Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Includes advisories where the vendor will not fix the issue or the product is end of life, and vulnerabilities for which we have not recorded a fix. For the latter the vendor may already have one, so check the vendor's advisory.
On 2026-04-13, CISA added CVE-2023-21529 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-08, CISA added CVE-2026-1340 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-06, CISA added CVE-2026-35616 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-30, CISA added CVE-2026-3055 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-19, CISA added CVE-2026-20131 (Cisco Secure Firewall Management Center (FMC)) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-03-18, CISA added CVE-2026-20963 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-09, CISA added CVE-2026-1603 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-09, CISA added CVE-2025-26399 (SolarWinds Web Help Desk) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-03-03, CISA added CVE-2026-22719 (Broadcom VMware Aria Operations) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-02-25, CISA added CVE-2026-20127 (Cisco Catalyst SD-WAN Controller and Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-02-25, CISA added CVE-2022-20775 (Cisco SD-WAN) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-18, CISA added CVE-2021-22175 (GitLab GitLab) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-13, CISA added CVE-2026-1731 (BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-05, CISA added CVE-2026-24423 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-03, CISA added CVE-2021-39935 (GitLab Community and Enterprise Editions) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-29, CISA added CVE-2026-1281 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-27, CISA added CVE-2026-24858 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-26, CISA added CVE-2026-23760 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-26, CISA added CVE-2025-52691 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-23, CISA added CVE-2024-37079 (Broadcom VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .