026-08-26
Aquasecurity

1 exploited

latest 2026-03-26
Array Networks

1 exploited

latest 2025-12-08
ASUS

1 exploited

latest 2025-12-17
Atlassian

1 exploited

latest 2026-10-15
Balbooa

1 exploited

latest 2026-07-10
Collabora

1 exploited

latest 2026-10-23
Craft CMS

1 exploited

latest 2026-03-20
CWP

1 exploited

latest 2025-11-04
Daemon

1 exploited

latest 2026-05-27
DD-WRT

1 exploited

latest 2026-07-21
Dell

1 exploited

latest 2026-02-18
Digiever

1 exploited

latest 2025-12-22
Drupal

1 exploited

latest 2026-05-22
EG Secure Solutions

1 exploited

latest 2026-10-20
Gitea

1 exploited

latest 2026-08-25
GNU

1 exploited

latest 2026-01-26
Gogs

1 exploited

latest 2026-01-12
Hewlett Packard Enterprise (HPE)

1 exploited

latest 2026-01-07
Hikvision

1 exploited

latest 2026-03-05
IBM

1 exploited

latest 2026-08-04
iCagenda

1 exploited

latest 2026-07-10
ISC

1 exploited

latest 2026-10-08
Joomlack

1 exploited

latest 2026-07-07
JoomShaper

1 exploited

latest 2026-07-07
Kentico

1 exploited

latest 2026-04-20
Kestra

1 exploited

latest 2026-09-02
Kludex

1 exploited

latest 2026-09-02
KNX Association

1 exploited

latest 2026-07-15
Lantronix

1 exploited

latest 2026-06-23
Laravel

1 exploited

latest 2026-03-20
Marimo

1 exploited

latest 2026-04-23
Meta

1 exploited · 1 in ransomware

latest 2025-12-05
Metabase

1 exploited

latest 2026-08-11
Mirasvit

1 exploited

latest 2026-06-03
MLflow

1 exploited

latest 2026-08-19
MongoDB

1 exploited

latest 2025-12-29
n8n

1 exploited

latest 2026-03-11
Notepad++

1 exploited

latest 2026-02-12
Nx

1 exploited · 1 in ransomware

latest 2026-05-27
Omnissa

1 exploited

latest 2026-03-09
ONLYOFFICE

1 exploited

latest 2026-10-08
OSGeo

1 exploited

latest 2025-12-11
ownCloud

1 exploited

latest 2026-08-27
Prettier

1 exploited

latest 2026-01-22
ProFTPD

1 exploited

latest 2026-10-08
Progress

1 exploited

latest 2026-08-07
PTC

1 exploited · 1 in ransomware

latest 2026-06-25
Qualcomm

1 exploited

latest 2026-03-03
Quest

1 exploited

latest 2026-04-20
RARLAB

1 exploited

latest 2025-12-09
Ray-Project

1 exploited

latest 2026-08-17
React Native Community

1 exploited

latest 2026-02-05
Rockwell

1 exploited

latest 2026-03-05
Siemens

1 exploited

latest 2026-10-20
Sierra Wireless

1 exploited

latest 2025-12-12
Soliton Systems K.K

1 exploited

latest 2026-02-24
Splunk

1 exploited

latest 2026-06-18
Strapi

1 exploited

latest 2026-10-08
TanStack

1 exploited · 1 in ransomware

latest 2026-05-27
TeamT5

1 exploited

latest 2026-02-17
Trend Micro

1 exploited

latest 2026-05-21
Versa

1 exploited

latest 2026-01-22
Vite

1 exploited

latest 2026-01-22
WebPros

1 exploited · 1 in ransomware

latest 2026-04-30
Widget Factory

1 exploited

latest 2026-06-16
Wing FTP Server

1 exploited

latest 2026-03-16
WSO2

1 exploited

latest 2026-09-24
XWiki

1 exploited

latest 2025-10-30
Zyxel

1 exploited

latest 2026-09-21