Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-8452 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 26 Aug 2026 |
| CVE-2026-20349 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Network & security devices |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 11 Aug 2026 |
| CVE-2026-20316 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Network & security devices |
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 29 Jul 2026 |
| CVE-2025-68686 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 27 Jul 2026 |
| CVE-2026-16232 Exploited |
Not yet scored | Check Point SmartConsole Network & security devices |
Check Point SmartConsole Improper Authentication Vulnerability | 22 Jul 2026 |
| CVE-2026-39808 Exploited |
Not yet scored | Fortinet FortiSandbox Network & security devices |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-15410 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Code Injection Vulnerability | 14 Jul 2026 |
| CVE-2026-15409 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 14 Jul 2026 |
| CVE-2008-4128 Exploited |
Not yet scored | Cisco IOS Network & security devices |
Cisco IOS Cross-Site Request Forgery Vulnerability | 13 Jul 2026 |
| CVE-2026-20230 Exploited |
Not yet scored | Cisco Unified Communications Manager Network & security devices |
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 25 Jun 2026 |
| CVE-2026-20262 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 15 Jun 2026 |
| CVE-2026-10520 Exploited |
Not yet scored | Ivanti Sentry Network & security devices |
Ivanti Sentry OS Command Injection Vulnerability | 11 Jun 2026 |
| CVE-2026-7473 Exploited |
Not yet scored | Arista Extensible Operating System Network & security devices |
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 9 Jun 2026 |
| CVE-2026-20245 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 9 Jun 2026 |
| CVE-2026-50751 Exploited |
Not yet scored | Check Point Security Gateway Network & security devices |
Check Point Security Gateway Improper Authentication Vulnerability | 8 Jun 2026 |
| CVE-2026-0257 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 29 May 2026 |
| CVE-2026-20182 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Network & security devices |
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 14 May 2026 |
| CVE-2026-6973 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 7 May 2026 |
| CVE-2026-0300 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 6 May 2026 |
| CVE-2026-20122 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manger Network & security devices |
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 20 Apr 2026 |
| CVE-2026-20133 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 20 Apr 2026 |
| CVE-2026-20128 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 20 Apr 2026 |
| CVE-2026-21643 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS SQL Injection Vulnerability | 13 Apr 2026 |
| CVE-2026-1340 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 8 Apr 2026 |
| CVE-2026-35616 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS Improper Access Control Vulnerability | 6 Apr 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.