Due this week - and already overdue
BOD 26-04 note: this is the date printed in the CISA catalog. A federal agency's actual deadline is set by its SSVC tier - Act (3 days), Attend (14 days), Track (60 days), or the next scheduled upgrade - counted from the KEV listing date or the date the vulnerability is identified in its environment, whichever comes first. Use the tier helper on each CVE page for your own window.
Due in the next 7 days (9)
| CVE | Vendor / Product | Added | Due |
|---|---|---|---|
| CVE-2026-41709 | Broadcom VMware ESX | 2026-10-28 | 2026-11-11 |
| CVE-2026-102895 | GPUStack GPUStack | 2026-11-09 | 2026-11-12 |
| CVE-2026-123158 | OpenBSD OpenSSH | 2026-11-09 | 2026-11-12 |
| CVE-2026-116779 | SignalWire FreeSwitch | 2026-11-09 | 2026-11-12 |
| CVE-2026-123218 | IBM Aspera Faspex | 2026-11-09 | 2026-11-12 |
| CVE-2026-111560 | Barracuda Networks Multiple Products | 2026-11-10 | 2026-11-13 |
| CVE-2026-116606 | Barracuda Networks Barracuda Email Security Gateway (ESG) | 2026-11-10 | 2026-11-13 |
| CVE-2026-118527 | Ivanti Connect Secure | 2026-10-30 | 2026-11-13 |
| CVE-2024-27834 | Apple Multiple Products | 2026-11-04 | 2026-11-18 |
Past catalog date (most recent first) (1765 total, showing 300)
| CVE | Vendor / Product | Added | Due |
|---|---|---|---|
| CVE-2026-48356 | Adobe Commerce and Magento | 2026-10-27 | 2026-11-10 |
| CVE-2026-111497 | Google Brotli | 2026-10-27 | 2026-11-10 |
| CVE-2026-119977 | WordPress WordPress Core | 2026-11-03 | 2026-11-06 |
| CVE-2026-96655 | Plex Media Server | 2026-10-20 | 2026-11-03 |
| CVE-2026-96652 | Plex Media Server | 2026-10-20 | 2026-11-03 |
| CVE-2026-110936 | Siemens Software Center | 2026-10-20 | 2026-11-03 |
| CVE-2026-111357 | Ivanti Connect Secure | 2026-10-30 | 2026-11-02 |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | 2026-10-29 | 2026-11-01 |
| CVE-2026-76418 | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | 2026-10-29 | 2026-11-01 |
| CVE-2026-46300 | Linux Kernel | 2026-10-28 | 2026-10-31 |
| CVE-2026-109618 | PHP Group PHP | 2026-10-26 | 2026-10-29 |
| CVE-2026-109619 | PHP Group PHP | 2026-10-26 | 2026-10-29 |
| CVE-2026-114625 | Arista VeloCloud Orchestrator | 2026-10-23 | 2026-10-26 |
| CVE-2026-110447 | Collabora Collabora Online – Built-in CODE Server | 2026-10-23 | 2026-10-26 |
| CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition | 2026-10-20 | 2026-10-23 |
| CVE-2026-96656 | Plex Media Server | 2026-10-20 | 2026-10-23 |
| CVE-2026-96654 | Plex Media Server | 2026-10-20 | 2026-10-23 |
| CVE-2026-102764 | BeyondTrust Remote Support | 2026-10-16 | 2026-10-19 |
| CVE-2025-61624 | Fortinet Multiple Products | 2026-10-16 | 2026-10-19 |
| CVE-2026-21589 | Atlassian Multiple Products | 2026-10-15 | 2026-10-18 |
| CVE-2026-105134 | Ahsay AhsayCBS | 2026-10-14 | 2026-10-17 |
| CVE-2026-76519 | Cisco Secure Email Gateway | 2026-10-14 | 2026-10-17 |
| CVE-2026-105133 | Ahsay AhsayCBS | 2026-10-14 | 2026-10-17 |
| CVE-2026-0322 | Palo Alto Networks PAN-OS | 2026-10-14 | 2026-10-17 |
| CVE-2026-104935 | Ivanti Connect Secure | 2026-10-13 | 2026-10-16 |
| CVE-2026-96951 | Microsoft Windows | 2026-10-13 | 2026-10-16 |
| CVE-2026-86950 | Apple Multiple Products | 2026-09-29 | 2026-10-13 |
