Every Exploited Vulnerability, A to Z

All 1,769 vulnerabilities in the CISA Known Exploited Vulnerabilities catalogue, grouped by vendor. Each one has a page with our assessment, affected versions, the fix and what to do now.

CISA KEV catalogue version 2026.11.06. 361 entries are known to be used in ransomware. For the live feed, see Threat Watch.

#

7-Zip1

A

Accellion4
Acclaim Systems1
Acronis2
Adminer1
Adobe83
Advantive2
Ahsay2
Ajax.NET Professional1
Alcatel1
Amcrest1
AMI1
Android17
Apache41
Apple96
Aquasecurity1
Arcadyan1
Arcserve1
Arista4
Arm9
Array Networks 2
Artifex1
ASUS3
Atlassian14
Audinate1
Aviatrix2

B

Balbooa1
Barracuda Networks1
BerriAI3
BeyondTrust4
BQE1
Broadcom6

C

Cacti1
ChakraCore1
Check Point5
Checkbox1
Cisco102
Citrix27
Cleo2
Code Aurora1
Collabora1
Commvault2
ConnectWise4
Craft CMS4
Crestron1
CrushFTP3
CWP2
CyberPersons2

D

Daemon1
Dahua2
Dasan2
Dassault Systèmes3
DD-WRT1
Dell2
Delta Electronics1
Digiever1
Docker1
dotCMS1
DotNetNuke (DNN)3
DrayTek5
Drupal5

E

Edimax1
EG Secure Solutions1
Elastic3
Embedthis1
Erlang1
Exim5
EyesOfNetwork2

F

F58
FatPipe1
ForgeRock1
Fortinet32
Fortra4
FreeType1
Fuel CMS1
FXC1

G

GeoVision2
GIGABYTE4
Git1
Gitea1
GitLab6
Gladinet4
GNU5
Gogs1
Google76
Grafana Labs2
Grandstream1

H

Hewlett Packard (HP)2
Hewlett Packard Enterprise (HPE)1
Hikvision2
Hitachi Vantara2

I

IBM8
iCagenda1
IETF2
IGEL1
Ignite Realtime1
ImageMagick3
InduSoft1
Intel2
ISC1
Ivanti38

J

Jenkins6
JetBrains4
JFrog4
Joomla!1
Joomlack1
JoomShaper1
JQuery1
Juniper8
Justice AV Solutions1

K

Kaseya3
Kentico4
Kestra1
Kingsoft1
Kludex1
KNX Association1

L

Langflow5
Lantronix1
Laravel3
LG1
Libraesva1
Liferay1
Linux32
LiteSpeed2
Looking Glass1

M

Marimo1
McAfee1
MDaemon1
MediaTek1
Meta1
Meta Platforms3
Metabase2
Micro Focus2
Microsoft390
MikroTik5
MinIO2
Mirasvit1
Mitel7
MLflow1
MongoDB2
Motex1
Mozilla13

N

N-able5
n8n1
Nagios4
NAKIVO1
NETGEAR8
Netis1
Netwrix1
NextGen Healthcare1
Nice1
North Grid1
Nostromo1
Notepad++1
Novi Survey1
Npm package1
NUUO2
Nx1

O

October CMS1
Omnissa1
ONLYOFFICE1
OpenBSD1
OpenPLC2
OpenSSL1
Oracle46
OSGeo3
ownCloud2

P

Paessler2
Palo Alto Networks16
PaperCut5
PEAR2
Perl1
PHP3
PHP Group3
phpMyAdmin1
PHPUnit1
Pi-hole1
PlaySMS1
Plex5
Prettier1
Primetek1
ProFTPD1
Progress9
ProjectSend1
PTC1
PTZOptics2
Pulse Secure1

Q

Qlik3
QNAP11
QNAP Systems1
Qualcomm12
Qualitia1
Quest2

R

Rails3
RARLAB5
Ray-Project1
rConfig1
React Native Community1
Realtek3
Red Hat9
Redis1
Rejetto2
reviewdog1
Rockwell1
Roundcube11
Ruckus Wireless1

S

SaltStack3
Samba1
Samsung15
Sangoma4
SAP14
Schneider Electric1
ScienceLogic1
ServiceNow2
Siemens2
Sierra Wireless1
SIMalliance1
SimpleHelp 4
Sitecore4
SKYSEA1
Smartbedded1
SmarterTools3
SolarView1
SolarWinds11
Soliton Systems K.K1
Sonatype2
SonicWall20
Sophos7
Splunk1
Spreadsheet::ParseExcel1
Srimax1
Strapi1
Sudo2
SugarCRM1
Sumavision1
Sunhillo1
Symantec1
Synacor19
SysAid3

T

TanStack1
TeamT51
TeamViewer1
Teclib1
TeleMessage3
Telerik2
Tenda3
TerraMaster1
ThinkPHP2
TIBCO2
tj-actions1
Treck TCP/IP stack1
Trend Micro12
Trihedral1
Trimble1
TrueConf3
TVT1
Twilio1

U

Ubiquiti4
Unitronics1
Unraid2

V

vBulletin2
Veeam4
Veritas3
Versa2
Vite1
VMware26
VMware Tanzu3

W

WatchGuard4
Wazuh1
WebKitGTK1
Webmin1
WebPros1
WebRTC1
Widget Factory1
Wing FTP Server2
WordPress7
WSO22

X

XStream1
XWiki1

Y

Yiiframework1

Z

Zabbix2
Zammad GmbH2
ZK Framework1
ZKTeco1
Zoho9
Zyxel13