Exploited vulnerabilities

CVEs named in our security coverage, matched against CISA's catalog of flaws known to be exploited in the wild.

69 CVEs covered · Updated as we publish · Page 1 of 2

27 in CISA's known-exploited catalog

SearchVendor

Status

69 CVEs

CVE	Vendor / product	Exploited	Our coverage
CVE-2026-76460	Cisco Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability	Known exploitedAdded Sep 16	Cisco and Acronis Share a CISA Deadline, Not a Severity ScoreSep 17
CVE-2026-87886	Acronis BackupAcronis Backup Incorrect Default Permissions Vulnerability	Known exploitedAdded Sep 16	Cisco and Acronis Share a CISA Deadline, Not a Severity ScoreSep 17
CVE-2026-58704	Google PixelGoogle Pixel Improper Authorization Vulnerability	Known exploitedAdded Sep 16	CISA Sets a 3-Day Deadline for an Exploited Pixel FlawSep 16
CVE-2026-76461	Cisco Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability	Known exploitedAdded Sep 14	Cisco Patches a 9.8-Rated Bug Already Under AttackSep 15
CVE-2025-25249	Fortinet Multiple ProductsFortinet Multiple Products Heap-based Buffer Overflow Vulnerability	Known exploitedAdded Sep 9	Fortinet's January Patch Isn't Stopping an AI-Built RATSep 14 A Fortinet Bug Patched in 2025 Is Now Under AttackSep 17
CVE-2026-87491	Google Chromium V8Google Chromium V8 Out of Bounds Write Vulnerability	Known exploitedAdded Sep 9	Chrome Patches a Second Exploited V8 Bug in Four DaysSep 14
CVE-2026-85706	GitLab Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability	Known exploitedAdded Sep 11	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-19490	Citrix NetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability	Known exploitedAdded Sep 9	Citrix NetScaler Bug Lets Attackers Skip Login EntirelySep 13
CVE-2026-18577	N-able N-centralN-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability	Known exploitedAdded Aug 3	N-able Denied Exploits Four Days Before Confirming ThemSep 13
CVE-2026-86218	N-able N-centralN-able N-central Static Code Injection Vulnerability	Known exploitedAdded Sep 8	N-able Denied Exploits Four Days Before Confirming ThemSep 13
CVE-2026-84869	ConnectWise ScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability	Known exploitedAdded Sep 11	ScreenConnect Flaw Let Malware Hop Between Remote Sessions on Its OwnSep 12 ConnectWise Fixes a 9.9-Rated Flaw in ScreenConnect's File TransferSep 14
CVE-2026-82329	JFrog ArtifactoryJFrog Artifactory Improper Authentication Vulnerability	Known exploitedAdded Sep 2	Three Chained JFrog Flaws Let Attackers Skip Authentication EntirelySep 12 Attackers Chain Two JFrog Artifactory Bugs to Forge Admin TokensSep 14 Attackers Exploit a JFrog Artifactory Bug in Four DaysSep 17
CVE-2026-42016	JFrog ArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability	Known exploitedAdded Sep 11	Three Chained JFrog Flaws Let Attackers Skip Authentication EntirelySep 12 Attackers Chain Two JFrog Artifactory Bugs to Forge Admin TokensSep 14
CVE-2026-42018	JFrog ArtifactoryJFrog Artifactory Improper Authentication Vulnerability	Known exploitedAdded Sep 11	Three Chained JFrog Flaws Let Attackers Skip Authentication EntirelySep 12 Attackers Chain Two JFrog Artifactory Bugs to Forge Admin TokensSep 14
CVE-2026-20079	Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability	Known exploitedAdded Sep 9	CISA Sets Sept. 12 Deadline on Cisco's Perfect-10 Firewall BugSep 11 Sandworm and a Qilin Affiliate Both Hit the Same Cisco BugSep 13
CVE-2026-20316	Cisco Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability	Known exploitedAdded Jul 29Ransomware	CISA Sets Sept. 12 Deadline on Cisco's Perfect-10 Firewall BugSep 11 Sandworm and a Qilin Affiliate Both Hit the Same Cisco BugSep 13
CVE-2026-67277	MikroTik RouterOSMikroTik RouterOS Missing Authentication for Critical Function Vulnerability	Known exploitedAdded Sep 10	CISA Adds Two of Six Exploited MikroTik RouterOS Flaws to KEVSep 11 MikroTik Patches RouterOS Flaws Attackers Exploited FirstSep 17
CVE-2026-86060	MikroTik RouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability	Known exploitedAdded Sep 10	CISA Adds Two of Six Exploited MikroTik RouterOS Flaws to KEVSep 11 MikroTik Patches RouterOS Flaws Attackers Exploited FirstSep 17
CVE-2026-11645	Google Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability	Known exploitedAdded Jun 9	Chrome Patches Its Sixth Zero-Day of 2026Sep 10 Chrome Patches a Second Exploited V8 Bug in Four DaysSep 14
CVE-2026-2441	Google ChromiumGoogle Chromium CSS Use-After-Free Vulnerability	Known exploitedAdded Feb 17	Chrome Patches Its Sixth Zero-Day of 2026Sep 10 Chrome Patches a Second Exploited V8 Bug in Four DaysSep 14
CVE-2026-3909	Google SkiaGoogle Skia Out-of-Bounds Write Vulnerability	Known exploitedAdded Mar 13	Chrome Patches Its Sixth Zero-Day of 2026Sep 10 Chrome Patches a Second Exploited V8 Bug in Four DaysSep 14
CVE-2026-3910	Google Chromium V8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability	Known exploitedAdded Mar 13	Chrome Patches Its Sixth Zero-Day of 2026Sep 10 Chrome Patches a Second Exploited V8 Bug in Four DaysSep 14
CVE-2026-5281	Google DawnGoogle Dawn Use-After-Free Vulnerability	Known exploitedAdded Apr 1	Chrome Patches Its Sixth Zero-Day of 2026Sep 10 Chrome Patches a Second Exploited V8 Bug in Four DaysSep 14
CVE-2026-85046	Google Chromium V8Google Chromium V8 Type Confusion Vulnerability	Known exploitedAdded Sep 4	Chrome Patches Its Sixth Zero-Day of 2026Sep 10 Chrome Patches a Second Exploited V8 Bug in Four DaysSep 14
CVE-2026-75650	Adobe Commerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability	Known exploitedAdded Sep 8	Adobe Patches Actively Exploited Commerce Zero-DaySep 10 Magento Zero-Day Compromised a Store Within 50 MinutesSep 13
CVE-2026-81963	Microsoft WindowsMicrosoft Windows Link Following Vulnerability	Known exploitedAdded Sep 8	September Patch Tuesday: Two Zero-Days, and a Number Nobody Agrees OnSep 9
CVE-2026-85880	Microsoft WindowsMicrosoft Windows Heap-Based Buffer Overflow Vulnerability	Known exploitedAdded Sep 8	September Patch Tuesday: Two Zero-Days, and a Number Nobody Agrees OnSep 9
CVE-2026-77960	—	Not in catalog	Bransys ELD App Shipped With Hardcoded Login CredentialsSep 17
CVE-2026-86520	—	Not in catalog	Bransys ELD App Shipped With Hardcoded Login CredentialsSep 17
CVE-2026-86689	—	Not in catalog	Bransys ELD App Shipped With Hardcoded Login CredentialsSep 17
CVE-2026-58113	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62645	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62647	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62648	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62650	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62654	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-80465	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-43499	—	Not in catalog	How a Fake Photo of 'Glitter Milk' Broke Google's Photo VerificationSep 16
CVE-2025-70994	—	Not in catalog	The Egret GT E-Scooter's Firmware Updates Need No AuthenticationSep 13
CVE-2026-1354	—	Not in catalog	The Egret GT E-Scooter's Firmware Updates Need No AuthenticationSep 13
CVE-2026-79708	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-86340	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-86341	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-87719	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-88765	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-19489	—	Not in catalog	Citrix NetScaler Bug Lets Attackers Skip Login EntirelySep 13
CVE-2026-10528	—	Not in catalog	Orthanc's Own Changelog Skips the Bug CISA Just FlaggedSep 13
CVE-2026-5437	—	Not in catalog	Orthanc's Own Changelog Skips the Bug CISA Just FlaggedSep 13
CVE-2026-87020	—	Not in catalog	Orthanc's Own Changelog Skips the Bug CISA Just FlaggedSep 13
CVE-2026-86206	—	Not in catalog	N-able Denied Exploits Four Days Before Confirming ThemSep 13

