Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-6973 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 7 May 2026 |
| CVE-2026-0300 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 6 May 2026 |
| CVE-2026-20122 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manger Network & security devices |
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 20 Apr 2026 |
| CVE-2026-20133 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 20 Apr 2026 |
| CVE-2026-20128 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 20 Apr 2026 |
| CVE-2026-21643 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS SQL Injection Vulnerability | 13 Apr 2026 |
| CVE-2026-1340 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 8 Apr 2026 |
| CVE-2026-35616 Exploited |
Not yet scored | Fortinet FortiClient EMS Network & security devices |
Fortinet FortiClient EMS Improper Access Control Vulnerability | 6 Apr 2026 |
| CVE-2025-53521 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 27 Mar 2026 |
| CVE-2026-1603 Exploited |
Not yet scored | Ivanti Endpoint Manager (EPM) Network & security devices |
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 9 Mar 2026 |
| CVE-2026-20127 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Controller and Manager Network & security devices |
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 25 Feb 2026 |
| CVE-2022-20775 Exploited |
Not yet scored | Cisco SD-WAN Network & security devices |
Cisco SD-WAN Path Traversal Vulnerability | 25 Feb 2026 |
| CVE-2026-1281 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 29 Jan 2026 |
| CVE-2026-20045 Exploited |
Not yet scored | Cisco Unified Communications Manager Network & security devices |
Cisco Unified Communications Products Code Injection Vulnerability | 21 Jan 2026 |
| CVE-2025-14733 Exploited |
Not yet scored | WatchGuard Firebox Network & security devices |
WatchGuard Firebox Out of Bounds Write Vulnerability | 19 Dec 2025 |
| CVE-2025-20393 Exploited |
Not yet scored | Cisco Multiple Products Network & security devices |
Cisco Multiple Products Improper Input Validation Vulnerability | 17 Dec 2025 |
| CVE-2025-40602 Exploited |
Not yet scored | SonicWall SMA1000 appliance Network & security devices |
SonicWall SMA1000 Missing Authorization Vulnerability | 17 Dec 2025 |
| CVE-2022-37055 Exploited |
Not yet scored | D-Link Routers Network & security devices |
D-Link Routers Buffer Overflow Vulnerability | 8 Dec 2025 |
| CVE-2025-58034 Exploited |
Not yet scored | Fortinet FortiWeb Network & security devices |
Fortinet FortiWeb OS Command Injection Vulnerability | 18 Nov 2025 |
| CVE-2025-64446 Exploited |
Not yet scored | Fortinet FortiWeb Network & security devices |
Fortinet FortiWeb Path Traversal Vulnerability | 14 Nov 2025 |
| CVE-2015-7755 Exploited |
Not yet scored | Juniper ScreenOS Network & security devices |
Juniper ScreenOS Improper Authentication Vulnerability | 2 Oct 2025 |
| CVE-2025-20352 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | 29 Sep 2025 |
| CVE-2025-59689 Exploited |
Not yet scored | Libraesva Email Security Gateway Network & security devices |
Libraesva Email Security Gateway Command Injection Vulnerability | 29 Sep 2025 |
| CVE-2025-20362 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Network & security devices |
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | 25 Sep 2025 |
| CVE-2025-20333 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Network & security devices |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | 25 Sep 2025 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.