Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
On 2026-05-14, CISA added CVE-2026-20182 (Cisco Catalyst SD-WAN) to its Known Exploited Vulnerabilities (KEV) Catalog .
Škoda Germany said its security monitoring found unauthorized parties exploited a vulnerability in its online shop's standard software to temporarily access the shop system; the shop was taken offline, the flaw fixed and the data protection authority notified .
On 2026-05-07, CISA added CVE-2026-6973 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-05-06, CISA added CVE-2026-0300 (Palo Alto Networks PAN-OS) to its Known Exploited Vulnerabilities (KEV) catalog .
Instructure said the attacker used a Free-for-Teacher account to submit a support ticket with malicious code that triggered an XSS flaw, obtained an authorization token and gained elevated access in Canvas, taking usernames, email addresses, course names, enrollment information and messages .
On 2026-04-30, CISA added CVE-2026-41940 (WebPros cPanel & WHM and WP2 (WordPress Squared)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-28, CISA added CVE-2024-1708 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
The Japanese crowdfunding platform CAMPFIRE said on 24 April 2026 that personal data may have leaked from part of the systems that manage customer information, affecting 225,846 unique users, and that credit-card data is not included .
According to Asia Times Korea, Office Depot in South Korea announced on April 24, 2026 that hackers broke into the server of its corporate shopping mall, leaking some business customers' personal data .
ADT said its systems detected unauthorized access to a limited set of customer and prospective customer data on April 20, terminated the intrusion and launched a forensic investigation .
On 2026-04-24, CISA added CVE-2024-57728 (SimpleHelp SimpleHelp) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-24, CISA added CVE-2024-57726 (SimpleHelp SimpleHelp) to its Known Exploited Vulnerabilities (KEV) catalog .
2rinkan Yellow Hat confirmed on its website that its member server was accessed without authorization, and that an investigation found attackers had abused the app's API to obtain data on 3,179,454 points, mobile and app members .
China's National Information Security Vulnerability Sharing Platform (CNVD) warned that multiple AI agent skill packages carry serious risks and can be abused in mainstream agent systems such as OpenClaw to perform unauthorized actions .
On 2026-04-22, CISA added CVE-2026-33825 (Microsoft Defender) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-20, CISA added CVE-2026-20133 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2026-20122 (Cisco Catalyst SD-WAN Manger) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2026-20128 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-20, CISA added CVE-2024-27199 (JetBrains TeamCity) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2023-27351 (PaperCut NG/MF) to its Known Exploited Vulnerabilities (KEV) catalog .