Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Includes advisories where the vendor will not fix the issue or the product is end of life, and vulnerabilities for which we have not recorded a fix. For the latter the vendor may already have one, so check the vendor's advisory.
On 2025-10-06, CISA added CVE-2025-61882 (Oracle E-Business Suite) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-10-06, CISA added CVE-2021-43226 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-09-29, CISA added CVE-2025-20352 (Cisco IOS and IOS XE) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-09-29, CISA added CVE-2025-10035 (Fortra GoAnywhere MFT) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-09-25, CISA added CVE-2025-20362 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-09-25, CISA added CVE-2025-20333 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-08-26, CISA added CVE-2025-7775 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-08-25, CISA added CVE-2024-8069 (Citrix Session Recording) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-08-25, CISA added CVE-2024-8068 (Citrix Session Recording) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-08-12, CISA added CVE-2025-8088 (RARLAB WinRAR) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-28, CISA added CVE-2025-20337 (Cisco Identity Services Engine) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-28, CISA added CVE-2025-20281 (Cisco Identity Services Engine) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-22, CISA added CVE-2025-49706 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-22, CISA added CVE-2025-49704 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On July 20, 2025, CISA added CVE-2025-53770 ('ToolShell') in on-premises Microsoft SharePoint to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-07-18, CISA added CVE-2025-25257 (Fortinet FortiWeb) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2025-07-10, CISA added CVE-2025-5777 (Citrix NetScaler ADC and Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-06-30, CISA added CVE-2025-6543 (Citrix NetScaler ADC and Gateway) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-06-25, CISA added CVE-2019-6693 (Fortinet FortiOS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2025-06-02, CISA added CVE-2025-3935 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .