Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-76461 Exploited |
Not yet scored | Cisco Secure Email Gateway Network & security devices |
Cisco Secure Email Gateway SQL Injection Vulnerability | 14 Sep 2026 |
| CVE-2026-86060 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | 10 Sep 2026 |
| CVE-2026-67277 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | 10 Sep 2026 |
| CVE-2026-19490 Exploited |
Not yet scored | Citrix NetScaler Network & security devices |
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9 Sep 2026 |
| CVE-2025-25249 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 9 Sep 2026 |
| CVE-2026-83548 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2 Sep 2026 |
| CVE-2026-9586 Exploited |
Not yet scored | Sangoma Switchvox Network & security devices |
Sangoma Switchvox SQL Injection Vulnerability | 2 Sep 2026 |
| CVE-2026-83549 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2 Sep 2026 |
| CVE-2026-8452 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 26 Aug 2026 |
| CVE-2026-20349 Exploited |
Not yet scored | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Network & security devices |
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 11 Aug 2026 |
| CVE-2026-20316 Exploited |
Not yet scored | Cisco Secure Firewall Management Center (FMC) Network & security devices |
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 29 Jul 2026 |
| CVE-2025-68686 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 27 Jul 2026 |
| CVE-2026-16232 Exploited |
Not yet scored | Check Point SmartConsole Network & security devices |
Check Point SmartConsole Improper Authentication Vulnerability | 22 Jul 2026 |
| CVE-2026-39808 Exploited |
Not yet scored | Fortinet FortiSandbox Network & security devices |
Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 |
| CVE-2026-15410 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Code Injection Vulnerability | 14 Jul 2026 |
| CVE-2026-15409 Exploited |
Not yet scored | SonicWall SMA1000 Appliances Network & security devices |
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 14 Jul 2026 |
| CVE-2008-4128 Exploited |
Not yet scored | Cisco IOS Network & security devices |
Cisco IOS Cross-Site Request Forgery Vulnerability | 13 Jul 2026 |
| CVE-2026-20230 Exploited |
Not yet scored | Cisco Unified Communications Manager Network & security devices |
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 25 Jun 2026 |
| CVE-2026-20262 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 15 Jun 2026 |
| CVE-2026-10520 Exploited |
Not yet scored | Ivanti Sentry Network & security devices |
Ivanti Sentry OS Command Injection Vulnerability | 11 Jun 2026 |
| CVE-2026-7473 Exploited |
Not yet scored | Arista Extensible Operating System Network & security devices |
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 9 Jun 2026 |
| CVE-2026-20245 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Manager Network & security devices |
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 9 Jun 2026 |
| CVE-2026-50751 Exploited |
Not yet scored | Check Point Security Gateway Network & security devices |
Check Point Security Gateway Improper Authentication Vulnerability | 8 Jun 2026 |
| CVE-2026-0257 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 29 May 2026 |
| CVE-2026-20182 Exploited |
Not yet scored | Cisco Catalyst SD-WAN Network & security devices |
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 14 May 2026 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.