Known Exploited Vulnerabilities

9 CVEs confirmed actively exploited (CISA KEV)

These vulnerabilities are listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. Federal agencies are required to patch them within mandated timelines. All organizations should prioritize remediation immediately.

CVE-2026-32201

Apr 14, 2026

Medium (6.5)

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network....

Read Advisory

CVE-2026-34197

Apr 7, 2026

High (8.8)

Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bri...

Read Advisory

CVE-2026-35616

Apr 4, 2026

Critical (9.8)

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests....

Read Advisory

CVE-2026-3909

Mar 13, 2026

High (8.8)

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)...

Read Advisory

CVE-2026-3910

Mar 13, 2026

High (8.8)

Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hi...

Read Advisory

CVE-2026-20131

Mar 4, 2026

Critical (10.0)

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root o...

Read Advisory

CVE-2026-20127

Feb 25, 2026

Critical (10.0)

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, r...

Read Advisory

CVE-2026-22769

Feb 17, 2026

Critical (10.0)

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of...

Read Advisory

CVE-2009-0238

Feb 25, 2009

High (8.8)

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in ...

Read Advisory

Never Miss a Critical Alert

CVE advisories, breach reports, and threat intel — delivered daily to your inbox.