Skip to content

Decipher

CVEs

Every vulnerability Decipher has covered, with its severity, whether CISA says it’s being exploited, and our latest story on it.

116
CVEs
83
on CISA KEV
56
critical
  1. 9.3CVE-2026-125883N-able · N-central—Another N-able Vulnerability EmergesNOV 121
  2. 8.7CVE-2026-125878N-able · N-central—Another N-able Vulnerability EmergesNOV 121
  3. 9.8CVE-2026-90436Apache · Axis 1.x (EOL)—Another N-able Vulnerability EmergesNOV 121
  4. 10.0CVE-2026-102255SonicWall · SMA1000—SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  5. 7.8CVE-2026-83549SonicWall · SMA1000 AppliancesKEV · SEP 2SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  6. 10.0CVE-2026-83548SonicWall · SMA1000 AppliancesKEV · SEP 2SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  7. 7.5CVE-2026-19868SonicWall · SonicOS SSLVPNKEV · NOV 6SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)NOV 71
  8. 8.1CVE-2026-123158OpenBSD · OpenSSHKEV · NOV 9Attacks Target New OpenSSH FlawNOV 61
  9. 8.7CVE-2025-41451Danfoss · AK-SM8xxA Series—Second Wave of Suspected Cyberattacks Hits European Supermarket FreezersNOV 21
  10. 8.2CVE-2025-41450Danfoss · AK-SM 8xxA Series—Second Wave of Suspected Cyberattacks Hits European Supermarket FreezersNOV 21
  11. 9.8CVE-2026-98432Linux—Critical Linux Kernel Bug PatchedNOV 21
  12. 8.1CVE-2026-109619PHPKEV · OCT 26No Major PHP2Shell Exploits Seen YetOCT 272
  13. 9.8CVE-2026-109618PHPKEV · OCT 26No Major PHP2Shell Exploits Seen YetOCT 272
  14. 8.6CVE-2026-104935Ivanti · Connect SecureKEV · OCT 13Ivanti Connect Secure Zero-Day Exploited in AttacksOCT 131
  15. 7.5CVE-2026-88779Citrix · NetScalerKEV · OCT 4New Citrix NetScaler Issue EmergesOCT 31
  16. 8.1CVE-2026-88772Citrix · NetScalerKEV · SEP 27New Citrix NetScaler Issue EmergesOCT 32
  17. 9.8CVE-2026-88771Citrix · NetScalerKEV · SEP 27New Citrix NetScaler Issue EmergesOCT 32
  18. 9.8CVE-2026-76504Cisco · Catalyst SD-WAN ManagerKEV · SEP 30Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager FlawOCT 11
  19. 9.3CVE-2026-94127F5 · BIG-IP APMKEV · SEP 22F5 CVE-2026-94127 Targeted in Active AttacksSEP 241
  20. 9.8CVE-2026-86060MikroTik · RouterOSKEV · SEP 10MicroTik Routers Under Attack in New CampaignSEP 61
  21. 8.1CVE-2026-67276MikroTik · RouterOS—MicroTik Routers Under Attack in New CampaignSEP 61
  22. 9.8CVE-2026-82329JFrog · ArtifactoryKEV · SEP 2Critical Artifactory Bug Under AttackSEP 11
  23. 5.3CVE-2026-66384JFrog · ArtifactoryKEV · AUG 27Critical Artifactory Bug Under AttackSEP 11
  24. 8.1CVE-2026-63520Microsoft · SharePoint—Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520AUG 251
  25. 9.1CVE-2026-55040Microsoft · SharePointKEV · AUG 18Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520AUG 251
  26. 9.3CVE-2026-64849MLflowKEV · AUG 19MLflow Bug Actively Exploited to Steal CredentialsAUG 181
  27. 8.1CVE-2026-18577N-able · N-centralKEV · AUG 3Exploits Target N-able CVE-2026-18577 FlawAUG 31
  28. 7.4CVE-2026-18556N-able · N-centralKEV · AUG 4Exploits Target N-able CVE-2026-18577 FlawAUG 31
  29. 9.8CVE-2026-42208BerriAI · LiteLLMKEV · MAY 8Your LLM Is Showing: New Data Finds Sharp Rise in Exposed AI ToolsJUL 231
  30. 9.8CVE-2026-50522Microsoft · SharePointKEV · JUL 22Critical SharePoint Bug Under AttackJUL 211
  31. 8.5CVE-2026-12958Amazon Web Services · Language Servers for AWS—Researchers Find New GhostApproval Bug in Many AI Coding AssistantsJUL 81
