Live from CISA's KEV catalog

Exploited now.
Patch these first.

CISA adds a vulnerability to its Known Exploited Vulnerabilities catalog when it has evidence that attackers are using it. This page reads the catalog directly: what was added, which federal deadlines are closing, and where we have written the briefing.

Added, 7 days: 10
Added, 30 days: 35
Deadlines, 14 days: 11

Catalog 2026.10.30 · 1,766 entries · checked 31 Oct 2026, 11:48 UTC · CISA source

Federal deadlines in the next 14 days

US federal agencies must patch by these dates under Binding Operational Directive 26-04. Everyone else should treat them as a ceiling, not a target. Entries marked forensic triage also require a check for compromise, not only a patch.

CVE-2026-46300Forensic triage
Linux KernelLinux Kernel Missing Initialization of a Variable Vulnerability
Due today
CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
1 day left
CVE-2026-97229Forensic triage
GitLab Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
1 day left
CVE-2026-111357Forensic triage
Ivanti Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
2 days leftBriefing
CVE-2026-110936
Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element Vulnerability
3 days leftBriefing
CVE-2026-96652
Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
3 days leftBriefing
CVE-2026-96655
Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
3 days leftBriefing
CVE-2026-111497
Google BrotliGoogle Brotli Unchecked Return Value Vulnerability
10 days leftBriefing
CVE-2026-48356
Adobe Commerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
10 days leftBriefing
CVE-2026-41709
Broadcom VMware ESXBroadcom VMWare ESX Insufficient Logging Vulnerability
11 days left
CVE-2026-118527
Ivanti Connect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
13 days left

Added in the last 60 days

30 October 20262 additions

CVE-2026-118527
Ivanti Connect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
13 days left
CVE-2026-111357Forensic triage
Ivanti Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
2 days leftBriefing

29 October 20262 additions

CVE-2026-97229Forensic triage
GitLab Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
1 day left
CVE-2026-76418
Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
1 day left

28 October 20262 additions

CVE-2026-46300Forensic triage
Linux KernelLinux Kernel Missing Initialization of a Variable Vulnerability
Due today
CVE-2026-41709
Broadcom VMware ESXBroadcom VMWare ESX Insufficient Logging Vulnerability
11 days left

27 October 20262 additions

CVE-2026-48356
Adobe Commerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
10 days leftBriefing
CVE-2026-111497
Google BrotliGoogle Brotli Unchecked Return Value Vulnerability
10 days leftBriefing

26 October 20262 additions

CVE-2026-109619Forensic triage
PHP Group PHPPHP Stale Internal Request-State Vulnerability
Due 29 October 2026Briefing
CVE-2026-109618Forensic triage
PHP Group PHPPHP Memory Corruption Vulnerability
Due 29 October 2026Briefing

23 October 20262 additions

CVE-2026-114625Forensic triage
Arista VeloCloud OrchestratorArista VeloCloud Orchestrator SQL Injection Vulnerability
Due 26 October 2026Briefing
CVE-2026-110447Forensic triage
Collabora Collabora Online – Built-in CODE ServerCollabora Online – Built-in CODE Server OS Command Injection Vulnerability
Due 26 October 2026Briefing

20 October 20266 additions

CVE-2026-96656Forensic triage
Plex Media ServerPlex Media Server External Control of File Name or Path Vulnerability
Due 23 October 2026Briefing
CVE-2026-96655
Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
3 days leftBriefing
CVE-2026-96654
Plex Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Due 23 October 2026Briefing
CVE-2026-96652
Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability
3 days leftBriefing
CVE-2026-110936
Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element Vulnerability
3 days leftBriefing
CVE-2026-106931Forensic triage
EG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
Due 23 October 2026Briefing

16 October 20262 additions

CVE-2026-102764Forensic triage
BeyondTrust Remote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
Due 19 October 2026Briefing
CVE-2025-61624Forensic triage
Fortinet Multiple ProductsFortinet Multiple Products Path Traversal Vulnerability
Due 19 October 2026Briefing

