Security Warnings — Source: cisa kev

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

2026-05-12 CVE-2026-31431

highLinux CISA-KEV 2026-W20

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

2026-05-12 CVE-2026-33825

highMicrosoft CISA-KEV 2026-W20

Microsoft Windows Protection Mechanism Failure Vulnerability

2026-05-12 CVE-2026-32202

highMicrosoft CISA-KEV 2026-W20

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

2026-05-12 CVE-2026-0300

highPalo Alto Networks CISA-KEV 2026-W20

BerriAI LiteLLM SQL Injection Vulnerability

2026-05-09 CVE-2026-42208

highBerriAI CISA-KEV 2026-W19

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

2026-05-08 CVE-2026-6973

highIvanti CISA-KEV 2026-W19

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

2026-05-06 CVE-2026-41940

criticalWebPros CISA-KEV 2026-W19

Microsoft SharePoint Server Improper Input Validation Vulnerability

2026-04-30 CVE-2026-32201

highMicrosoft CISA-KEV 2026-W18

ConnectWise ScreenConnect Path Traversal Vulnerability

2026-04-29 CVE-2024-1708

highConnectWise CISA-KEV 2026-W18

D-Link DIR-823X Command Injection Vulnerability

2026-04-25 CVE-2025-29635

highD-Link CISA-KEV 2026-W17

Samsung MagicINFO 9 Server Path Traversal Vulnerability

2026-04-25 CVE-2024-7399

highSamsung CISA-KEV 2026-W17

SimpleHelp Missing Authorization Vulnerability

2026-04-25 CVE-2024-57726

highSimpleHelp CISA-KEV 2026-W17

SimpleHelp Path Traversal Vulnerability

2026-04-25 CVE-2024-57728

highSimpleHelp CISA-KEV 2026-W17

Marimo Remote Code Execution Vulnerability

2026-04-23 CVE-2026-39987

highMarimo CISA-KEV 2026-W17

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

2026-04-22 CVE-2026-20133

highCisco CISA-KEV 2026-W17

Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

2026-04-21 CVE-2026-20122

highCisco CISA-KEV 2026-W17

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

2026-04-21 CVE-2026-20128

highCisco CISA-KEV 2026-W17

Fortinet FortiClient EMS Improper Access Control Vulnerability

2026-04-21 CVE-2026-35616

highFortinet CISA-KEV 2026-W17

JetBrains TeamCity Relative Path Traversal Vulnerability

2026-04-21 CVE-2024-27199

criticalJetBrains CISA-KEV 2026-W17

Kentico Xperience Path Traversal Vulnerability

2026-04-21 CVE-2025-2749

highKentico CISA-KEV 2026-W17

PaperCut NG/MF Improper Authentication Vulnerability

2026-04-21 CVE-2023-27351

criticalPaperCut CISA-KEV 2026-W17

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

2026-04-21 CVE-2025-32975

highQuest CISA-KEV 2026-W17

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

2026-04-21 CVE-2025-48700

highSynacor CISA-KEV 2026-W17

Apache ActiveMQ Improper Input Validation Vulnerability

2026-04-17 CVE-2026-34197

highApache CISA-KEV 2026-W16

Microsoft Office Remote Code Execution

2026-04-15 CVE-2009-0238

highMicrosoft CISA-KEV 2026-W16

Adobe Acrobat and Reader Prototype Pollution Vulnerability

2026-04-14 CVE-2026-34621

highAdobe CISA-KEV 2026-W16

Fortinet FortiClient EMS SQL Injection Vulnerability

2026-04-14 CVE-2026-21643

highFortinet CISA-KEV 2026-W16

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

2026-04-14 CVE-2023-21529

criticalMicrosoft CISA-KEV 2026-W16

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

2026-04-14 CVE-2012-1854

highMicrosoft CISA-KEV 2026-W16

Microsoft Windows Link Following Vulnerability

