Skip to content

Decipher

CVEs

Every vulnerability Decipher has covered, with its severity, whether CISA says it’s being exploited, and our latest story on it.

113
CVEs
82
on CISA KEV
54
critical
  1. 10.0CVE-2026-102255SonicWall · SMA1000—SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  2. 7.8CVE-2026-83549SonicWall · SMA1000 AppliancesKEV · SEP 2SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  3. 10.0CVE-2026-83548SonicWall · SMA1000 AppliancesKEV · SEP 2SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  4. 7.5CVE-2026-19868SonicWall · SonicOS SSLVPNKEV · NOV 6SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  5. 8.1CVE-2026-123158OpenBSD · OpenSSH—Attacks Target New OpenSSH FlawNOV 61
  6. 8.7CVE-2025-41451Danfoss · AK-SM8xxA Series—Second Wave of Suspected Cyberattacks Hits European Supermarket FreezersNOV 21
  7. 8.2CVE-2025-41450Danfoss · AK-SM 8xxA Series—Second Wave of Suspected Cyberattacks Hits European Supermarket FreezersNOV 21
  8. 9.8CVE-2026-98432Linux—Critical Linux Kernel Bug PatchedNOV 21
  9. 8.1CVE-2026-109619PHPKEV · OCT 26No Major PHP2Shell Exploits Seen YetOCT 272
  10. 9.8CVE-2026-109618PHPKEV · OCT 26No Major PHP2Shell Exploits Seen YetOCT 272
  11. 8.6CVE-2026-104935Ivanti · Connect SecureKEV · OCT 13Ivanti Connect Secure Zero-Day Exploited in AttacksOCT 131
  12. 7.5CVE-2026-88779Citrix · NetScalerKEV · OCT 4New Citrix NetScaler Issue EmergesOCT 31
  13. 8.1CVE-2026-88772Citrix · NetScalerKEV · SEP 27New Citrix NetScaler Issue EmergesOCT 32
  14. 9.8CVE-2026-88771Citrix · NetScalerKEV · SEP 27New Citrix NetScaler Issue EmergesOCT 32
  15. 9.8CVE-2026-76504Cisco · Catalyst SD-WAN ManagerKEV · SEP 30Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager FlawOCT 11
  16. 9.3CVE-2026-94127F5 · BIG-IP APMKEV · SEP 22F5 CVE-2026-94127 Targeted in Active AttacksSEP 241
  17. 9.8CVE-2026-86060MikroTik · RouterOSKEV · SEP 10MicroTik Routers Under Attack in New CampaignSEP 61
  18. 8.1CVE-2026-67276MikroTik · RouterOS—MicroTik Routers Under Attack in New CampaignSEP 61
  19. 9.8CVE-2026-82329JFrog · ArtifactoryKEV · SEP 2Critical Artifactory Bug Under AttackSEP 11
  20. 5.3CVE-2026-66384JFrog · ArtifactoryKEV · AUG 27Critical Artifactory Bug Under AttackSEP 11
  21. 8.1CVE-2026-63520Microsoft · SharePoint—Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520AUG 251
  22. 9.1CVE-2026-55040Microsoft · SharePointKEV · AUG 18Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520AUG 251
  23. 9.3CVE-2026-64849MLflowKEV · AUG 19MLflow Bug Actively Exploited to Steal CredentialsAUG 181
  24. 8.1CVE-2026-18577N-able · N-centralKEV · AUG 3Exploits Target N-able CVE-2026-18577 FlawAUG 31
  25. 7.4CVE-2026-18556N-able · N-centralKEV · AUG 4Exploits Target N-able CVE-2026-18577 FlawAUG 31
  26. 9.8CVE-2026-42208BerriAI · LiteLLMKEV · MAY 8Your LLM Is Showing: New Data Finds Sharp Rise in Exposed AI ToolsJUL 231
  27. 9.8CVE-2026-50522Microsoft · SharePointKEV · JUL 22Critical SharePoint Bug Under AttackJUL 211
  28. 8.5CVE-2026-12958Amazon Web Services · Language Servers for AWS—Researchers Find New GhostApproval Bug in Many AI Coding AssistantsJUL 81
  29. 9.8CVE-2026-35273Oracle · PeopleSoft Enterprise PeopleToolsKEV · JUN 12Oracle Zero-Day Linked to Latest ShinyHunters AttacksJUN 111
  30. 7.5CVE-2025-61884Oracle · E-Business SuiteKEV · Oct 20, 2025Oracle Zero-Day Linked to Latest ShinyHunters AttacksJUN 112
  31. 7.4CVE-2026-50752Check Point—Check Point VPN Flaw Targeted by Ransomware ActorsJUN 81
  32. 9.3CVE-2026-50751Check Point · Security GatewayKEV · JUN 8Check Point VPN Flaw Targeted by Ransomware ActorsJUN 81
  33. 9.1CVE-2026-7821Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  34. 7.2CVE-2026-6973Ivanti · Endpoint Manager Mobile (EPMM)KEV · MAY 7Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  35. 9.8CVE-2026-5788Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  36. 9.1CVE-2026-5787Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  37. 8.8CVE-2026-5786Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  38. 9.8CVE-2026-1340Ivanti · Endpoint Manager Mobile (EPMM)KEV · APR 8Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 73
  39. 9.8CVE-2026-1281Ivanti · Endpoint Manager Mobile (EPMM)KEV · JAN 29Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 73
  40. 7.8CVE-2026-31431Linux · KernelKEV · MAY 1New Dirty Frag Linux Bug EmergesMAY 72
  41. 9.8CVE-2026-0300Palo Alto Networks · PAN-OSKEV · MAY 6Palo Alto CVE-2026-0300 Actively ExploitedMAY 61
  42. 9.8CVE-2026-28780Apache · HTTP Server—Serious Apache Web Server Bug PatchedMAY 51
  43. 8.8CVE-2026-24072Apache · HTTP Server—Serious Apache Web Server Bug PatchedMAY 51
  44. 8.8CVE-2026-23918Apache · HTTP Server—Serious Apache Web Server Bug PatchedMAY 51
  45. 9.3CVE-2026-41940WebPros · cPanel & WHM and WP2 (WordPress Squared)KEV · APR 30Researchers Warn of Critical cPanel Flaw CVE-2026-41940APR 291
  46. 4.3CVE-2026-32202Microsoft · WindowsKEV · APR 28Windows CVE-2026-32202 Exploited in the WildAPR 291
  47. 8.8CVE-2026-21513Microsoft · WindowsKEV · FEB 10Windows CVE-2026-32202 Exploited in the WildAPR 292
  48. 8.8CVE-2026-21510Microsoft · WindowsKEV · FEB 10Windows CVE-2026-32202 Exploited in the WildAPR 292
  49. 8.6CVE-2025-20362Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEV · Sep 25, 2025Firestarter Malware Sparks Updated CISA Emergency DirectiveAPR 262
  50. 9.9CVE-2025-20333Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEV · Sep 25, 2025Firestarter Malware Sparks Updated CISA Emergency DirectiveAPR 262
  51. 7.5CVE-2026-20133Cisco · Catalyst SD-WAN ManagerKEV · APR 20Cisco CVE-2026-20133 Targeted in Active AttacksAPR 221
  52. 7.5CVE-2026-20128Cisco · Catalyst SD-WAN ManagerKEV · APR 20Cisco CVE-2026-20133 Targeted in Active AttacksAPR 221
  53. 10.0CVE-2026-20127Cisco · Catalyst SD-WAN Controller and ManagerKEV · FEB 25Cisco CVE-2026-20133 Targeted in Active AttacksAPR 222
  54. 5.4CVE-2026-20122Cisco · Catalyst SD-WAN MangerKEV · APR 20Cisco CVE-2026-20133 Targeted in Active AttacksAPR 221
  55. 9.8CVE-2021-22681Rockwell · Multiple ProductsKEV · MAR 5US Gov: Iran-Linked Actors Targeting Critical Infrastructure PLCsAPR 71
  56. 9.8CVE-2026-35616Fortinet · FortiClient EMSKEV · APR 6Fortinet CVE-2026-35616 Actively ExploitedAPR 41
  57. 7.8CVE-2022-20775Cisco · SD-WANKEV · FEB 25Cisco, NSA Warn of Attacks Targeting Catalyst SD-WAN Zero DayFEB 261
  58. 10.0CVE-2026-22769Dell · RecoverPoint for Virtual Machines (RP4VMs)KEV · FEB 18Chinese Actors Exploited Dell RecoverPoint for VMs Flaw Since 2024FEB 181