  32. 9.8CVE-2026-35273Oracle · PeopleSoft Enterprise PeopleToolsKEV · JUN 12Oracle Zero-Day Linked to Latest ShinyHunters AttacksJUN 111
  33. 7.5CVE-2025-61884Oracle · E-Business SuiteKEV · Oct 20, 2025Oracle Zero-Day Linked to Latest ShinyHunters AttacksJUN 112
  34. 7.4CVE-2026-50752Check Point—Check Point VPN Flaw Targeted by Ransomware ActorsJUN 81
  35. 9.3CVE-2026-50751Check Point · Security GatewayKEV · JUN 8Check Point VPN Flaw Targeted by Ransomware ActorsJUN 81
  36. 9.1CVE-2026-7821Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  37. 7.2CVE-2026-6973Ivanti · Endpoint Manager Mobile (EPMM)KEV · MAY 7Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  38. 9.8CVE-2026-5788Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  39. 9.1CVE-2026-5787Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  40. 8.8CVE-2026-5786Ivanti · Endpoint Manager Mobile—Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 71
  41. 9.8CVE-2026-1340Ivanti · Endpoint Manager Mobile (EPMM)KEV · APR 8Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 73
  42. 9.8CVE-2026-1281Ivanti · Endpoint Manager Mobile (EPMM)KEV · JAN 29Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973MAY 73
  43. 7.8CVE-2026-31431Linux · KernelKEV · MAY 1New Dirty Frag Linux Bug EmergesMAY 72
  44. 9.8CVE-2026-0300Palo Alto Networks · PAN-OSKEV · MAY 6Palo Alto CVE-2026-0300 Actively ExploitedMAY 61
  45. 9.8CVE-2026-28780Apache · HTTP Server—Serious Apache Web Server Bug PatchedMAY 51
  46. 8.8CVE-2026-24072Apache · HTTP Server—Serious Apache Web Server Bug PatchedMAY 51
  47. 8.8CVE-2026-23918Apache · HTTP Server—Serious Apache Web Server Bug PatchedMAY 51
  48. 9.3CVE-2026-41940WebPros · cPanel & WHM and WP2 (WordPress Squared)KEV · APR 30Researchers Warn of Critical cPanel Flaw CVE-2026-41940APR 291
  49. 4.3CVE-2026-32202Microsoft · WindowsKEV · APR 28Windows CVE-2026-32202 Exploited in the WildAPR 291
  50. 8.8CVE-2026-21513Microsoft · WindowsKEV · FEB 10Windows CVE-2026-32202 Exploited in the WildAPR 292
  51. 8.8CVE-2026-21510Microsoft · WindowsKEV · FEB 10Windows CVE-2026-32202 Exploited in the WildAPR 292
  52. 8.6CVE-2025-20362Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEV · Sep 25, 2025Firestarter Malware Sparks Updated CISA Emergency DirectiveAPR 262
  53. 9.9CVE-2025-20333Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseKEV · Sep 25, 2025Firestarter Malware Sparks Updated CISA Emergency DirectiveAPR 262
  54. 7.5CVE-2026-20133Cisco · Catalyst SD-WAN ManagerKEV · APR 20Cisco CVE-2026-20133 Targeted in Active AttacksAPR 221
  55. 7.5CVE-2026-20128Cisco · Catalyst SD-WAN ManagerKEV · APR 20Cisco CVE-2026-20133 Targeted in Active AttacksAPR 221
  56. 10.0CVE-2026-20127Cisco · Catalyst SD-WAN Controller and ManagerKEV · FEB 25Cisco CVE-2026-20133 Targeted in Active AttacksAPR 222
  57. 5.4CVE-2026-20122Cisco · Catalyst SD-WAN MangerKEV · APR 20Cisco CVE-2026-20133 Targeted in Active AttacksAPR 221
  58. 9.8CVE-2021-22681Rockwell · Multiple ProductsKEV · MAR 5US Gov: Iran-Linked Actors Targeting Critical Infrastructure PLCsAPR 71
  59. 9.8CVE-2026-35616Fortinet · FortiClient EMSKEV · APR 6Fortinet CVE-2026-35616 Actively ExploitedAPR 41
  60. 7.8CVE-2022-20775Cisco · SD-WANKEV · FEB 25Cisco, NSA Warn of Attacks Targeting Catalyst SD-WAN Zero DayFEB 261