| CVE-2015-5477 | ISC BIND | 2026-10-08 | 2026-10-11 |
| CVE-2016-3081 | Apache Struts | 2026-10-08 | 2026-10-11 |
| CVE-2023-22894 | Strapi Strapi | 2026-10-08 | 2026-10-11 |
| CVE-2021-3199 | ONLYOFFICE Docs | 2026-10-08 | 2026-10-11 |
| CVE-2015-3306 | ProFTPD ProFTPD | 2026-10-08 | 2026-10-11 |
| CVE-2026-88779 | Citrix NetScaler | 2026-10-04 | 2026-10-07 |
| CVE-2026-102490 | Zammad GmbH Zammad | 2026-10-02 | 2026-10-05 |
| CVE-2026-102489 | Zammad GmbH Zammad | 2026-10-02 | 2026-10-05 |
| CVE-2026-104286 | Fortinet FortiMail | 2026-10-01 | 2026-10-04 |
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | 2026-09-30 | 2026-10-03 |
| CVE-2026-88772 | Citrix NetScaler | 2026-09-27 | 2026-09-30 |
| CVE-2026-88771 | Citrix NetScaler | 2026-09-27 | 2026-09-30 |
| CVE-2026-67279 | MikroTik RouterOS | 2026-09-25 | 2026-09-28 |
| CVE-2026-65660 | Microsoft SharePoint | 2026-09-25 | 2026-09-28 |
| CVE-2026-87902 | WordPress Core | 2026-09-25 | 2026-09-28 |
| CVE-2026-5430 | WSO2 Multiple Products | 2026-09-24 | 2026-09-27 |
| CVE-2026-71362 | Adobe Commerce and Magento | 2026-09-24 | 2026-09-27 |
| CVE-2026-93952 | Arista VeloCloud Orchestrator | 2026-09-22 | 2026-09-25 |
| CVE-2026-94127 | F5 BIG-IP APM | 2026-09-22 | 2026-09-25 |
| CVE-2026-93616 | Check Point Multiple Products | 2026-09-22 | 2026-09-25 |
| CVE-2026-85102 | Check Point Multiple Products | 2026-09-22 | 2026-09-25 |
| CVE-2026-42016 | JFrog Artifactory | 2026-09-11 | 2026-09-25 |
| CVE-2026-42018 | JFrog Artifactory | 2026-09-11 | 2026-09-25 |
| CVE-2026-7273 | Zyxel GS1900 Series Switches | 2026-09-21 | 2026-09-24 |
| CVE-2026-87491 | Google Chromium V8 | 2026-09-09 | 2026-09-23 |
| CVE-2026-81963 | Microsoft Windows | 2026-09-08 | 2026-09-22 |
| CVE-2026-85880 | Microsoft Windows | 2026-09-08 | 2026-09-22 |
| CVE-2025-39964 | Linux Kernel | 2026-09-18 | 2026-09-21 |
| CVE-2026-53266 | Linux Kernel | 2026-09-18 | 2026-09-21 |
| CVE-2025-39682 | Linux Kernel | 2026-09-18 | 2026-09-21 |
| CVE-2026-58704 | Google Pixel | 2026-09-16 | 2026-09-19 |
| CVE-2026-76460 | Cisco Identity Services Engine | 2026-09-16 | 2026-09-19 |
| CVE-2026-87886 | Acronis Backup | 2026-09-16 | 2026-09-19 |
| CVE-2026-85046 | Google Chromium V8 | 2026-09-04 | 2026-09-18 |
| CVE-2026-76461 | Cisco Secure Email Gateway | 2026-09-14 | 2026-09-17 |
| CVE-2026-59822 | BerriAI LiteLLM | 2026-09-02 | 2026-09-16 |
| CVE-2026-48710 | Kludex Starlette | 2026-09-02 | 2026-09-16 |
| CVE-2026-84869 | ConnectWise ScreenConnect | 2026-09-11 | 2026-09-14 |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | 2026-09-11 | 2026-09-14 |
| CVE-2026-82078 | PaperCut NG/MF | 2026-08-31 | 2026-09-14 |
| CVE-2026-81578 | PaperCut NG/MF | 2026-08-31 | 2026-09-14 |
| CVE-2026-86060 | MikroTik RouterOS | 2026-09-10 | 2026-09-13 |
| CVE-2026-67277 | MikroTik RouterOS | 2026-09-10 | 2026-09-13 |
| CVE-2026-19490 | Citrix NetScaler | 2026-09-09 | 2026-09-12 |
| CVE-2025-25249 | Fortinet Multiple Products | 2026-09-09 | 2026-09-12 |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | 2026-09-12 |
| CVE-2026-75650 | Adobe Commerce and Magento | 2026-09-08 | 2026-09-11 |
| CVE-2026-86218 | N-able N-central | 2026-09-08 | 2026-09-11 |
| CVE-2026-66384 | JFrog Artifactory | 2026-08-27 | 2026-09-10 |
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professional | 2026-08-26 | 2026-09-09 |
| CVE-2015-3246 | Red Hat Libuser | 2026-08-26 | 2026-09-09 |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | 2026-08-26 | 2026-09-09 |
| CVE-2026-49869 | Kestra Kestra OSS | 2026-09-02 | 2026-09-05 |
| CVE-2026-82329 | JFrog Artifactory | 2026-09-02 | 2026-09-05 |
| CVE-2026-9586 | Sangoma Switchvox | 2026-09-02 | 2026-09-05 |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 2026-09-02 | 2026-09-05 |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 2026-09-02 | 2026-09-05 |
| CVE-2026-72530 | TrueConf Server | 2026-08-20 | 2026-09-03 |
| CVE-2026-64849 | MLflow MLflow | 2026-08-19 | 2026-09-02 |
| CVE-2023-49105 | ownCloud ownCloud | 2026-08-27 | 2026-08-30 |
| CVE-2026-53362 | Linux Kernel | 2026-08-27 | 2026-08-30 |
| CVE-2022-0995 | Linux Kernel | 2026-08-26 | 2026-08-29 |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 2026-08-26 | 2026-08-29 |
| CVE-2019-1068 | Microsoft SQL Server | 2026-08-26 | 2026-08-29 |
| CVE-2026-60004 | Gitea Gitea | 2026-08-25 | 2026-08-28 |
| CVE-2026-21962 | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in | 2026-08-24 | 2026-08-27 |
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | 2026-08-11 | 2026-08-25 |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 2026-08-24 |
| CVE-2026-72529 | TrueConf Server | 2026-08-20 | 2026-08-23 |
| CVE-2026-33824 | Microsoft Internet Key Exchange (IKE) Service Extensions | 2026-08-18 | 2026-08-21 |
| CVE-2026-59310 RANSOMWARE | Broadcom VMware vCenter | 2026-08-18 | 2026-08-21 |
| CVE-2026-55040 | Microsoft SharePoint | 2026-08-18 | 2026-08-21 |
| CVE-2026-65400 | Apple macOS | 2026-08-18 | 2026-08-21 |
| CVE-2025-62593 | Ray-Project Ray | 2026-08-17 | 2026-08-20 |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | 2026-08-11 | 2026-08-14 |
| CVE-2026-72898 | Metabase Metabase | 2026-08-11 | 2026-08-14 |
| CVE-2026-8037 | Progress LoadMaster | 2026-08-07 | 2026-08-10 |
| CVE-2025-68686 | Fortinet FortiOS | 2026-07-27 | 2026-08-10 |
| CVE-2026-63077 RANSOMWARE | JetBrains TeamCity | 2026-08-05 | 2026-08-08 |
| CVE-2026-18556 | N-able N-central | 2026-08-04 | 2026-08-07 |
| CVE-2026-34486 | Apache Tomcat | 2026-08-04 | 2026-08-07 |
| CVE-2026-9198 | IBM Langflow | 2026-08-04 | 2026-08-07 |
| CVE-2026-18577 | N-able N-central | 2026-08-03 | 2026-08-06 |
| CVE-2026-60137 | WordPress Core | 2026-07-21 | 2026-08-04 |
| CVE-2026-20316 RANSOMWARE | Cisco Secure Firewall Management Center (FMC) | 2026-07-29 | 2026-08-01 |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 2026-07-27 | 2026-07-30 |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 | 2026-07-15 | 2026-07-29 |
| CVE-2026-56155 | Microsoft Active Directory Federation Services | 2026-07-14 | 2026-07-28 |
| CVE-2026-16232 | Check Point SmartConsole | 2026-07-22 | 2026-07-25 |
| CVE-2026-50522 | Microsoft SharePoint | 2026-07-22 | 2026-07-25 |
| CVE-2026-63030 | WordPress Core | 2026-07-21 | 2026-07-24 |
| CVE-2026-0770 | Langflow Langflow | 2026-07-21 | 2026-07-24 |
| CVE-2021-27137 | DD-WRT DD-WRT | 2026-07-21 | 2026-07-24 |
| CVE-2026-58644 | Microsoft SharePoint | 2026-07-16 | 2026-07-19 |
| CVE-2026-25089 | Fortinet FortiSandbox | 2026-07-16 | 2026-07-19 |
| CVE-2026-39808 | Fortinet FortiSandbox | 2026-07-16 | 2026-07-19 |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 2026-07-18 |
| CVE-2026-56164 | Microsoft SharePoint Server | 2026-07-14 | 2026-07-17 |
| CVE-2026-15409 RANSOMWARE | SonicWall SMA1000 Appliances | 2026-07-14 | 2026-07-17 |
| CVE-2026-15410 RANSOMWARE | SonicWall SMA1000 Appliances | 2026-07-14 | 2026-07-17 |
| CVE-2008-4128 | Cisco IOS | 2026-07-13 | 2026-07-16 |
| CVE-2026-56291 | Balbooa Forms | 2026-07-10 | 2026-07-13 |
| CVE-2026-48939 | iCagenda iCagenda | 2026-07-10 | 2026-07-13 |
| CVE-2026-48908 | JoomShaper SP Page Builder | 2026-07-07 | 2026-07-10 |
| CVE-2026-55255 | Langflow Langflow | 2026-07-07 | 2026-07-10 |
| CVE-2026-56290 | Joomlack Page Builder | 2026-07-07 | 2026-07-10 |
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 2026-07-10 |
| CVE-2026-45659 RANSOMWARE | Microsoft SharePoint Server | 2026-07-01 | 2026-07-04 |
| CVE-2026-48558 | SimpleHelp SimpleHelp | 2026-06-29 | 2026-07-02 |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | 2026-06-15 | 2026-06-29 |
| CVE-2026-12569 RANSOMWARE | PTC Windchill and FlexPLM | 2026-06-25 | 2026-06-28 |
| CVE-2026-20230 | Cisco Unified Communications Manager | 2026-06-25 | 2026-06-28 |
| CVE-2025-67038 | Lantronix EDS5000 | 2026-06-23 | 2026-06-26 |
| CVE-2026-34910 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 |
| CVE-2026-34909 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 |
| CVE-2026-34908 | Ubiquiti UniFi OS | 2026-06-23 | 2026-06-26 |
| CVE-2026-11645 | Google Chromium V8 | 2026-06-09 | 2026-06-23 |
| CVE-2026-7473 | Arista Extensible Operating System | 2026-06-09 | 2026-06-23 |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager | 2026-06-09 | 2026-06-23 |
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | 2026-06-22 |
| CVE-2026-20253 | Splunk Enterprise | 2026-06-18 | 2026-06-21 |
| CVE-2026-48907 | Widget Factory Joomla Content Editor | 2026-06-16 | 2026-06-19 |
| CVE-2026-28318 | SolarWinds Serv-U | 2026-06-05 | 2026-06-19 |
| CVE-2026-54420 | LiteSpeed cPanel Plugin | 2026-06-15 | 2026-06-18 |
| CVE-2026-35273 RANSOMWARE | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 |
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | 2026-06-14 |
| CVE-2026-50751 RANSOMWARE | Check Point Security Gateway | 2026-06-08 | 2026-06-11 |
| CVE-2026-48027 RANSOMWARE | Nx Nx Console | 2026-05-27 | 2026-06-10 |
| CVE-2026-45321 RANSOMWARE | TanStack TanStack | 2026-05-27 | 2026-06-10 |
| CVE-2026-45247 | Mirasvit Mirasvit Full Page Cache Warmer | 2026-06-03 | 2026-06-06 |
| CVE-2022-0492 | Linux Kernel | 2026-06-02 | 2026-06-05 |
| CVE-2025-48595 | Android Framework | 2026-06-02 | 2026-06-05 |
| CVE-2024-21182 | Oracle WebLogic Server | 2026-06-01 | 2026-06-04 |
| CVE-2025-34291 | Langflow Langflow | 2026-05-21 | 2026-06-04 |
| CVE-2026-34926 | Trend Micro Apex One | 2026-05-21 | 2026-06-04 |
| CVE-2008-4250 | Microsoft Windows | 2026-05-20 | 2026-06-03 |
| CVE-2009-1537 | Microsoft DirectX | 2026-05-20 | 2026-06-03 |
| CVE-2009-3459 | Adobe Acrobat and Reader | 2026-05-20 | 2026-06-03 |
| CVE-2010-0249 | Microsoft Internet Explorer | 2026-05-20 | 2026-06-03 |