15 October 20261 addition

CVE-2026-21589Forensic triage
Atlassian Multiple ProductsAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Due 18 October 2026Briefing

14 October 20264 additions

CVE-2026-76519Forensic triage
Cisco Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
Due 17 October 2026Briefing
CVE-2026-105134Forensic triage
Ahsay AhsayCBSAhsay AhsayCBS Command Injection Vulnerability
Due 17 October 2026Briefing
CVE-2026-105133
Ahsay AhsayCBSAhsay AhsayCBS Improper Authentication Vulnerability
Due 17 October 2026Briefing
CVE-2026-0322Forensic triage
Palo Alto Networks PAN-OSPalo Alto Networks PAN-OS Code Injection Vulnerability
Due 17 October 2026Briefing

13 October 20262 additions

CVE-2026-96951Forensic triage
Microsoft WindowsMicrosoft Windows Command Injection Vulnerability
Due 16 October 2026Briefing
CVE-2026-104935Forensic triage
Ivanti Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Due 16 October 2026Briefing

8 October 20265 additions

CVE-2023-22894Forensic triage
Strapi StrapiStrapi Cleartext Storage of Sensitive Information Vulnerability
Due 11 October 2026Briefing
CVE-2021-3199Forensic triage
ONLYOFFICE DocsONLYOFFICE Docs Server Path Traversal Vulnerability
Due 11 October 2026Briefing
CVE-2016-3081Forensic triage
Apache StrutsApache Struts Command Injection Vulnerability
Due 11 October 2026Briefing
CVE-2015-5477
ISC BIND ISC BIND Data Processing Errors Vulnerability
Due 11 October 2026Briefing
CVE-2015-3306Forensic triage
ProFTPD ProFTPDProFTPD Improper Access Control Vulnerability
Due 11 October 2026Briefing

4 October 20261 addition

CVE-2026-88779
Citrix NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Due 7 October 2026Briefing

2 October 20262 additions

CVE-2026-102490Forensic triage
Zammad GmbH ZammadZammad GmbH Zammad Improper Privilege Management Vulnerability
Due 5 October 2026Briefing
CVE-2026-102489Forensic triage
Zammad GmbH ZammadZammad GmbH Zammad Session Fixation Vulnerability
Due 5 October 2026Briefing

1 October 20261 addition

CVE-2026-104286Forensic triage
Fortinet FortiMailFortinet FortiMail Path Traversal Vulnerability
Due 4 October 2026Briefing

30 September 20261 addition

CVE-2026-76504Forensic triage
Cisco Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Due 3 October 2026Briefing

29 September 20261 addition

CVE-2026-86950
Apple Multiple ProductsApple Multiple Products Out-of-Bounds Write Vulnerability
Due 13 October 2026Briefing

27 September 20262 additions

CVE-2026-88772Forensic triage
Citrix NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Due 30 September 2026Briefing
CVE-2026-88771Forensic triage
Citrix NetScalerCitrix NetScaler Improper Input Validation Vulnerability
Due 30 September 2026Briefing

25 September 20263 additions

CVE-2026-87902Forensic triage
WordPress CoreWordPress Core Remote File Inclusion Vulnerability
Due 28 September 2026
CVE-2026-67279
MikroTik RouterOSMikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Due 28 September 2026
CVE-2026-65660Forensic triage
Microsoft SharePointMicrosoft SharePoint Code Injection Vulnerability
Due 28 September 2026

24 September 20262 additions

CVE-2026-71362Forensic triage
Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability
Due 27 September 2026
CVE-2026-5430Forensic triage
WSO2 Multiple ProductsWSO2 Multiple Products Path Traversal Vulnerability
Due 27 September 2026

22 September 20264 additions

CVE-2026-94127Forensic triage
F5 BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Due 25 September 2026
CVE-2026-93952Forensic triage
Arista VeloCloud OrchestratorArista VeloCloud Orchestrator Improper Input Validation Vulnerability
Due 25 September 2026
CVE-2026-93616Forensic triage
Check Point Multiple ProductsCheck Point Multiple Products Path Traversal Vulnerability
Due 25 September 2026
CVE-2026-85102Forensic triage
Check Point Multiple ProductsCheck Point Multiple Products Improper Certificate Validation Vulnerability
Due 25 September 2026

