Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Includes advisories where the vendor will not fix the issue or the product is end of life, and vulnerabilities for which we have not recorded a fix. For the latter the vendor may already have one, so check the vendor's advisory.
On 2026-02-18, CISA added CVE-2021-22175 (GitLab GitLab) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-13, CISA added CVE-2026-1731 (BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-05, CISA added CVE-2026-24423 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-02-03, CISA added CVE-2021-39935 (GitLab Community and Enterprise Editions) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-29, CISA added CVE-2026-1281 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-27, CISA added CVE-2026-24858 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-26, CISA added CVE-2026-23760 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-26, CISA added CVE-2025-52691 (SmarterTools SmarterMail) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-23, CISA added CVE-2024-37079 (Broadcom VMware vCenter Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-01-21, CISA added CVE-2026-20045 (Cisco Unified Communications Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
According to Security NEXT, MongoDB's zlib implementation contains vulnerability CVE-2025-14847, which may allow external actors to read uninitialized server heap memory .
On 2025-12-19, CISA added CVE-2025-14733 (WatchGuard Firebox) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-17, CISA added CVE-2025-40602 (SonicWall SMA1000 appliance) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-17, CISA added CVE-2025-20393 (Cisco Multiple Products) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-12-16, CISA added CVE-2025-59718 (Fortinet Multiple Products) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-12-05, CISA added CVE-2025-55182 (Meta React Server Components) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-11-18, CISA added CVE-2025-58034 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-11-14, CISA added CVE-2025-64446 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-30, CISA added CVE-2025-41244 (Broadcom VMware Aria Operations and VMware Tools) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-10-20, CISA added CVE-2025-61884 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .