KEV Explained

Plain pages for all 1758 CVEs in the CISA Known Exploited Vulnerabilities catalog (catalog version 2026.10.26). 361 are flagged for known ransomware campaign use. Only facts from the feed are shown; see NVD for scores.

Latest additions

• CVE-2026-109619 – PHP Group PHP (added 2026-10-26)
• CVE-2026-109618 – PHP Group PHP (added 2026-10-26)
• CVE-2026-114625 – Arista VeloCloud Orchestrator (added 2026-10-23)
• CVE-2026-110447 – Collabora Collabora Online – Built-in CODE Server (added 2026-10-23)
• CVE-2026-96656 – Plex Media Server (added 2026-10-20)
• CVE-2026-96655 – Plex Media Server (added 2026-10-20)
• CVE-2026-96654 – Plex Media Server (added 2026-10-20)
• CVE-2026-96652 – Plex Media Server (added 2026-10-20)
• CVE-2026-110936 – Siemens Software Center (added 2026-10-20)
• CVE-2026-106931 – EG Secure Solutions SiteGuard Server Edition (added 2026-10-20)
• CVE-2026-102764 – BeyondTrust Remote Support (added 2026-10-16)
• CVE-2025-61624 – Fortinet Multiple Products (added 2026-10-16)
• CVE-2026-21589 – Atlassian Multiple Products (added 2026-10-15)
• CVE-2026-76519 – Cisco Secure Email Gateway (added 2026-10-14)
• CVE-2026-105134 – Ahsay AhsayCBS (added 2026-10-14)
• CVE-2026-105133 – Ahsay AhsayCBS (added 2026-10-14)
• CVE-2026-0322 – Palo Alto Networks PAN-OS (added 2026-10-14)
• CVE-2026-96951 – Microsoft Windows (added 2026-10-13)
• CVE-2026-104935 – Ivanti Connect Secure (added 2026-10-13)
• CVE-2023-22894 – Strapi Strapi (added 2026-10-08)
• CVE-2021-3199 – ONLYOFFICE Docs (added 2026-10-08)
• CVE-2016-3081 – Apache Struts (added 2026-10-08)
• CVE-2015-5477 – ISC BIND (added 2026-10-08)
• CVE-2015-3306 – ProFTPD ProFTPD (added 2026-10-08)
• CVE-2026-88779 – Citrix NetScaler (added 2026-10-04)

Patching one CVE is step one. Harden your cloud identity baseline too: Free M365 & Google Workspace hardening checklist (Runbook Foundry).