Known Exploited Vulnerabilities Archives • Daily CyberSecurity

Q3 2026 CVE Report Shows 100 New CISA KEV Additions as Exploitation Speeds Up

Q3 2026 CVE report chart of CISA KEV catalog additions, top vendors and exploited CVEs

Q3 2026 CVE Report Shows 100 New CISA KEV Additions as Exploitation Speeds Up

Do Son October 12, 2026

Our Q3 2026 CVE report tracks 100 new CISA KEV catalog flaws, up 33%. Microsoft leads, and 26% were exploited within a week of disclosure.

Citrix NetScaler CVE-2026-88772 Exploited in the Wild as PoC and Full Details Go Public CVE-2026-88772 Citrix NetScaler DTLS pre-auth memory overflow exploited in the wild with public proof-of-concept exploit code

CVE-2026-88772 Citrix NetScaler DTLS pre-auth memory overflow exploited in the wild with public proof-of-concept exploit code

Citrix NetScaler CVE-2026-88772 Exploited in the Wild as PoC and Full Details Go Public

Do Son October 1, 2026

CVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.

Weekly Threat Intelligence Report: Late August 2026 Chart summarizing the CVE weekly report with 9 exploited vulnerabilities added to the CISA KEV catalog

Chart summarizing the CVE weekly report with 9 exploited vulnerabilities added to the CISA KEV catalog

Weekly Threat Intelligence Report: Late August 2026

Do Son August 24, 2026

This CVE weekly report tracks 3,179 new CVEs and 9 exploited vulnerabilities added to CISA KEV, from Ray and MLflow to VMware and Apple.

CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter CISA KEV Catalog adds four exploited vulnerabilities in SharePoint VMware vCenter macOS and Windows IKE

CISA KEV Catalog adds four exploited vulnerabilities in SharePoint VMware vCenter macOS and Windows IKE

CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter

Do Son August 19, 2026

CISA added four exploited flaws to its KEV Catalog, hitting SharePoint, VMware vCenter, macOS, and Windows IKE. Patch by August 21.

CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited CISA KEV additions listing two known exploited vulnerabilities in Arista VeloCloud and FortiOS

CISA KEV additions listing two known exploited vulnerabilities in Arista VeloCloud and FortiOS

CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited

Do Son July 27, 2026

CISA KEV additions on July 27 flag two known exploited vulnerabilities: Arista VeloCloud CVE-2026-16812 and FortiOS CVE-2025-68686. Patch both now.

CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog CISA KEV catalog adding four known exploited vulnerabilities including WordPress and Langflow RCE

CISA KEV catalog adding four known exploited vulnerabilities including WordPress and Langflow RCE

CISA Adds Four Exploited Vulnerabilities to Its KEV Catalog

Do Son July 21, 2026

CISA added four flaws to its KEV catalog, including WordPress RCE (CVE-2026-63030) and Langflow RCE (CVE-2026-0770). All are exploited in the wild.

CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog CISA KEV Catalog adding CVE-2026-20230 Cisco Unified CM and CVE-2026-12569 PTC Windchill vulnerabilities

CISA KEV Catalog adding CVE-2026-20230 Cisco Unified CM and CVE-2026-12569 PTC Windchill vulnerabilities

CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog

Do Son June 26, 2026

CISA added two flaws to its KEV Catalog: a Cisco Unified CM SSRF bug and a PTC Windchill RCE. Federal agencies must patch by June 28, 2026.

CISA Expands Active Exploit Catalog with Cisco, Arista, and Chromium Flaws CISA active exploit catalog known exploited vulnerabilities ActiveMQ RCE CVE-2026-34197 CISA KEV Catalog Actively Exploited Vulnerabilities CISA KEV Catalog CVE-2025-37164 GeoServer XXE, CISA KEV FortiWeb SQLi, CISA KEV Critical Vulnerabilities CVE-2024-20953

CISA active exploit catalog known exploited vulnerabilities ActiveMQ RCE CVE-2026-34197 CISA KEV Catalog Actively Exploited Vulnerabilities CISA KEV Catalog CVE-2025-37164 GeoServer XXE, CISA KEV FortiWeb SQLi, CISA KEV Critical Vulnerabilities CVE-2024-20953

CISA Expands Active Exploit Catalog with Cisco, Arista, and Chromium Flaws

Do Son June 10, 2026

The CISA active exploit catalog now includes three known exploited vulnerabilities from Cisco, Arista, and Chromium. Update your systems today.

