Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2026-09-14, CISA added CVE-2026-76461 (Cisco Secure Email Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-85706 (GitLab Community Edition and Enterprise Edition) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-11, CISA added CVE-2026-84869 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-09, CISA added CVE-2026-19490 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-09-09, CISA added CVE-2026-20079 (Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-09-09, CISA added CVE-2025-25249 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-02, CISA added CVE-2026-83549 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-09-02, CISA added CVE-2026-83548 (SonicWall SMA1000 Appliances) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-26, CISA added CVE-2026-8452 (Citrix NetScaler ADC and NetScaler Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
Cisco disclosed on August 19, 2026 that the Open Client Interface (OCI) XML parser in BroadWorks resolves external entities by default, letting an unauthenticated remote attacker send crafted XML to the OCI-P service and read sensitive files with the privileges of the BroadWorks user .
On 2026-08-18, CISA added CVE-2026-59310 (Broadcom VMware vCenter) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-55040 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-18, CISA added CVE-2026-33824 (Microsoft Internet Key Exchange (IKE) Service Extensions) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-11, CISA added CVE-2026-20349 (Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)) to its Known Exploited Vulnerabilities (KEV) catalog .
Godai Development Co.
On 2026-08-07, CISA added CVE-2026-8037 (Progress LoadMaster) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-08-05, CISA added CVE-2026-63077 (JetBrains TeamCity) to its Known Exploited Vulnerabilities (KEV) catalog .
GPUStack before 2.
On 2026-07-29, CISA added CVE-2026-20316 (Cisco Secure Firewall Management Center (FMC)) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-07-27, CISA added CVE-2025-68686 (Fortinet FortiOS) to its Known Exploited Vulnerabilities (KEV) catalog .