  61. 10.0CVE-2026-22769Dell · RecoverPoint for Virtual Machines (RP4VMs)KEV · FEB 18Chinese Actors Exploited Dell RecoverPoint for VMs Flaw Since 2024FEB 181
  62. 7.8CVE-2026-20700Apple · Multiple ProductsKEV · FEB 12Apple Patches iOS Zero Day CVE-2026-20700FEB 121
  63. 7.8CVE-2026-21533Microsoft · WindowsKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  64. 6.2CVE-2026-21525Microsoft · WindowsKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  65. 7.8CVE-2026-21519Microsoft · WindowsKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  66. 7.8CVE-2026-21514Microsoft · OfficeKEV · FEB 10Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 111
  67. 7.8CVE-2026-21509Microsoft · OfficeKEV · JAN 26Microsoft Fixes Six Exploited Bugs in February Patch Tuesday UpdatesFEB 112
  68. 9.8CVE-2026-24858Fortinet · Multiple ProductsKEV · JAN 27Fortinet Warns of Critical Flaw After FortiCloud SSO ExploitationJAN 281
  69. 9.8CVE-2025-59719Fortinet · FortiWeb—Fortinet Warns of Critical Flaw After FortiCloud SSO ExploitationJAN 282
  70. 9.8CVE-2025-59718Fortinet · Multiple ProductsKEV · Dec 16, 2025Fortinet Warns of Critical Flaw After FortiCloud SSO ExploitationJAN 282
  71. 8.8CVE-2025-8088RARLAB · WinRARKEV · Aug 12, 2025Cybercrime and APT Groups Exploiting WinRAR BugJAN 271
  72. 7.8CVE-2023-38831RARLAB · WinRARKEV · Aug 24, 2023Cybercrime and APT Groups Exploiting WinRAR BugJAN 271
  73. 9.8CVE-2026-20045Cisco · Unified Communications ManagerKEV · JAN 21Cisco Fixes Unified Communications RCE Flaw Under AttackJAN 221
  74. 10.0CVE-2025-55182Meta · React Server ComponentsKEV · Dec 5, 2025React2Shell Attacks Continue to BuildJAN 73
  75. 9.8CVE-2025-13915IBM · API Connect—IBM Warns of Critical Auth Bypass Bug in API ConnectJAN 61
  76. 8.7CVE-2025-14847MongoDB · and MongoDB ServerKEV · Dec 29, 2025Serious MongoDB Flaw CVE-2025-14847 Under ExploitationDec 29, 20251
  77. 10.0CVE-2025-20393Cisco · Multiple ProductsKEV · Dec 17, 2025Threat Actors Target Unpatched Cisco AsyncOS Zero-DayDec 17, 20251
  78. 7.5CVE-2023-27532Veeam · Backup & ReplicationKEV · Aug 22, 2023Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  79. 9.8CVE-2023-22518Atlassian · Confluence Data Center and ServerKEV · Nov 7, 2023Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  80. 9.8CVE-2022-26318WatchGuard · Firebox and XTM AppliancesKEV · Mar 25, 2022Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  81. 9.8CVE-2021-26084Atlassian · Confluence Server and Data CenterKEV · Nov 3, 2021Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksDec 16, 20251
  82. —CVE-2025-66478Vendor not listed—Critical Flaw CVE-2025-55182 Affects React Server ComponentsDec 3, 20251
  83. 9.8CVE-2025-64446Fortinet · FortiWebKEV · Nov 14, 2025Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  84. 7.2CVE-2025-58034Fortinet · FortiWebKEV · Nov 18, 2025Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  85. 8.1CVE-2025-52970Fortinet · FortiWeb—Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  86. 9.8CVE-2025-25257Fortinet · FortiWebKEV · Jul 18, 2025Fortinet CVE-2025-64446 Under Active AttackNov 17, 20251
  87. 10.0CVE-2025-20337Cisco · Identity Services EngineKEV · Jul 28, 2025APT Targets Cisco and Citrix Zero DaysNov 12, 20251
  88. 7.5CVE-2025-5777Citrix · NetScaler ADC and GatewayKEV · Jul 10, 2025APT Targets Cisco and Citrix Zero DaysNov 12, 20251