CISA Active Exploit Catalog Expands with Critical Gateway Flaws CISA active exploit catalog critical gateway flaws CVE-2023-27532 & CVE-2024-37383

CISA active exploit catalog critical gateway flaws CVE-2023-27532 & CVE-2024-37383

CISA Active Exploit Catalog Expands with Critical Gateway Flaws

Do Son June 9, 2026

CISA expands its active exploit catalog with critical gateway flaws in BerriAI LiteLLM and Check Point configurations. Patch immediately.

Active SharePoint Spoofing and Legacy Office RCE: CISA Alerts on New KEV Exploits CISA KEV Catalog Updates Langflow CVE-2025-34291 Exploit SharePoint Spoofing CISA KEV Catalog Actively Exploited Vulnerability

CISA KEV Catalog Updates Langflow CVE-2025-34291 Exploit SharePoint Spoofing CISA KEV Catalog Actively Exploited Vulnerability

Active SharePoint Spoofing and Legacy Office RCE: CISA Alerts on New KEV Exploits

Do Son April 15, 2026

CISA adds Microsoft SharePoint spoofing (CVE-2026-32201) and legacy Office RCE (CVE-2009-0238) to its KEV Catalog. Remediation deadline: April 28, 2026.

CISA Adds Three New Vulnerabilities to Catalog, Urges Immediate Patching CISA KEV Catalog SharePoint RCE CISA, Known Exploited Vulnerabilities CVE-2023-33010

CISA KEV Catalog SharePoint RCE CISA, Known Exploited Vulnerabilities CVE-2023-33010

CISA Adds Three New Vulnerabilities to Catalog, Urges Immediate Patching

Do Son September 5, 2025

CISA adds three new vulnerabilities to its KEV Catalog, including flaws in the Linux kernel, Android Runtime, and Sitecore CMS. All are being actively exploited.

CISA Flags Two Actively Exploited Vulnerabilities: TP-Link Router Reset Flaw and WhatsApp Zero-Day Chain Ivanti EPMM Vulnerability CVE-2026-1340 CISA KEV Catalog CVE-2026-21385 CISA KEV Update CVE-2008-0015 CISA KEV, Array Networks Command Injection CVE-2025-0111 & CVE-2025-23209 CISA, Known Exploited Vulnerabilities

Ivanti EPMM Vulnerability CVE-2026-1340 CISA KEV Catalog CVE-2026-21385 CISA KEV Update CVE-2008-0015 CISA KEV, Array Networks Command Injection CVE-2025-0111 & CVE-2025-23209 CISA, Known Exploited Vulnerabilities

CISA Flags Two Actively Exploited Vulnerabilities: TP-Link Router Reset Flaw and WhatsApp Zero-Day Chain

Do Son September 3, 2025

CISA adds two flaws to its KEV Catalog: a TP-Link factory reset flaw and a WhatsApp zero-click vulnerability used in targeted spyware attacks. Patching is urgent.

CISA Warns of Actively Exploited Palo Alto Firewall Flaw (CVE-2024-3393) CVE-2024-3393 vulnerability

CISA Warns of Actively Exploited Palo Alto Firewall Flaw (CVE-2024-3393)

Do Son December 30, 2024

Urgent warning: Exploited vulnerability in Palo Alto Networks PAN-OS firewall software (CVE-2024-3393) allows attackers to disable network security.

CISA Adds Three Actively Exploited Security Vulnerabilities to KEV Catalog, Urges Urgent Patching State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities