Catalog 2026.10.28 · live from CISA
Exploited vulnerabilities
311 vulnerabilities attacked in the wild in the past 365 days, from CISA's catalog. Pick a product, or follow the RSS feed of new additions.
By product
Fortinet (FortiGate / FortiWeb / FortiMail)
12 exploited
latest 2026-10-16Microsoft SharePoint8 exploited · 1 in ransomware
latest 2026-09-25Citrix NetScaler ADC / Gateway6 exploited
latest 2026-10-04Ivanti Connect Secure / EPMM6 exploited
latest 2026-10-13Langflow5 exploited
latest 2026-08-04Zimbra Collaboration5 exploited
latest 2026-08-21SonicWall SMA / SSL VPN5 exploited · 2 in ransomware
latest 2026-09-02WordPress3 exploited
latest 2026-09-25Adobe Commerce / Magento3 exploited
latest 2026-10-27GitLab3 exploited
latest 2026-09-11Palo Alto Networks GlobalProtect (PAN-OS)3 exploited · 1 in ransomware
latest 2026-10-14cPanel & WHM3 exploited · 1 in ransomware
latest 2026-06-15Gladinet CentreStack / Triofox3 exploited
latest 2025-12-15PaperCut3 exploited · 1 in ransomware
latest 2026-08-31PHP2 exploited
latest 2026-10-26LiteSpeed2 exploited
latest 2026-06-15Oracle WebLogic2 exploited
latest 2026-08-24Joomla2 exploited
latest 2026-07-07Roundcube Webmail2 exploited
latest 2026-02-20F5 BIG-IP2 exploited
latest 2026-09-22Apache Tomcat1 exploited
latest 2026-08-04Drupal1 exploited
latest 2026-05-22Craft CMS1 exploited
latest 2026-03-20Laravel Livewire1 exploited
latest 2026-03-20Laravel1 exploited
latest 2026-03-20Next.js App Router (React Server Components)1 exploited · 1 in ransomware
latest 2025-12-05n8n1 exploited
latest 2026-03-11Metabase1 exploited
latest 2026-08-11Atlassian Confluence / Jira1 exploited
latest 2026-10-15Microsoft Exchange (OWA)1 exploited · 1 in ransomware
latest 2026-04-13No confirmed exploitation in the past year: nginx, Apache HTTP Server, Microsoft IIS, Next.js (Pages Router).
| Added | Newest exploited vulnerabilities | Fix by |
|---|---|---|
| 2026-10-28 | CVE-2026-46300 Linux Kernel Linux Kernel Missing Initialization of a Variable Vulnerability | 2026-10-31 |
| 2026-10-28 | CVE-2026-41709 Broadcom VMware ESX Broadcom VMWare ESX Insufficient Logging Vulnerability | 2026-11-11 |
| 2026-10-27 | CVE-2026-48356 Adobe Commerce and Magento Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-11-10 |
| 2026-10-27 | CVE-2026-111497 Google Brotli Google Brotli Unchecked Return Value Vulnerability | 2026-11-10 |
| 2026-10-26 | CVE-2026-109619 PHP Group PHP PHP Stale Internal Request-State Vulnerability | 2026-10-29 |
| 2026-10-26 | CVE-2026-109618 PHP Group PHP PHP Memory Corruption Vulnerability | 2026-10-29 |
| 2026-10-23 | CVE-2026-114625 Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator SQL Injection Vulnerability | 2026-10-26 |
| 2026-10-23 | CVE-2026-110447 Collabora Collabora Online – Built-in CODE Server Collabora Online – Built-in CODE Server OS Command Injection Vulnerability | 2026-10-26 |
| 2026-10-20 | CVE-2026-96656 Plex Media Server Plex Media Server External Control of File Name or Path Vulnerability | 2026-10-23 |
| 2026-10-20 | CVE-2026-96655 Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 2026-11-03 |
| 2026-10-20 | CVE-2026-96654 Plex Media Server Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | 2026-10-23 |
| 2026-10-20 | CVE-2026-96652 Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 2026-11-03 |
| 2026-10-20 | CVE-2026-110936 Siemens Software Center Siemens Software Center Uncontrolled Search Path Element Vulnerability | 2026-11-03 |
| 2026-10-20 | CVE-2026-106931 EG Secure Solutions SiteGuard Server Edition EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | 2026-10-23 |
| 2026-10-16 | CVE-2026-102764 BeyondTrust Remote Support BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 2026-10-19 |
| 2026-10-16 | CVE-2025-61624 Fortinet Multiple Products Fortinet Multiple Products Path Traversal Vulnerability | 2026-10-19 |
| 2026-10-15 | CVE-2026-21589 Atlassian Multiple Products Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 2026-10-18 |
| 2026-10-14 | CVE-2026-76519 Cisco Secure Email Gateway Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 2026-10-17 |
| 2026-10-14 | CVE-2026-105134 Ahsay AhsayCBS Ahsay AhsayCBS Command Injection Vulnerability | 2026-10-17 |
| 2026-10-14 | CVE-2026-105133 Ahsay AhsayCBS Ahsay AhsayCBS Improper Authentication Vulnerability | 2026-10-17 |
| 2026-10-14 | CVE-2026-0322 Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Code Injection Vulnerability | 2026-10-17 |
| 2026-10-13 | CVE-2026-96951 Microsoft Windows Microsoft Windows Command Injection Vulnerability | 2026-10-16 |
| 2026-10-13 | CVE-2026-104935 Ivanti Connect Secure Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 2026-10-16 |
| 2026-10-08 | CVE-2023-22894 Strapi Strapi Strapi Cleartext Storage of Sensitive Information Vulnerability | 2026-10-11 |
| 2026-10-08 | CVE-2021-3199 ONLYOFFICE Docs ONLYOFFICE Docs Server Path Traversal Vulnerability | 2026-10-11 |