2026-04-14 CVE-2025-60710

highMicrosoft CISA-KEV 2026-W16

Microsoft Windows Out-of-Bounds Read Vulnerability

2026-04-14 CVE-2023-36424

highMicrosoft CISA-KEV 2026-W16

Adobe Acrobat Use-After-Free Vulnerability

2026-04-13 CVE-2020-9715

highAdobe CISA-KEV 2026-W16

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

2026-04-09 CVE-2026-1340

highIvanti CISA-KEV 2026-W15

TrueConf Client Download of Code Without Integrity Check Vulnerability

2026-04-03 CVE-2026-3502

highTrueConf CISA-KEV 2026-W14

Apple Multiple Products Buffer Overflow Vulnerability

2026-04-02 CVE-2025-31277

highApple CISA-KEV 2026-W14

Apple Multiple Products Classic Buffer Overflow Vulnerability

2026-04-02 CVE-2025-43520

highApple CISA-KEV 2026-W14

Apple Multiple Products Improper Locking Vulnerability

2026-04-02 CVE-2025-43510

highApple CISA-KEV 2026-W14

Google Dawn Use-After-Free Vulnerability

2026-04-02 CVE-2026-5281

highGoogle CISA-KEV 2026-W14

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

2026-04-02 CVE-2026-20963

highMicrosoft CISA-KEV 2026-W14

Citrix NetScaler Out-of-Bounds Read Vulnerability

2026-03-31 CVE-2026-3055

highCitrix CISA-KEV 2026-W14

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

2026-03-31 CVE-2025-53521

highF5 CISA-KEV 2026-W14

Aquasecurity Trivy Embedded Malicious Code Vulnerability

2026-03-30 CVE-2026-33634

highAquasecurity CISA-KEV 2026-W14

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

2026-03-27 CVE-2026-21513

highMicrosoft CISA-KEV 2026-W13

Microsoft Windows Improper Privilege Management Vulnerability

2026-03-27 CVE-2026-21533

highMicrosoft CISA-KEV 2026-W13

Langflow Code Injection Vulnerability

2026-03-26 CVE-2026-33017

highLangflow CISA-KEV 2026-W13

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

2026-03-25 CVE-2026-20131

criticalCisco CISA-KEV 2026-W13

Google Skia Out-of-Bounds Write Vulnerability

2026-03-24 CVE-2026-3909

highGoogle CISA-KEV 2026-W13

Craft CMS Code Injection Vulnerability

2026-03-21 CVE-2025-32432

highCraft CMS CISA-KEV 2026-W12

Laravel Livewire Code Injection Vulnerability

2026-03-20 CVE-2025-54068

highLaravel CISA-KEV 2026-W12

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

2026-03-18 CVE-2025-66376

highSynacor CISA-KEV 2026-W12

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

2026-03-16 CVE-2026-21510

highMicrosoft CISA-KEV 2026-W12

Microsoft Windows Type Confusion Vulnerability

2026-03-16 CVE-2026-21519

highMicrosoft CISA-KEV 2026-W12

Wing FTP Server Information Disclosure Vulnerability

2026-03-16 CVE-2025-47813

highWing FTP Server CISA-KEV 2026-W12

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

2026-03-13 CVE-2026-3910

highGoogle CISA-KEV 2026-W11

Apple iOS and iPadOS Use-After-Free Vulnerability

2026-03-12 CVE-2023-41974

highApple CISA-KEV 2026-W11

Apple Multiple products Use-After-Free Vulnerability

2026-03-12 CVE-2023-43000

highApple CISA-KEV 2026-W11

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

2026-03-11 CVE-2025-68613

highn8n CISA-KEV 2026-W11

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

2026-03-09 CVE-2026-1603

highIvanti CISA-KEV 2026-W11

Omnissa Workspace ONE Server-Side Request Forgery

2026-03-09 CVE-2021-22054

highOmnissa CISA-KEV 2026-W11

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

2026-03-09 CVE-2025-26399

highSolarWinds CISA-KEV 2026-W11