| CVE-2010-0806 | Microsoft Internet Explorer | 2026-05-20 | 2026-06-03 |
| CVE-2026-41091 | Microsoft Defender | 2026-05-20 | 2026-06-03 |
| CVE-2026-45498 | Microsoft Defender | 2026-05-20 | 2026-06-03 |
| CVE-2026-0257 RANSOMWARE | Palo Alto Networks PAN-OS | 2026-05-29 | 2026-06-01 |
| CVE-2026-8398 | Daemon Daemon Tools Lite | 2026-05-27 | 2026-05-30 |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 2026-05-26 | 2026-05-29 |
| CVE-2026-42897 | Microsoft Microsoft | 2026-05-15 | 2026-05-29 |
| CVE-2026-9082 | Drupal Core | 2026-05-22 | 2026-05-27 |
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 2026-05-14 | 2026-05-17 |
| CVE-2026-31431 | Linux Kernel | 2026-05-01 | 2026-05-15 |
| CVE-2024-1708 RANSOMWARE | ConnectWise ScreenConnect | 2026-04-28 | 2026-05-12 |
| CVE-2026-32202 | Microsoft Windows | 2026-04-28 | 2026-05-12 |
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | 2026-05-11 |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2026-05-10 |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 2026-05-06 | 2026-05-09 |
| CVE-2025-29635 | D-Link DIR-823X | 2026-04-24 | 2026-05-08 |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | 2026-04-24 | 2026-05-08 |
| CVE-2024-57728 RANSOMWARE | SimpleHelp SimpleHelp | 2026-04-24 | 2026-05-08 |
| CVE-2024-57726 RANSOMWARE | SimpleHelp SimpleHelp | 2026-04-24 | 2026-05-08 |
| CVE-2026-39987 | Marimo Marimo | 2026-04-23 | 2026-05-07 |
| CVE-2026-33825 RANSOMWARE | Microsoft Defender | 2026-04-22 | 2026-05-06 |
| CVE-2025-2749 | Kentico Kentico Xperience | 2026-04-20 | 2026-05-04 |
| CVE-2023-27351 RANSOMWARE | PaperCut NG/MF | 2026-04-20 | 2026-05-04 |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | 2026-04-20 | 2026-05-04 |
| CVE-2024-27199 RANSOMWARE | JetBrains TeamCity | 2026-04-20 | 2026-05-04 |
| CVE-2026-41940 RANSOMWARE | WebPros cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 2026-05-03 |
| CVE-2026-34197 | Apache ActiveMQ | 2026-04-16 | 2026-04-30 |
| CVE-2009-0238 | Microsoft Office | 2026-04-14 | 2026-04-28 |
| CVE-2026-32201 | Microsoft SharePoint Server | 2026-04-14 | 2026-04-28 |
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | 2026-04-13 | 2026-04-27 |
| CVE-2025-60710 RANSOMWARE | Microsoft Windows | 2026-04-13 | 2026-04-27 |
| CVE-2023-21529 RANSOMWARE | Microsoft Exchange Server | 2026-04-13 | 2026-04-27 |
| CVE-2023-36424 | Microsoft Windows | 2026-04-13 | 2026-04-27 |
| CVE-2020-9715 | Adobe Acrobat | 2026-04-13 | 2026-04-27 |
| CVE-2026-34621 | Adobe Acrobat and Reader | 2026-04-13 | 2026-04-27 |
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manger | 2026-04-20 | 2026-04-23 |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 2026-04-23 |
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 2026-04-23 |
| CVE-2026-21643 | Fortinet FortiClient EMS | 2026-04-13 | 2026-04-16 |
| CVE-2026-3502 | TrueConf Client | 2026-04-02 | 2026-04-16 |
| CVE-2026-5281 | Google Dawn | 2026-04-01 | 2026-04-15 |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | 2026-04-11 |
| CVE-2026-35616 | Fortinet FortiClient EMS | 2026-04-06 | 2026-04-09 |
| CVE-2026-33634 | Aquasecurity Trivy | 2026-03-26 | 2026-04-09 |