Latest additions to CISA's catalog

The newest flaws the U.S. Cybersecurity and Infrastructure Security Agency has confirmed are being exploited, whether or not we have written about them.

Added	CVE	Vendor / product	Flaw
September 18, 2026	CVE-2025-39964	Linux Kernel	Linux Kernel Race Condition Vulnerability
September 18, 2026	CVE-2026-53266	Linux Kernel	Linux Kernel Out-of-Bounds Write Vulnerability
September 16, 2026	CVE-2026-58704Covered	Google Pixel	Google Pixel Improper Authorization Vulnerability
September 16, 2026	CVE-2026-76460Covered	Cisco Identity Services Engine	Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
September 16, 2026	CVE-2026-87886Covered	Acronis Backup	Acronis Backup Incorrect Default Permissions Vulnerability
September 14, 2026	CVE-2026-76461Covered	Cisco Secure Email Gateway	Cisco Secure Email Gateway SQL Injection Vulnerability
September 11, 2026	CVE-2026-84869Covered	ConnectWise ScreenConnect	ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
September 11, 2026	CVE-2026-42016Covered	JFrog Artifactory	JFrog Artifactory Incorrect Authorization Vulnerability
September 11, 2026	CVE-2026-42018Covered	JFrog Artifactory	JFrog Artifactory Improper Authentication Vulnerability
September 11, 2026	CVE-2026-85706Covered	GitLab Community Edition and Enterprise Edition	GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
September 10, 2026	CVE-2026-86060Covered	MikroTik RouterOS	MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
September 10, 2026	CVE-2026-67277Covered	MikroTik RouterOS	MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
September 9, 2026	CVE-2026-19490Covered	Citrix NetScaler	Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
September 9, 2026	CVE-2025-25249Covered	Fortinet Multiple Products	Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
September 9, 2026	CVE-2026-87491Covered	Google Chromium V8	Google Chromium V8 Out of Bounds Write Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog, refreshed twice a day.