Vulnerabilities being exploited right now
Every entry here appears in CISA's Known Exploited Vulnerabilities catalog, which means exploitation has been observed in the wild rather than merely predicted. These are the ones to patch first, whatever their CVSS score says.
110 in the current window, 4 of them in the AI stack.
- 10.0 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
- 8.6 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- 7.0 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
- 2.7 Broadcom VMWare ESX Insufficient Logging Vulnerability
- — Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
- — Linux Kernel Missing Initialization of a Variable Vulnerability
- — Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- — Google Brotli Unchecked Return Value Vulnerability
- — PHP Memory Corruption Vulnerability
- — PHP Stale Internal Request-State Vulnerability
- — Arista VeloCloud Orchestrator SQL Injection Vulnerability
- — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
- — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
- — Plex Media Server External Control of File Name or Path Vulnerability
- — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
- — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- — Siemens Software Center Uncontrolled Search Path Element Vulnerability
- — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
- — Fortinet Multiple Products Path Traversal Vulnerability
- — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- — Ahsay AhsayCBS Command Injection Vulnerability
- — Cisco Secure Email Gateway Relative Path Traversal Vulnerability
- — Ahsay AhsayCBS Improper Authentication Vulnerability
- — Palo Alto Networks PAN-OS Code Injection Vulnerability
- — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
- — Microsoft Windows Command Injection Vulnerability
- — ISC BIND Data Processing Errors Vulnerability
- — Apache Struts Command Injection Vulnerability
- — Strapi Cleartext Storage of Sensitive Information Vulnerability
- — ONLYOFFICE Docs Server Path Traversal Vulnerability
- — ProFTPD Improper Access Control Vulnerability
- — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- — Zammad GmbH Zammad Improper Privilege Management Vulnerability
- — Zammad GmbH Zammad Session Fixation Vulnerability
- — Fortinet FortiMail Path Traversal Vulnerability
- — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- — Apple Multiple Products Out-of-Bounds Write Vulnerability
- — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- — Citrix NetScaler Improper Input Validation Vulnerability
- — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
- — Microsoft SharePoint Code Injection Vulnerability
- — WordPress Core Remote File Inclusion Vulnerability
- — WSO2 Multiple Products Path Traversal Vulnerability
- — Adobe Commerce and Magento Incorrect Authorization Vulnerability
- — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
- — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- — Check Point Multiple Products Path Traversal Vulnerability
- — Check Point Multiple Products Improper Certificate Validation Vulnerability
- — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- — Linux Kernel Race Condition Vulnerability
- — Linux Kernel Out-of-Bounds Write Vulnerability
- — Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- — Google Pixel Improper Authorization Vulnerability
- — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- — Acronis Backup Incorrect Default Permissions Vulnerability
- — Cisco Secure Email Gateway SQL Injection Vulnerability
- — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- — JFrog Artifactory Incorrect Authorization Vulnerability
- — JFrog Artifactory Improper Authentication Vulnerability
- — GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
- — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
- — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
- — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- — Google Chromium V8 Out of Bounds Write Vulnerability
- — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
- — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- — Microsoft Windows Link Following Vulnerability
- — N-able N-central Static Code Injection Vulnerability
- — Microsoft Windows Heap-Based Buffer Overflow Vulnerability
- — Google Chromium V8 Type Confusion Vulnerability
- — BerriAI LiteLLM Improper Authentication Vulnerability
- — Kludex Starlette HTTP Request/Response Smuggling Vulnerability
- — Kestra OSS OS Command Injection Vulnerability
- — JFrog Artifactory Improper Authentication Vulnerability
- — Sangoma Switchvox SQL Injection Vulnerability
- — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- — SonicWall SMA1000 Appliances OS Command Injection Vulnerability
- — PaperCut NG/MF Unsafe Reflection Vulnerability
- — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
- — ownCloud Improper Authentication Vulnerability
- — Linux Kernel Unspecified Vulnerability
- — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
- — Red Hat Libuser Race Condition Vulnerability
- — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- — Linux Kernel Out-of-Bounds Write Vulnerability
- — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- — Microsoft SQL Server Remote Code Execution Vulnerability
- — Gitea Code Injection Vulnerability
- — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
- — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
- — TrueConf Server Code Injection Vulnerability
- — TrueConf Server Missing Authentication for Critical Function Vulnerability
- — MLflow Server-Side Request Forgery Vulnerability
- — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
- — Broadcom VMware vCenter Path Traversal Vulnerability
- — Microsoft SharePoint Weak Authentication Vulnerability
- — Apple macOS Improper Authentication Vulnerability
- — Ray-Project Ray Code Injection Vulnerability
- — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
- — Metabase SQL Injection Vulnerability
- — Progress LoadMaster Command Injection Vulnerability
- — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
- — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
- — IBM Langflow Code Injection Vulnerability
- — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
Absence from this list means exploitation has not been observed, not that a vulnerability is safe. Check the full feed for everything else.