  59. 7.8CVE-2026-20700Apple · Multiple ProductsKEV · FEB 12Apple Patches iOS Zero Day CVE-2026-20700FEB 121
  60. 7.8CVE-2026-21533Microsoft · WindowsKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  61. 6.2CVE-2026-21525Microsoft · WindowsKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  62. 7.8CVE-2026-21519Microsoft · WindowsKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  63. 7.8CVE-2026-21514Microsoft · OfficeKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  64. 7.8CVE-2026-21509Microsoft · OfficeKEV · JAN 26Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 112
  65. 9.8CVE-2026-24858Fortinet · Multiple ProductsKEV · JAN 27Fortinet Warns of Critical Flaw After FortiCloud SSO ExploitationJAN 281
  66. 9.8CVE-2025-59719Fortinet · FortiWeb—Fortinet Warns of Critical Flaw After FortiCloud SSO ExploitationJAN 282
  67. 9.8CVE-2025-59718Fortinet · Multiple ProductsKEV · Dec 16, 2025Fortinet Warns of Critical Flaw After FortiCloud SSO ExploitationJAN 282
  68. 8.8CVE-2025-8088RARLAB · WinRARKEV · Aug 12, 2025Cybercrime and APT Groups Exploiting WinRAR BugJAN 271
  69. 7.8CVE-2023-38831RARLAB · WinRARKEV · Aug 24, 2023Cybercrime and APT Groups Exploiting WinRAR BugJAN 271
  70. 9.8CVE-2026-20045Cisco · Unified Communications ManagerKEV · JAN 21Cisco Fixes Unified Communications RCE Flaw Under AttackJAN 221
  71. 10.0CVE-2025-55182Meta · React Server ComponentsKEV · Dec 5, 2025React2Shell Attacks Continue to BuildJAN 73
  72. 9.8CVE-2025-13915IBM · API Connect—IBM Warns of Critical Auth Bypass Bug in API ConnectJAN 61
  73. 8.7CVE-2025-14847MongoDB · and MongoDB ServerKEV · Dec 29, 2025Serious MongoDB Flaw CVE-2025-14847 Under ExploitationDec 29, 20251
  74. 10.0CVE-2025-20393Cisco · Multiple ProductsKEV · Dec 17, 2025Threat Actors Target Unpatched Cisco AsyncOS Zero-DayDec 17, 20251
  75. 7.5CVE-2023-27532Veeam · Backup & ReplicationKEV · Aug 22, 2023Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  76. 9.8CVE-2023-22518Atlassian · Confluence Data Center and ServerKEV · Nov 7, 2023Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  77. 9.8CVE-2022-26318WatchGuard · Firebox and XTM AppliancesKEV · Mar 25, 2022Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  78. 9.8CVE-2021-26084Atlassian · Confluence Server and Data CenterKEV · Nov 3, 2021Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  79. —CVE-2025-66478Vendor not listed—Critical Flaw CVE-2025-55182 Affects React Server ComponentsDec 3, 20251
  80. 9.8CVE-2025-64446Fortinet · FortiWebKEV · Nov 14, 2025Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  81. 7.2CVE-2025-58034Fortinet · FortiWebKEV · Nov 18, 2025Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  82. 8.1CVE-2025-52970Fortinet · FortiWeb—Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  83. 9.8CVE-2025-25257Fortinet · FortiWebKEV · Jul 18, 2025Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  84. 10.0CVE-2025-20337Cisco · Identity Services EngineKEV · Jul 28, 2025APT Targets Cisco and Citrix Zero DaysNov 12, 20251
  85. 7.5CVE-2025-5777Citrix · NetScaler ADC and GatewayKEV · Jul 10, 2025APT Targets Cisco and Citrix Zero DaysNov 12, 20251
