Technology ❯ Cybersecurity ❯ Vulnerabilities

Known Exploited Vulnerabilities

CISA CISA Catalog CISA Actions CVE-2025-55177 CVE-2025-68613 CVE-2026-15409 TP-Link Flaws Apache ActiveMQ CVE-2026-22769 CVE-2025-11371 CVE-2025-14611 CVE-2026-42271 and CVE-2026-50751 CVE-2021-22175 CVE-2025-24893 GeoServer N-able N-Central Flaws CVE-2025-4008 CVE-2020-24363 Splunk Enterprise CVE-2025-43529 CVE-2025-5086 CVE-2025-61932 CVE-2025-37164 Joomla Content Editor (JCE) Flaw CVE-2025-7775 CISA Advisories CVE-2026-1281 Langflow CVE-2026-15410 Adobe Experience Manager CISA Alerts CVE-2009-0556

CISA Adds Four Actively Exploited Flaws to KEV and Orders Federal Patch by August 21

The agency’s move forces rapid fixes to stop proof‑of‑concept driven attacks, ransomware and AI‑assisted scanning on widely used systems.

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

CISA Adds Ubiquiti and Lantronix Flaws to Known Exploited Vulnerabilities Catalog

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

Arista Declines Patch for Actively Exploited EOS Tunnel Flaw

CISA Adds LiteLLM Command‑Injection Flaw to Known Exploited Vulnerabilities List

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

CISA Adds ActiveMQ RCE to KEV With April 30 Patch Deadline

CISA Adds Actively Exploited Langflow RCE to KEV, Sets April 8 Deadline

CISA Flags SharePoint, Zimbra Flaws as Actively Exploited, Sets Rapid Federal Patching Deadlines

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

CISA Puts Actively Exploited n8n RCE on KEV, Orders Federal Patching by March 25

CISA Adds Three Actively Exploited Flaws to KEV, Sets Fast Federal Patching Deadlines

CISA Puts Exploited FileZen Bug on KEV With March 17 Fix Deadline

Dell Patches RecoverPoint Zero-Day Exploited Since 2024 by Suspected China Group

CISA Adds Chrome Zero-Day and Legacy Bugs to KEV With March 10 Patch Deadline