| CVE-2026-33017 | Langflow Langflow | 2026-03-25 | 2026-04-08 |
| CVE-2025-32432 | Craft CMS Craft CMS | 2026-03-20 | 2026-04-03 |
| CVE-2025-54068 | Laravel Livewire | 2026-03-20 | 2026-04-03 |
| CVE-2025-43510 | Apple Multiple Products | 2026-03-20 | 2026-04-03 |
| CVE-2025-43520 | Apple Multiple Products | 2026-03-20 | 2026-04-03 |
| CVE-2025-31277 | Apple Multiple Products | 2026-03-20 | 2026-04-03 |
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | 2026-04-02 |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 2026-04-01 |
| CVE-2025-53521 | F5 BIG-IP | 2026-03-27 | 2026-03-30 |
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | 2026-03-16 | 2026-03-30 |
| CVE-2026-3910 | Google Chromium V8 | 2026-03-13 | 2026-03-27 |
| CVE-2026-3909 | Google Skia | 2026-03-13 | 2026-03-27 |
| CVE-2017-7921 | Hikvision Multiple Products | 2026-03-05 | 2026-03-26 |
| CVE-2021-22681 | Rockwell Multiple Products | 2026-03-05 | 2026-03-26 |
| CVE-2023-43000 | Apple Multiple Products | 2026-03-05 | 2026-03-26 |
| CVE-2021-30952 | Apple Multiple Products | 2026-03-05 | 2026-03-26 |
| CVE-2023-41974 | Apple iOS and iPadOS | 2026-03-05 | 2026-03-26 |
| CVE-2025-68613 | n8n n8n | 2026-03-11 | 2026-03-25 |
| CVE-2026-22719 | Broadcom VMware Aria Operations | 2026-03-03 | 2026-03-24 |
| CVE-2026-21385 | Qualcomm Multiple Chipsets | 2026-03-03 | 2026-03-24 |
| CVE-2021-22054 | Omnissa Workspace One UEM | 2026-03-09 | 2026-03-23 |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | 2026-03-23 |
| CVE-2026-20131 RANSOMWARE | Cisco Secure Firewall Management Center (FMC) | 2026-03-19 | 2026-03-22 |
| CVE-2026-20963 | Microsoft SharePoint | 2026-03-18 | 2026-03-21 |
| CVE-2026-25108 | Soliton Systems K.K FileZen | 2026-02-24 | 2026-03-17 |
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 2026-03-13 |
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 2026-03-13 |
| CVE-2025-26399 RANSOMWARE | SolarWinds Web Help Desk | 2026-03-09 | 2026-03-12 |
| CVE-2021-22175 | GitLab GitLab | 2026-02-18 | 2026-03-11 |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | 2026-02-17 | 2026-03-10 |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | 2026-02-17 | 2026-03-10 |
| CVE-2008-0015 | Microsoft Windows | 2026-02-17 | 2026-03-10 |
| CVE-2026-2441 | Google Chromium | 2026-02-17 | 2026-03-10 |
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 2026-03-05 |
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 2026-03-05 |
| CVE-2025-15556 | Notepad++ Notepad++ | 2026-02-12 | 2026-03-05 |
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 2026-03-03 |
| CVE-2026-21525 | Microsoft Windows | 2026-02-10 | 2026-03-03 |
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 2026-03-03 |
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 2026-03-03 |
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2026-03-03 |
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 2026-03-03 |
| CVE-2022-20775 | Cisco SD-WAN | 2026-02-25 | 2026-02-27 |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | 2026-02-25 | 2026-02-27 |
| CVE-2025-11953 | React Native Community CLI | 2026-02-05 | 2026-02-26 |
| CVE-2026-24423 RANSOMWARE | SmarterTools SmarterMail | 2026-02-05 | 2026-02-26 |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | 2026-02-03 | 2026-02-24 |
