CISA – Known Exploited Vulnerabilities (KEV)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 10:17 UTC 2026-10-21 10:17 UTC 0 - W/"ea28426db6e3daf822f8973000a8a7e18220e986453336acb8f1520560aa59aa" -

Letzte Eintraege

1755 Eintraege · 50 pro Seite · Seite 5 von 36

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-03-30 00:00

CVE-2026-3055 — Citrix NetScaler Out-of-Bounds Read Vulnerability

CVE-2026-3055

0.90523 CRITICAL
2026-03-27 00:00

CVE-2025-53521 — F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

CVE-2025-53521

0.83023 CRITICAL
2026-03-26 00:00

CVE-2026-33634 — Aquasecurity Trivy Embedded Malicious Code Vulnerability

CVE-2026-33634

CRITICAL
2026-03-25 00:00

CVE-2026-33017 — Langflow Code Injection Vulnerability

CVE-2026-33017

CRITICAL
2026-03-20 00:00

CVE-2025-54068 — Laravel Livewire Code Injection Vulnerability

CVE-2025-54068

CRITICAL
2026-03-20 00:00

CVE-2025-43510 — Apple Multiple Products Improper Locking Vulnerability

CVE-2025-43510

HIGH
2026-03-20 00:00

CVE-2025-31277 — Apple Multiple Products Buffer Overflow Vulnerability

CVE-2025-31277

HIGH
2026-03-20 00:00

CVE-2025-32432 — Craft CMS Code Injection Vulnerability

CVE-2025-32432

CRITICAL
2026-03-20 00:00

CVE-2025-43520 — Apple Multiple Products Classic Buffer Overflow Vulnerability

CVE-2025-43520

MEDIUM
2026-03-19 00:00

CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

CVE-2026-20131

CRITICAL
2026-03-18 00:00

CVE-2026-20963 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CVE-2026-20963

0.98162 CRITICAL
2026-03-18 00:00

CVE-2025-66376 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

CVE-2025-66376

HIGH
2026-03-16 00:00

CVE-2025-47813 — Wing FTP Server Information Disclosure Vulnerability

CVE-2025-47813

MEDIUM
2026-03-13 00:00

CVE-2026-3909 — Google Skia Out-of-Bounds Write Vulnerability

CVE-2026-3909

HIGH
2026-03-13 00:00

CVE-2026-3910 — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

CVE-2026-3910

HIGH
2026-03-11 00:00

CVE-2025-68613 — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

CVE-2025-68613

CRITICAL
2026-03-09 00:00

CVE-2026-1603 — Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

CVE-2026-1603

HIGH
2026-03-09 00:00

CVE-2021-22054 — Omnissa Workspace ONE Server-Side Request Forgery

CVE-2021-22054

HIGH
2026-03-09 00:00

CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVE-2025-26399

CRITICAL
2026-03-05 00:00

CVE-2021-30952 — Apple Multiple Products Integer Overflow or Wraparound Vulnerability

CVE-2021-30952

HIGH
2026-03-05 00:00

CVE-2023-41974 — Apple iOS and iPadOS Use-After-Free Vulnerability

CVE-2023-41974

HIGH
2026-03-05 00:00

CVE-2017-7921 — Hikvision Multiple Products Improper Authentication Vulnerability

CVE-2017-7921

CRITICAL
2026-03-05 00:00

CVE-2023-43000 — Apple Multiple products Use-After-Free Vulnerability

CVE-2023-43000

HIGH
2026-03-05 00:00

CVE-2021-22681 — Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

CVE-2021-22681

CRITICAL
2026-03-03 00:00

CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability

CVE-2026-21385

HIGH
2026-03-03 00:00

CVE-2026-22719 — Broadcom VMware Aria Operations Command Injection Vulnerability

CVE-2026-22719

HIGH
2026-02-25 00:00

CVE-2026-20127 — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

CVE-2026-20127

CRITICAL
2026-02-25 00:00

CVE-2022-20775 — Cisco SD-WAN Path Traversal Vulnerability

CVE-2022-20775

HIGH
2026-02-24 00:00

CVE-2026-25108 — Soliton Systems K.K FileZen OS Command Injection Vulnerability

CVE-2026-25108

HIGH
2026-02-20 00:00

CVE-2025-49113 — RoundCube Webmail Deserialization of Untrusted Data Vulnerability

CVE-2025-49113

CRITICAL
2026-02-20 00:00

CVE-2025-68461 — RoundCube Webmail Cross-site Scripting Vulnerability

CVE-2025-68461

HIGH
2026-02-18 00:00

CVE-2026-22769 — Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

CVE-2026-22769

CRITICAL
2026-02-18 00:00

CVE-2021-22175 — GitLab Server-Side Request Forgery (SSRF) Vulnerability

CVE-2021-22175

MEDIUM
2026-02-17 00:00

CVE-2008-0015 — Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

CVE-2008-0015

HIGH
2026-02-17 00:00

CVE-2026-2441 — Google Chromium CSS Use-After-Free Vulnerability

CVE-2026-2441

HIGH
2026-02-17 00:00

CVE-2024-7694 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

CVE-2024-7694

HIGH
2026-02-17 00:00

CVE-2020-7796 — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

CVE-2020-7796

CRITICAL
2026-02-13 00:00

CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

CVE-2026-1731

CRITICAL
2026-02-12 00:00

CVE-2024-43468 — Microsoft Configuration Manager SQL Injection Vulnerability

CVE-2024-43468

CRITICAL
2026-02-12 00:00

CVE-2025-40536 — SolarWinds Web Help Desk Security Control Bypass Vulnerability

CVE-2025-40536

HIGH
2026-02-12 00:00

CVE-2026-20700 — Apple Multiple Buffer Overflow Vulnerability

CVE-2026-20700

HIGH
2026-02-12 00:00

CVE-2025-15556 — Notepad++ Download of Code Without Integrity Check Vulnerability

CVE-2025-15556

HIGH
2026-02-10 00:00

CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability

CVE-2026-21533

HIGH
2026-02-10 00:00

CVE-2026-21510 — Microsoft Windows Shell Protection Mechanism Failure Vulnerability

CVE-2026-21510

HIGH
2026-02-10 00:00

CVE-2026-21514 — Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

CVE-2026-21514

HIGH
2026-02-10 00:00

CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability

CVE-2026-21519

HIGH
2026-02-10 00:00

CVE-2026-21525 — Microsoft Windows NULL Pointer Dereference Vulnerability

CVE-2026-21525

MEDIUM
2026-02-10 00:00

CVE-2026-21513 — Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

CVE-2026-21513

HIGH
2026-02-05 00:00

CVE-2025-11953 — React Native Community CLI OS Command Injection Vulnerability

CVE-2025-11953

CRITICAL
2026-02-05 00:00

CVE-2026-24423 — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

CVE-2026-24423

CRITICAL