Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Includes advisories where the vendor will not fix the issue or the product is end of life, and vulnerabilities for which we have not recorded a fix. For the latter the vendor may already have one, so check the vendor's advisory.
On 2026-04-22, CISA added CVE-2026-33825 (Microsoft Defender) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-20, CISA added CVE-2026-20133 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2026-20122 (Cisco Catalyst SD-WAN Manger) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2026-20128 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-20, CISA added CVE-2024-27199 (JetBrains TeamCity) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2023-27351 (PaperCut NG/MF) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-14, CISA added CVE-2026-32201 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-13, CISA added CVE-2026-21643 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-13, CISA added CVE-2025-60710 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-13, CISA added CVE-2023-21529 (Microsoft Exchange Server) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-08, CISA added CVE-2026-1340 (Ivanti Endpoint Manager Mobile (EPMM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-06, CISA added CVE-2026-35616 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-30, CISA added CVE-2026-3055 (Citrix NetScaler) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-19, CISA added CVE-2026-20131 (Cisco Secure Firewall Management Center (FMC)) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-03-18, CISA added CVE-2026-20963 (Microsoft SharePoint) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-09, CISA added CVE-2026-1603 (Ivanti Endpoint Manager (EPM)) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-03-09, CISA added CVE-2025-26399 (SolarWinds Web Help Desk) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-03-03, CISA added CVE-2026-22719 (Broadcom VMware Aria Operations) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-02-25, CISA added CVE-2026-20127 (Cisco Catalyst SD-WAN Controller and Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-02-25, CISA added CVE-2022-20775 (Cisco SD-WAN) to its Known Exploited Vulnerabilities (KEV) catalog .