Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 13:55:58 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
D-Link Routers Buffer Overflow Vulnerability
D-Link — Routers
D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product u…
CVE-2025-55182 · KEV 2025-12-05Meta React Server Components Remote Code Execution Vulnerability
Meta — React Server Components
Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2…
Ransomware use reportedCVE-2021-26828 · KEV 2025-12-03OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
OpenPLC — ScadaBR
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
CVE-2025-48633 · KEV 2025-12-02Android Framework Information Disclosure Vulnerability
Android — Framework
Android Framework contains an unspecified vulnerability that allows for information disclosure.
CVE-2025-48572 · KEV 2025-12-02Android Framework Privilege Escalation Vulnerability
Android — Framework
Android Framework contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-26829 · KEV 2025-11-28OpenPLC ScadaBR Cross-site Scripting Vulnerability
OpenPLC — ScadaBR
OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.
CVE-2025-61757 · KEV 2025-11-21Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
Oracle — Fusion Middleware
Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.
CVE-2025-13223 · KEV 2025-11-19Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.
CVE-2025-58034 · KEV 2025-11-18Fortinet FortiWeb OS Command Injection Vulnerability
Fortinet — FortiWeb
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
CVE-2025-64446 · KEV 2025-11-14Fortinet FortiWeb Path Traversal Vulnerability
Fortinet — FortiWeb
Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
CVE-2025-9242 · KEV 2025-11-12WatchGuard Firebox Out-of-Bounds Write Vulnerability
WatchGuard — Firebox
WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.
CVE-2025-62215 · KEV 2025-11-12Microsoft Windows Race Condition Vulnerability
Microsoft — Windows
Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level acc…
CVE-2025-12480 · KEV 2025-11-12Gladinet Triofox Improper Access Control Vulnerability
Gladinet — Triofox
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.
CVE-2025-21042 · KEV 2025-11-10Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung — Mobile Devices
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.
CVE-2025-48703 · KEV 2025-11-04CWP Control Web Panel OS Command Injection Vulnerability
CWP — Control Web Panel
CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A vali…
CVE-2025-11371 · KEV 2025-11-04Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
Gladinet — CentreStack and Triofox
Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.
CVE-2025-41244 · KEV 2025-10-30Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Broadcom — VMware Aria Operations and VMware Tools
Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria…
CVE-2025-24893 · KEV 2025-10-30XWiki Platform Eval Injection Vulnerability
XWiki — Platform
XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.
CVE-2025-6205 · KEV 2025-10-28Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
Dassault Systèmes — DELMIA Apriso
Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application.
CVE-2025-6204 · KEV 2025-10-28Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
Dassault Systèmes — DELMIA Apriso
Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.
CVE-2025-59287 · KEV 2025-10-24Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
Microsoft — Windows
Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution.
CVE-2025-54236 · KEV 2025-10-24Adobe Commerce and Magento Improper Input Validation Vulnerability
Adobe — Commerce and Magento
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.
CVE-2025-61932 · KEV 2025-10-22Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
Motex — LANSCOPE Endpoint Manager
Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.
CVE-2025-61884 · KEV 2025-10-20Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Oracle — E-Business Suite
Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.
Ransomware use reportedCVE-2025-33073 · KEV 2025-10-20Microsoft Windows SMB Client Improper Access Control Vulnerability
Microsoft — Windows
Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the att…
CVE-2025-2747 · KEV 2025-10-20Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
Kentico — Xperience CMS
Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.
CVE-2025-2746 · KEV 2025-10-20Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
Kentico — Xperience CMS
Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.
CVE-2022-48503 · KEV 2025-10-20Apple Multiple Products Unspecified Vulnerability
Apple — Multiple Products
Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service …
CVE-2025-54253 · KEV 2025-10-15Adobe Experience Manager Forms Code Execution Vulnerability
Adobe — Experience Manager (AEM) Forms
Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.
CVE-2025-59230 · KEV 2025-10-14Microsoft Windows Improper Access Control Vulnerability
Microsoft — Windows
Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.