  86. 8.8CVE-2025-62222Microsoft · Visual Studio Code CoPilot Chat Extension—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  87. 7.0CVE-2025-62215Microsoft · WindowsKEV · Nov 12, 2025Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  88. 6.7CVE-2025-62214Microsoft · Visual Studio 2022—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  89. 7.8CVE-2025-62199Microsoft—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  90. 7.0CVE-2025-60716Microsoft · Windows—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  91. 8.1CVE-2025-30398Microsoft—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  92. 9.8CVE-2025-6222WP Swings · WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  93. 9.8CVE-2025-59287Microsoft · WindowsKEV · Oct 24, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  94. 9.8CVE-2025-59246Microsoft · Entra—Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  95. 7.8CVE-2025-59230Microsoft · WindowsKEV · Oct 14, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  96. 9.9CVE-2025-49708Microsoft · Windows—Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  97. 4.6CVE-2025-47827IGEL · OSKEV · Oct 14, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  98. 7.8CVE-2025-24990Microsoft · WindowsKEV · Oct 14, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  99. 9.8CVE-2025-61882Oracle · E-Business SuiteKEV · Oct 6, 2025Oracle Warns of E-Business Suite BugOct 12, 20253
  100. 9.8CVE-2025-10035Fortra · GoAnywhere MFTKEV · Sep 29, 2025Attackers Exploit Critical GoAnywhere Bug to Spread Medusa RansomwareOct 7, 20251
  101. 7.8CVE-2025-41244Broadcom · VMware Aria Operations and VMware ToolsKEV · Oct 30, 2025VMware Patches Bug Exploited By State ActorsSep 30, 20251
  102. 9.8CVE-2024-40766SonicWall · SonicOSKEV · Sep 9, 2024Akira Ransomware Actors Target SonicWall SSLVPNSep 29, 20251
  103. 9.1CVE-2023-20269Cisco · Adaptive Security Appliance and Firepower Threat DefenseKEV · Sep 13, 2023Akira Ransomware Actors Target SonicWall SSLVPNSep 29, 20251
  104. 7.5CVE-2020-3259Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEV · Feb 15, 2024Akira Ransomware Actors Target SonicWall SSLVPNSep 29, 20251
  105. 10.0CVE-2024-3400Palo Alto Networks · PAN-OSKEV · Apr 12, 2024US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  106. 7.2CVE-2023-20273Cisco · IOS XE Web UIKEV · Oct 23, 2023US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  107. 10.0CVE-2023-20198Cisco · IOS XE Web UIKEV · Oct 16, 2023US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  108. 9.8CVE-2018-0171Cisco · IOS and IOS XEKEV · Nov 3, 2021US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  109. 8.7CVE-2025-8424Citrix—Citrix CVE-2025-7775 Under Active AttackAug 27, 20251
  110. 9.8CVE-2025-7775Citrix · NetScalerKEV · Aug 26, 2025Citrix CVE-2025-7775 Under Active AttackAug 27, 20251
  111. 8.0CVE-2025-53786Microsoft · Exchange Server—CISA, Microsoft Warn of Exchange CVE-2025-53786 RiskAug 8, 20251
  112. 6.5CVE-2025-53771Microsoft · SharePoint—Chinese Attackers Target SharePoint CVE-2025-53770Jul 24, 20251
  113. 9.8CVE-2025-53770Microsoft · SharePointKEV · Jul 20, 2025Chinese Attackers Target SharePoint CVE-2025-53770Jul 24, 20251

Newsletter

The Decipher Brief

Every week: the stories, the episode, the clips.

Newsletter sign-up is coming soon.