21 September 20261 addition

CVE-2026-7273Forensic triage
Zyxel GS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Due 24 September 2026

18 September 20263 additions

CVE-2026-53266Forensic triage
Linux KernelLinux Kernel Out-of-Bounds Write Vulnerability
Due 21 September 2026
CVE-2025-39964Forensic triage
Linux KernelLinux Kernel Race Condition Vulnerability
Due 21 September 2026
CVE-2025-39682Forensic triage
Linux KernelLinux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Due 21 September 2026

16 September 20263 additions

CVE-2026-87886Forensic triage
Acronis BackupAcronis Backup Incorrect Default Permissions Vulnerability
Due 19 September 2026
CVE-2026-76460Forensic triage
Cisco Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Due 19 September 2026
CVE-2026-58704Forensic triage
Google PixelGoogle Pixel Improper Authorization Vulnerability
Due 19 September 2026

14 September 20261 addition

CVE-2026-76461Forensic triage
Cisco Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
Due 17 September 2026

11 September 20264 additions

CVE-2026-85706Forensic triage
GitLab Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
Due 14 September 2026Briefing
CVE-2026-84869Forensic triage
ConnectWise ScreenConnectConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
Due 14 September 2026
CVE-2026-42018
JFrog ArtifactoryJFrog Artifactory Improper Authentication Vulnerability
Due 25 September 2026
CVE-2026-42016
JFrog ArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability
Due 25 September 2026

10 September 20262 additions

CVE-2026-86060Forensic triage
MikroTik RouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
Due 13 September 2026
CVE-2026-67277
MikroTik RouterOSMikroTik RouterOS Missing Authentication for Critical Function Vulnerability
Due 13 September 2026

9 September 20264 additions

CVE-2026-87491
Google Chromium V8Google Chromium V8 Out of Bounds Write Vulnerability
Due 23 September 2026
CVE-2026-20079Forensic triage
Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Due 12 September 2026
CVE-2026-19490Forensic triage
Citrix NetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Due 12 September 2026
CVE-2025-25249Forensic triage
Fortinet Multiple ProductsFortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Due 12 September 2026

8 September 20264 additions

CVE-2026-86218Forensic triage
N-able N-centralN-able N-central Static Code Injection Vulnerability
Due 11 September 2026
CVE-2026-85880
Microsoft WindowsMicrosoft Windows Heap-Based Buffer Overflow Vulnerability
Due 22 September 2026
CVE-2026-81963
Microsoft WindowsMicrosoft Windows Link Following Vulnerability
Due 22 September 2026
CVE-2026-75650Forensic triage
Adobe Commerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Due 11 September 2026

4 September 20261 addition

CVE-2026-85046
Google Chromium V8Google Chromium V8 Type Confusion Vulnerability
Due 18 September 2026

2 September 20267 additions

CVE-2026-9586Forensic triage
Sangoma SwitchvoxSangoma Switchvox SQL Injection Vulnerability
Due 5 September 2026
CVE-2026-83549Forensic triage
SonicWall SMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection Vulnerability
Due 5 September 2026
CVE-2026-83548Forensic triage
SonicWall SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Due 5 September 2026
CVE-2026-82329Forensic triage
JFrog ArtifactoryJFrog Artifactory Improper Authentication Vulnerability
Due 5 September 2026
CVE-2026-59822
BerriAI LiteLLMBerriAI LiteLLM Improper Authentication Vulnerability
Due 16 September 2026
CVE-2026-49869Forensic triage
Kestra Kestra OSSKestra OSS OS Command Injection Vulnerability
Due 5 September 2026
CVE-2026-48710
Kludex StarletteKludex Starlette HTTP Request/Response Smuggling Vulnerability
Due 16 September 2026

Want the full story on an entry? Our security briefings explain who is affected, how the attack works and how to check, fix and detect it, and this guide covers how KEV, EPSS and CVSS fit together.