CYBER DEFENSE MONITORCyronix Intelligence Core--:--:-- UTCELEVATED
Secure PerimeterCYBER DEFENSE MONITORCyronix Intelligence CoreSearch the CISA Known Exploited Vulnerabilities (KEV) catalog — the authoritative list of CVEs confirmed to be under active attack in the wild. Filter by vendor or search any CVE, product, or keyword to see what your team should patch first.
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH · Zammad
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH · Zammad
Fortinet FortiMail Path Traversal Vulnerability
Fortinet · FortiMail
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Cisco · Catalyst SD-WAN Manager
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple · Multiple Products
Citrix NetScaler Improper Input Validation Vulnerability
Citrix · NetScaler
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler
WordPress Core Remote File Inclusion Vulnerability
WordPress · Core
Microsoft SharePoint Code Injection Vulnerability
Microsoft · SharePoint
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
MikroTik · RouterOS
Adobe Commerce and Magento Incorrect Authorization Vulnerability
Adobe · Commerce and Magento
WSO2 Multiple Products Path Traversal Vulnerability
WSO2 · Multiple Products
Check Point Multiple Products Improper Certificate Validation Vulnerability
Check Point · Multiple Products
Check Point Multiple Products Path Traversal Vulnerability
Check Point · Multiple Products
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 · BIG-IP APM
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista · VeloCloud Orchestrator
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel · GS1900 Series Switches
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Linux · Kernel
Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel
Linux Kernel Race Condition Vulnerability
Linux · Kernel
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco · Identity Services Engine
Google Pixel Improper Authorization Vulnerability
Google · Pixel
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco · Secure Email Gateway
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab · Community Edition and Enterprise Edition
JFrog Artifactory Improper Authentication Vulnerability
JFrog · Artifactory
JFrog Artifactory Incorrect Authorization Vulnerability
JFrog · Artifactory
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise · ScreenConnect
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik · RouterOS
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
MikroTik · RouterOS
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
Google Chromium V8 Out of Bounds Write Vulnerability
Google · Chromium V8
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Fortinet · Multiple Products
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Citrix · NetScaler
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows
N-able N-central Static Code Injection Vulnerability
N-able · N-central
Microsoft Windows Link Following Vulnerability
Microsoft · Windows
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe · Commerce and Magento
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall · SMA1000 Appliances
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall · SMA1000 Appliances
Sangoma Switchvox SQL Injection Vulnerability
Sangoma · Switchvox
JFrog Artifactory Improper Authentication Vulnerability
JFrog · Artifactory
Kestra OSS OS Command Injection Vulnerability
Kestra · Kestra OSS
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex · Starlette
BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI · LiteLLM
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
PaperCut · NG/MF
PaperCut NG/MF Unsafe Reflection Vulnerability
PaperCut · NG/MF
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog · Artifactory
Source: CISA Known Exploited Vulnerabilities catalog · 50 newest entries · updated Oct 5, 2026, 7:44 AM UTC-agnostic
Most organizations have thousands of open vulnerabilities and cannot patch them all at once. The CISA KEV catalog cuts through the noise: every entry is a vulnerability that attackers are actively exploiting, not a theoretical risk. Prioritizing these first measurably reduces the window adversaries can use against you. For UAE SOC teams, cross-referencing KEV entries against your asset inventory is one of the highest-leverage steps in a patch program. Read more in our UAE threat landscape report or talk to our team.
The Known Exploited Vulnerabilities catalog is maintained by the U.S. Cybersecurity and Infrastructure Security Agency (CISA). It lists CVEs that have been confirmed to be exploited by real-world attackers, making it a prioritized to-patch list rather than a generic vulnerability database.
This tool pulls the newest entries from the live CISA KEV feed and caches them for six hours. Use the Refresh button to fetch the latest snapshot on demand. Each result links to the full NVD record for that CVE.
Yes. It is completely free and requires no signup. Search runs in your browser against a cached copy of the public CISA catalog.
Match the CVEs shown here against the software and appliances in your environment — VPN gateways, firewalls, and remote-access tools appear frequently. Any match that is internet-facing should be patched or mitigated as a priority, ahead of vulnerabilities that are not being actively exploited.