Exploited vulnerabilities

CVEs named in our security coverage, matched against CISA's catalog of flaws known to be exploited in the wild.

350 CVEs covered · Updated as we publish · Page 7 of 7

124 in CISA's known-exploited catalog

SearchVendor

Status

350 CVEs

CVE	Vendor / product	Exploited	Our coverage
CVE-2024-3982	—	Not in catalog	Hitachi Energy Discloses a 9.9 Flaw With No Patch VersionSep 20
CVE-2024-4872	—	Not in catalog	Hitachi Energy Discloses a 9.9 Flaw With No Patch VersionSep 20
CVE-2024-7940	—	Not in catalog	Hitachi Energy Discloses a 9.9 Flaw With No Patch VersionSep 20
CVE-2024-7941	—	Not in catalog	Hitachi Energy Discloses a 9.9 Flaw With No Patch VersionSep 20
CVE-2026-13348	—	Not in catalog	Hitachi Energy Discloses a 9.9 Flaw With No Patch VersionSep 20
CVE-2026-13584	—	Not in catalog	Hitachi Energy Discloses a 9.9 Flaw With No Patch VersionSep 20
CVE-2026-32882	—	Not in catalog	Hacktron Chains a Forum Bug to Reach OpenAI's Private CodeSep 19
CVE-2018-9568	—	Not in catalog	Flock Safety Cameras Carry a Universal Hard-Coded KeySep 18
CVE-2026-77960	—	Not in catalog	Bransys ELD App Shipped With Hardcoded Login CredentialsSep 17
CVE-2026-86520	—	Not in catalog	Bransys ELD App Shipped With Hardcoded Login CredentialsSep 17
CVE-2026-86689	—	Not in catalog	Bransys ELD App Shipped With Hardcoded Login CredentialsSep 17
CVE-2026-58113	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62645	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62647	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62648	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62650	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-62654	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-80465	—	Not in catalog	Siemens Reyrolle Relay Carries a 9.8 Authentication BypassSep 16
CVE-2026-43499	—	Not in catalog	How a Fake Photo of 'Glitter Milk' Broke Google's Photo VerificationSep 16
CVE-2025-70994	—	Not in catalog	The Egret GT E-Scooter's Firmware Updates Need No AuthenticationSep 13
CVE-2026-1354	—	Not in catalog	The Egret GT E-Scooter's Firmware Updates Need No AuthenticationSep 13
CVE-2026-79708	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-86340	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-86341	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-87719	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-88765	—	Not in catalog	GitLab Patches a Perfect-10 Bug Attackers Found in a DaySep 13
CVE-2026-19489	—	Not in catalog	Citrix NetScaler Bug Lets Attackers Skip Login EntirelySep 13
CVE-2026-10528	—	Not in catalog	Orthanc's Own Changelog Skips the Bug CISA Just FlaggedSep 13
CVE-2026-5437	—	Not in catalog	Orthanc's Own Changelog Skips the Bug CISA Just FlaggedSep 13
CVE-2026-87020	—	Not in catalog	Orthanc's Own Changelog Skips the Bug CISA Just FlaggedSep 13
CVE-2026-86206	—	Not in catalog	N-able Denied Exploits Four Days Before Confirming ThemSep 13
CVE-2026-86207	—	Not in catalog	N-able Denied Exploits Four Days Before Confirming ThemSep 13
CVE-2026-24763	—	Not in catalog	OpenClaw's Maintainers Detail a Year of Fighting Fake Pull RequestsSep 12
CVE-2026-38056	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-38057	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-38058	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-38059	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-75925	—	Not in catalog	IXON Patches a 9.6-Severity RCE in Its Industrial VPN ClientSep 11
CVE-2026-78224	—	Not in catalog	NextGen's Mirth Connect Gets Three High-Severity PatchesSep 11 NextGen Healthcare Patches Three Flaws in Mirth ConnectSep 12
CVE-2026-82578	—	Not in catalog	NextGen's Mirth Connect Gets Three High-Severity PatchesSep 11 NextGen Healthcare Patches Three Flaws in Mirth ConnectSep 12
CVE-2026-82583	—	Not in catalog	NextGen's Mirth Connect Gets Three High-Severity PatchesSep 11 NextGen Healthcare Patches Three Flaws in Mirth ConnectSep 12
CVE-2026-81821	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-81822	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-81823	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-81824	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-67276	—	Not in catalog	CISA Adds Two of Six Exploited MikroTik RouterOS Flaws to KEVSep 11 MikroTik Patches RouterOS Flaws Attackers Exploited FirstSep 17 CISA Adds a Fourth MikroTrick Bug to Its Exploited ListSep 26 CISA Confirms Which MikroTik Bug Unlocks Full Router TakeoverSep 27
CVE-2026-27660	—	Not in catalog	Forgejo Patches a 9.9-Severity RCE in Template RepositoriesSep 10
CVE-2026-89094	—	Not in catalog	Forgejo Patches a 9.9-Severity RCE in Template RepositoriesSep 10
CVE-2026-69676	—	Not in catalog	September Patch Tuesday: Two Zero-Days, and a Number Nobody Agrees OnSep 9 Microsoft's Record 966-Fix Patch Tuesday Has Two Exploited Bugs, Both LocalSep 28
CVE-2026-69730	—	Not in catalog	September Patch Tuesday: Two Zero-Days, and a Number Nobody Agrees OnSep 9 Microsoft's Record 966-Fix Patch Tuesday Has Two Exploited Bugs, Both LocalSep 28