CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
535
Critical
507
Exploited in Wild
507
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-16812 | CRITICAL | Arista | 10.0 | KEV | Yes | ✗ | July 27, 2026 | |
| CVE-2026-15409 | CRITICAL | SonicWall | 10.0 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-48282 | CRITICAL | Adobe | 10.0 | KEV | Yes | ✓ | June 30, 2026 | Patch |
| CVE-2026-48558 | CRITICAL | SimpleHelp | 10.0 | KEV | Yes | ✓ | June 12, 2026 | Patch |
| CVE-2026-10520 | CRITICAL | Ivanti | 10.0 | KEV | Yes | ✓ | June 9, 2026 | Patch |
| CVE-2026-34910 | CRITICAL | Ubiquiti | 10.0 | KEV | Yes | ✓ | May 22, 2026 | Patch |
| CVE-2026-34909 | CRITICAL | Ubiquiti | 10.0 | KEV | Yes | ✓ | May 22, 2026 | Patch |
| CVE-2026-34908 | CRITICAL | Ubiquiti | 10.0 | KEV | Yes | ✓ | May 22, 2026 | Patch |
| CVE-2026-20182 | CRITICAL | Cisco | 10.0 | KEV | Yes | ✓ | May 14, 2026 | Patch |
| CVE-2026-20131 | CRITICAL | Cisco | 10.0 | KEV | Yes | ✓ | March 4, 2026 | Patch |
| CVE-2026-20127 | CRITICAL | Cisco | 10.0 | KEV | Yes | ✓ | February 25, 2026 | Patch |
| CVE-2026-22769 | CRITICAL | Dell | 10.0 | KEV | Yes | ✓ | February 17, 2026 | Patch |
| CVE-2025-52691 | CRITICAL | SmarterTools | 10.0 | KEV | Yes | ✓ | December 29, 2025 | Patch |
| CVE-2025-20393 | CRITICAL | Cisco | 10.0 | KEV | Yes | ✓ | December 17, 2025 | Patch |
| CVE-2025-37164 | CRITICAL | Hewlett Packard Enterprise (HPE) | 10.0 | KEV | Yes | ✓ | December 16, 2025 | Patch |
| CVE-2025-55182 | CRITICAL | Meta | 10.0 | KEV | Yes | ✓ | December 3, 2025 | Patch |
| CVE-2025-10035 | CRITICAL | Fortra | 10.0 | KEV | Yes | ✓ | September 18, 2025 | Patch |
| CVE-2025-43300 | CRITICAL | Apple | 10.0 | KEV | Yes | ✓ | August 21, 2025 | Patch |
| CVE-2025-54253 | CRITICAL | Adobe | 10.0 | KEV | Yes | ✓ | August 5, 2025 | Patch |
| CVE-2025-20337 | CRITICAL | Cisco | 10.0 | KEV | Yes | ✓ | July 16, 2025 | Patch |
| CVE-2025-47812 | CRITICAL | Wing FTP Server | 10.0 | KEV | Yes | ✓ | July 10, 2025 | Patch |
| CVE-2025-20281 | CRITICAL | Cisco | 10.0 | KEV | Yes | ✓ | June 25, 2025 | Patch |
| CVE-2025-32975 | CRITICAL | Quest | 10.0 | KEV | Yes | ✓ | June 24, 2025 | Patch |
| CVE-2025-32432 | CRITICAL | Craft CMS | 10.0 | KEV | Yes | ✓ | April 25, 2025 | Patch |
| CVE-2025-31324 | CRITICAL | SAP | 10.0 | KEV | Yes | ✓ | April 24, 2025 | Patch |
| CVE-2025-34028 | CRITICAL | Commvault | 10.0 | KEV | Yes | ✓ | April 22, 2025 | Patch |
| CVE-2025-32433 | CRITICAL | Erlang | 10.0 | KEV | Yes | ✓ | April 16, 2025 | Patch |
| CVE-2025-24201 | CRITICAL | Apple | 10.0 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2025-24813 | CRITICAL | Apache | 10.0 | KEV | Yes | ✓ | March 10, 2025 | Patch |
| CVE-2025-24085 | CRITICAL | Apple | 10.0 | KEV | Yes | ✓ | January 27, 2025 | Patch |
| CVE-2024-50603 | CRITICAL | Aviatrix | 10.0 | KEV | Yes | ✓ | January 8, 2025 | Patch |
| CVE-2024-51567 | CRITICAL | CyberPersons | 10.0 | KEV | Yes | ✓ | October 29, 2024 | Patch |
| CVE-2024-51378 | CRITICAL | CyberPersons | 10.0 | KEV | Yes | ✓ | October 29, 2024 | Patch |
| CVE-2024-45519 | CRITICAL | Synacor | 10.0 | KEV | Yes | ✓ | October 2, 2024 | Patch |
| CVE-2025-68613 | CRITICAL | n8n | 9.9 | KEV | Yes | ✓ | December 19, 2025 | Patch |
| CVE-2025-20333 | CRITICAL | Cisco | 9.9 | KEV | Yes | ✓ | September 25, 2025 | Patch |
| CVE-2025-49113 | CRITICAL | Roundcube | 9.9 | KEV | Yes | ✓ | June 2, 2025 | Patch |
| CVE-2025-24016 | CRITICAL | Wazuh | 9.9 | KEV | Yes | ✓ | February 10, 2025 | Patch |
| CVE-2024-57968 | CRITICAL | Advantive | 9.9 | KEV | Yes | ✓ | February 3, 2025 | Patch |
| CVE-2024-57726 | CRITICAL | SimpleHelp | 9.9 | KEV | Yes | ✓ | January 15, 2025 | Patch |
| CVE-2023-48365 | CRITICAL | Qlik | 9.9 | KEV | Yes | ✓ | November 15, 2023 | Patch |
| CVE-2026-63077 | CRITICAL | JetBrains | 9.8 | KEV | Yes | ✓ | July 27, 2026 | Patch |
| CVE-2026-63030 | CRITICAL | WordPress | 9.8 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-9198 | CRITICAL | IBM | 9.8 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-58644 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56164 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-50522 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56291 | CRITICAL | Balbooa | 9.8 | KEV | Yes | ✓ | July 9, 2026 | Patch |
| CVE-2026-56290 | CRITICAL | Joomlack | 9.8 | KEV | Yes | ✓ | June 29, 2026 | Patch |
| CVE-2026-48939 | CRITICAL | iCagenda | 9.8 | KEV | Yes | ✓ | June 20, 2026 | Patch |