Technology ❯ Cybersecurity ❯ Vulnerabilities

Known Exploited Vulnerabilities

CISA CISA Catalog CISA Actions CVE-2009-0556 CVE-2026-15409 TP-Link Flaws CVE-2025-68613 CVE-2026-22769 Apache ActiveMQ CVE-2025-55177

CISA Adds Zyxel Switch Bug to KEV as Veeam Agent Privilege Flaw Is Publicly Exploited

Federal agencies must install Zyxel’s patched firmware by Sept. 24 to close a bug CISA says is being actively abused.

CISA Adds OwnCloud, Linux Kernel and Artifactory Flaws to KEV and Orders Rapid Federal Patching

CISA Adds Four Actively Exploited Flaws to KEV and Orders Federal Patch by August 21

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

CISA Adds Ubiquiti and Lantronix Flaws to Known Exploited Vulnerabilities Catalog

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

Arista Declines Patch for Actively Exploited EOS Tunnel Flaw

CISA Adds LiteLLM Command‑Injection Flaw to Known Exploited Vulnerabilities List

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

CISA Adds ActiveMQ RCE to KEV With April 30 Patch Deadline

CISA Adds Actively Exploited Langflow RCE to KEV, Sets April 8 Deadline

CISA Flags SharePoint, Zimbra Flaws as Actively Exploited, Sets Rapid Federal Patching Deadlines

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

CISA Adds Three Actively Exploited Flaws to KEV, Sets Fast Federal Patching Deadlines

CISA Puts Exploited FileZen Bug on KEV With March 17 Fix Deadline