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 2026-02-24 |
| CVE-2019-19006 | Sangoma FreePBX | 2026-02-03 | 2026-02-24 |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | 2026-02-18 | 2026-02-21 |
| CVE-2026-1731 RANSOMWARE | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 2026-02-16 |
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | 2026-02-16 |
| CVE-2025-52691 RANSOMWARE | SmarterTools SmarterMail | 2026-01-26 | 2026-02-16 |
| CVE-2026-23760 RANSOMWARE | SmarterTools SmarterMail | 2026-01-26 | 2026-02-16 |
| CVE-2026-24061 | GNU InetUtils | 2026-01-26 | 2026-02-16 |
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 2026-02-16 |
| CVE-2025-40536 | SolarWinds Web Help Desk | 2026-02-12 | 2026-02-15 |
| CVE-2024-37079 | Broadcom VMware vCenter Server | 2026-01-23 | 2026-02-13 |
| CVE-2025-68645 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-01-22 | 2026-02-12 |
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | 2026-02-12 |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 2026-02-12 |
| CVE-2025-54313 | Prettier eslint-config-prettier | 2026-01-22 | 2026-02-12 |
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 2026-02-11 |
| CVE-2025-40551 | SolarWinds Web Help Desk | 2026-02-03 | 2026-02-06 |
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 2026-02-03 |
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 2026-02-02 |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 2026-02-01 |
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 2026-01-30 |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 2026-01-28 |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 2026-01-07 | 2026-01-28 |
| CVE-2025-14847 | MongoDB MongoDB and MongoDB Server | 2025-12-29 | 2026-01-19 |
| CVE-2023-52163 | Digiever DS-2105 Pro | 2025-12-22 | 2026-01-12 |
| CVE-2025-59374 | ASUS Live Update | 2025-12-17 | 2026-01-07 |
| CVE-2025-14611 | Gladinet CentreStack and Triofox | 2025-12-15 | 2026-01-05 |
| CVE-2025-43529 | Apple Multiple Products | 2025-12-15 | 2026-01-05 |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | 2025-12-12 | 2026-01-02 |
| CVE-2025-14174 | Google Chromium | 2025-12-12 | 2026-01-02 |
| CVE-2025-58360 | OSGeo GeoServer | 2025-12-11 | 2026-01-01 |
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 2025-12-30 |
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2025-12-30 |
| CVE-2022-37055 | D-Link Routers | 2025-12-08 | 2025-12-29 |
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 2025-12-29 |
| CVE-2025-14733 RANSOMWARE | WatchGuard Firebox | 2025-12-19 | 2025-12-26 |
| CVE-2025-40602 | SonicWall SMA1000 appliance | 2025-12-17 | 2025-12-24 |
| CVE-2025-20393 | Cisco Multiple Products | 2025-12-17 | 2025-12-24 |
| CVE-2021-26828 | OpenPLC ScadaBR | 2025-12-03 | 2025-12-24 |
| CVE-2025-59718 | Fortinet Multiple Products | 2025-12-16 | 2025-12-23 |
| CVE-2025-48633 | Android Framework | 2025-12-02 | 2025-12-23 |
| CVE-2025-48572 | Android Framework | 2025-12-02 | 2025-12-23 |
Cite this page: Is It On KEV? - KEV deadlines due this week. Data: CISA Known Exploited Vulnerabilities catalog, version 2026.11.10 (accessed 2026-11-11). https://isitonkev.com/due-this-week.html