  89. 8.8CVE-2025-62222Microsoft · Visual Studio Code CoPilot Chat Extension—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  90. 7.0CVE-2025-62215Microsoft · WindowsKEV · Nov 12, 2025Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  91. 6.7CVE-2025-62214Microsoft · Visual Studio 2022—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  92. 7.8CVE-2025-62199Microsoft—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  93. 7.0CVE-2025-60716Microsoft · Windows—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  94. 8.1CVE-2025-30398Microsoft—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  95. 9.8CVE-2025-6222WP Swings · WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet—Microsoft Warns of Exploited Windows Kernel Zero-DayNov 11, 20251
  96. 9.8CVE-2025-59287Microsoft · WindowsKEV · Oct 24, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  97. 9.8CVE-2025-59246Microsoft · Entra—Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  98. 7.8CVE-2025-59230Microsoft · WindowsKEV · Oct 14, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  99. 9.9CVE-2025-49708Microsoft · Windows—Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  100. 4.6CVE-2025-47827IGEL · OSKEV · Oct 14, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  101. 7.8CVE-2025-24990Microsoft · WindowsKEV · Oct 14, 2025Microsoft Fixes Actively Exploited Flaws in Patch Tuesday ReleaseOct 14, 20251
  102. 9.8CVE-2025-61882Oracle · E-Business SuiteKEV · Oct 6, 2025Oracle Warns of E-Business Suite BugOct 12, 20253
  103. 9.8CVE-2025-10035Fortra · GoAnywhere MFTKEV · Sep 29, 2025Attackers Exploit Critical GoAnywhere Bug to Spread Medusa RansomwareOct 7, 20251
  104. 7.8CVE-2025-41244Broadcom · VMware Aria Operations and VMware ToolsKEV · Oct 30, 2025VMware Patches Bug Exploited By State ActorsSep 30, 20251
  105. 9.8CVE-2024-40766SonicWall · SonicOSKEV · Sep 9, 2024Akira Ransomware Actors Target SonicWall SSLVPNSep 29, 20251
  106. 9.1CVE-2023-20269Cisco · Adaptive Security Appliance and Firepower Threat DefenseKEV · Sep 13, 2023Akira Ransomware Actors Target SonicWall SSLVPNSep 29, 20251
  107. 7.5CVE-2020-3259Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEV · Feb 15, 2024Akira Ransomware Actors Target SonicWall SSLVPNSep 29, 20251
  108. 10.0CVE-2024-3400Palo Alto Networks · PAN-OSKEV · Apr 12, 2024US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  109. 7.2CVE-2023-20273Cisco · IOS XE Web UIKEV · Oct 23, 2023US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  110. 10.0CVE-2023-20198Cisco · IOS XE Web UIKEV · Oct 16, 2023US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  111. 9.8CVE-2018-0171Cisco · IOS and IOS XEKEV · Nov 3, 2021US Gov Links Private Chinese Firms to Salt Typhoon HacksAug 27, 20251
  112. 8.7CVE-2025-8424Citrix—Citrix CVE-2025-7775 Under Active AttackAug 27, 20251
  113. 9.8CVE-2025-7775Citrix · NetScalerKEV · Aug 26, 2025Citrix CVE-2025-7775 Under Active AttackAug 27, 20251
  114. 8.0CVE-2025-53786Microsoft · Exchange Server—CISA, Microsoft Warn of Exchange CVE-2025-53786 RiskAug 8, 20251
  115. 6.5CVE-2025-53771Microsoft · SharePoint—Chinese Attackers Target SharePoint CVE-2025-53770Jul 24, 20251
  116. 9.8CVE-2025-53770Microsoft · SharePointKEV · Jul 20, 2025Chinese Attackers Target SharePoint CVE-2025-53770Jul 24, 20251

Newsletter

The Decipher Brief

Every week: the stories, the episode, the clips.

Newsletter sign-up is coming soon.