Automatically updated
Actively exploited vulnerabilities
Vulnerabilities that attackers are confirmed to be exploiting: the ones to patch first. The list is updated several times a day from the US CISA catalog and alerts from CERT-FR, France’s government CERT.
- 32 vulnerabilities added to the catalog in 30 days
- 1 used by ransomware (60 days)
- CERT-FR 6 alerts in 90 days
All exploited vulnerabilities, vendor by vendor →
CERT-FR alerts
Alerts flag an immediate threat in France. See each CERT-FR page (in French) for the alert’s status and the measures to apply.
-
CERTFR-2026-ALE-012Incident de sécurité ciblant les Danfoss série AK-SM et AK-SC (12 octobre 2026)
Mentioned in our article: Hacked refrigeration: CERT-FR issues alert on Danfoss AK-SM and AK-SC controllers -
CERTFR-2026-ALE-011Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway (28 septembre 2026)
-
CERTFR-2026-ALE-010Vulnérabilité dans Metabase (10 septembre 2026)
-
CERTFR-2026-ALE-009Multiples vulnérabilités dans SonicWall Secure Mobile Access (02 septembre 2026)
-
CERTFR-2026-ALE-008Multiples vulnérabilités dans Microsoft Sharepoint (22 juillet 2026)
-
CERTFR-2026-ALE-007Multiples vulnérabilités dans WordPress (20 juillet 2026)
Additions to the Known Exploited Vulnerabilities catalog (CISA)
Each entry in the KEV catalog corresponds to observed exploitation. Titles, vendors and products are those of the CISA catalog.
Week of October 12, 2026 2 vulnerabilities
-
CVE-2026-96951Microsoft Windows Command Injection Vulnerability
-
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Mentioned in our article: Ivanti Connect Secure zero-day exploited, one of the patches still pending
Week of October 5, 2026 5 vulnerabilities
-
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability
-
CVE-2021-3199ONLYOFFICE Docs Server Path Traversal Vulnerability
-
CVE-2016-3081Apache Struts Command Injection Vulnerability
-
CVE-2015-5477ISC BIND Data Processing Errors Vulnerability
-
CVE-2015-3306ProFTPD Improper Access Control Vulnerability
Week of September 28, 2026 6 vulnerabilities
-
CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Mentioned in our article: NetScaler: Citrix patches new critical SAML-related flaw (CVE-2026-107406) -
CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management Vulnerability
-
CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability
-
CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability
Our article: FortiMail critical flaw exploited before a patch was available (CVE-2026-104286) -
CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
-
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write Vulnerability
Week of September 21, 2026 12 vulnerabilities
-
CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Mentioned in our article: NetScaler: Citrix patches new critical SAML-related flaw (CVE-2026-107406) -
CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability
Mentioned in our article: NetScaler: Citrix patches new critical SAML-related flaw (CVE-2026-107406) -
CVE-2026-87902WordPress Core Remote File Inclusion Vulnerability
-
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
-
CVE-2026-65660Microsoft SharePoint Code Injection Vulnerability
-
CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability
-
CVE-2026-5430WSO2 Multiple Products Path Traversal Vulnerability
-
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
-
CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
-
CVE-2026-93616Check Point Multiple Products Path Traversal Vulnerability
-
CVE-2026-85102Check Point Multiple Products Improper Certificate Validation Vulnerability
-
CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Week of September 14, 2026 7 vulnerabilities
-
CVE-2026-53266Linux Kernel Out-of-Bounds Write Vulnerability
-
CVE-2025-39964Linux Kernel Race Condition Vulnerability
-
CVE-2025-39682Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
-
CVE-2026-87886Acronis Backup Incorrect Default Permissions Vulnerability
-
CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
-
CVE-2026-58704Google Pixel Improper Authorization Vulnerability
-
CVE-2026-76461Cisco Secure Email Gateway SQL Injection Vulnerability
Week of September 7, 2026 14 vulnerabilities
-
CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
-
CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
-
CVE-2026-42018JFrog Artifactory Improper Authentication Vulnerability
-
CVE-2026-42016JFrog Artifactory Incorrect Authorization Vulnerability
-
CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
-
CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
-
CVE-2026-87491Google Chromium V8 Out of Bounds Write Vulnerability
-
CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
-
CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
-
CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
-
CVE-2026-86218N-able N-central Static Code Injection Vulnerability
-
CVE-2026-85880Microsoft Windows Heap-Based Buffer Overflow Vulnerability
-
CVE-2026-81963Microsoft Windows Link Following Vulnerability
-
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Week of August 31, 2026 10 vulnerabilities
-
CVE-2026-85046Google Chromium V8 Type Confusion Vulnerability
-
CVE-2026-9586Sangoma Switchvox SQL Injection Vulnerability
-
CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection Vulnerability
-
CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Mentioned in our article: SonicWall SMA1000: critical flaw CVE-2026-102255 already targeted in attacks -
CVE-2026-82329JFrog Artifactory Improper Authentication Vulnerability
-
CVE-2026-59822BerriAI LiteLLM Improper Authentication Vulnerability
-
CVE-2026-49869Kestra OSS OS Command Injection Vulnerability
-
CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling Vulnerability
-
CVE-2026-82078PaperCut NG/MF Unsafe Reflection Vulnerability
-
CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
Week of August 24, 2026 11 vulnerabilities
-
CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
-
CVE-2026-53362Linux Kernel Unspecified Vulnerability
-
CVE-2023-49105ownCloud Improper Authentication Vulnerability
-
CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
-
CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability
-
CVE-2021-23758Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
-
CVE-2019-1068Microsoft SQL Server Remote Code Execution Vulnerability
-
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
-
CVE-2015-3246Red Hat Libuser Race Condition Vulnerability
-
CVE-2026-60004Gitea Code Injection Vulnerability
-
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Week of August 17, 2026 9 vulnerabilities
-
CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
-
CVE-2026-72530TrueConf Server Code Injection Vulnerability
-
CVE-2026-72529TrueConf Server Missing Authentication for Critical Function Vulnerability
-
CVE-2026-64849MLflow Server-Side Request Forgery Vulnerability
-
CVE-2026-65400Apple macOS Improper Authentication Vulnerability
-
CVE-2026-59310Used by ransomwareBroadcom VMware vCenter Path Traversal Vulnerability
-
CVE-2026-55040Microsoft SharePoint Weak Authentication Vulnerability
-
CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
-
CVE-2025-62593Ray-Project Ray Code Injection Vulnerability
How to use this list
Check whether your estate includes the products listed, apply the vendor’s patches or workarounds, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed. A vulnerability missing from this list is not necessarily risk-free.
Sources: CISA KEV catalog (US public domain) and CERT-FR alerts. “Our article” links point to Cyberiack analyses that mention the vulnerability.