CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1550
Critical
541
Exploited in Wild
541
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-57726 | CRITICAL | SimpleHelp | 9.9 | KEV | Yes | ✓ | January 15, 2025 | Patch |
| CVE-2023-48365 | CRITICAL | Qlik | 9.9 | KEV | Yes | ✓ | November 15, 2023 | Patch |
| CVE-2026-94127 | CRITICAL | F5 | 9.8 | KEV | Yes | ✗ | September 22, 2026 | |
| CVE-2026-93616 | CRITICAL | Check Point | 9.8 | KEV | Yes | ✗ | September 22, 2026 | |
| CVE-2026-76461 | CRITICAL | Cisco | 9.8 | KEV | Yes | ✗ | September 14, 2026 | |
| CVE-2026-85102 | CRITICAL | Check Point | 9.8 | KEV | Yes | ✗ | September 9, 2026 | |
| CVE-2026-86218 | CRITICAL | N-able | 9.8 | KEV | Yes | ✓ | September 6, 2026 | Patch |
| CVE-2026-82329 | CRITICAL | JFrog | 9.8 | KEV | Yes | ✗ | August 28, 2026 | |
| CVE-2026-60004 | CRITICAL | Gitea | 9.8 | KEV | Yes | ✓ | August 26, 2026 | Patch |
| CVE-2026-72529 | CRITICAL | TrueConf | 9.8 | KEV | Yes | ✓ | August 19, 2026 | Patch |
| CVE-2026-65400 | CRITICAL | Apple | 9.8 | KEV | Yes | ✓ | August 6, 2026 | Patch |
| CVE-2026-59310 | CRITICAL | Broadcom | 9.8 | KEV | Yes | ✗ | July 30, 2026 | |
| CVE-2026-63077 | CRITICAL | JetBrains | 9.8 | KEV | Yes | ✓ | July 27, 2026 | Patch |
| CVE-2026-63030 | CRITICAL | WordPress | 9.8 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-9198 | CRITICAL | IBM | 9.8 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-58644 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56164 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-50522 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-56291 | CRITICAL | Balbooa | 9.8 | KEV | Yes | ✓ | July 9, 2026 | Patch |
| CVE-2026-8452 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | June 30, 2026 | Patch |
| CVE-2026-56290 | CRITICAL | Joomlack | 9.8 | KEV | Yes | ✓ | June 29, 2026 | Patch |
| CVE-2026-48939 | CRITICAL | iCagenda | 9.8 | KEV | Yes | ✓ | June 20, 2026 | Patch |
| CVE-2026-48908 | CRITICAL | JoomShaper | 9.8 | KEV | Yes | ✓ | June 20, 2026 | Patch |
| CVE-2026-12569 | CRITICAL | PTC | 9.8 | KEV | Yes | ✗ | June 18, 2026 | |
| CVE-2026-35273 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | June 11, 2026 | Patch |
| CVE-2026-20253 | CRITICAL | Splunk | 9.8 | KEV | Yes | ✓ | June 10, 2026 | Patch |
| CVE-2026-25089 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | June 9, 2026 | Patch |
| CVE-2026-48907 | CRITICAL | Widget Factory | 9.8 | KEV | Yes | ✓ | June 5, 2026 | Patch |
| CVE-2026-8037 | CRITICAL | Progress | 9.8 | KEV | Yes | ✓ | June 4, 2026 | Patch |
| CVE-2026-46817 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | May 28, 2026 | Patch |
| CVE-2026-48027 | CRITICAL | Nx | 9.8 | KEV | Yes | ✓ | May 27, 2026 | Patch |
| CVE-2026-45247 | CRITICAL | Mirasvit | 9.8 | KEV | Yes | ✓ | May 26, 2026 | Patch |
| CVE-2026-48172 | CRITICAL | LiteSpeed | 9.8 | KEV | Yes | ✓ | May 21, 2026 | Patch |
| CVE-2026-9082 | CRITICAL | Drupal | 9.8 | KEV | Yes | ✓ | May 20, 2026 | Patch |
| CVE-2026-8398 | CRITICAL | Daemon | 9.8 | KEV | Yes | ✓ | May 15, 2026 | Patch |
| CVE-2026-42208 | CRITICAL | BerriAI | 9.8 | KEV | Yes | ✓ | May 8, 2026 | Patch |
| CVE-2026-0300 | CRITICAL | Palo Alto Networks | 9.8 | KEV | Yes | ✓ | May 6, 2026 | Patch |
| CVE-2026-41940 | CRITICAL | WebPros | 9.8 | KEV | Yes | ✓ | April 29, 2026 | Patch |
| CVE-2026-33824 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2026-39808 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2026-39987 | CRITICAL | Marimo | 9.8 | KEV | Yes | ✓ | April 9, 2026 | Patch |
| CVE-2026-35616 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | April 4, 2026 | Patch |
| CVE-2026-3055 | CRITICAL | Citrix | 9.8 | KEV | Yes | ✓ | March 23, 2026 | Patch |
| CVE-2026-33017 | CRITICAL | Langflow | 9.8 | KEV | Yes | ✓ | March 20, 2026 | Patch |
| CVE-2025-67038 | CRITICAL | Lantronix | 9.8 | KEV | Yes | ✓ | March 11, 2026 | Patch |
| CVE-2026-1731 | CRITICAL | BeyondTrust | 9.8 | KEV | Yes | ✓ | February 6, 2026 | Patch |
| CVE-2026-21643 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | February 6, 2026 | Patch |
| CVE-2026-1340 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 29, 2026 | Patch |
| CVE-2026-1281 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 29, 2026 | Patch |
| CVE-2025-40551 | CRITICAL | SolarWinds | 9.8 | KEV | Yes | ✓ | January 28, 2026 | Patch |