Added to KEV in 2026-04

CVE-2026-41940 – WebPros cPanel & WHM and WP2 (WordPress Squared) (added 2026-04-30)
CVE-2026-32202 – Microsoft Windows (added 2026-04-28)
CVE-2024-1708 – ConnectWise ScreenConnect (added 2026-04-28)
CVE-2025-29635 – D-Link DIR-823X (added 2026-04-24)
CVE-2024-7399 – Samsung MagicINFO 9 Server (added 2026-04-24)
CVE-2024-57728 – SimpleHelp SimpleHelp (added 2026-04-24)
CVE-2024-57726 – SimpleHelp SimpleHelp (added 2026-04-24)
CVE-2026-39987 – Marimo Marimo (added 2026-04-23)
CVE-2026-33825 – Microsoft Defender (added 2026-04-22)
CVE-2026-20133 – Cisco Catalyst SD-WAN Manager (added 2026-04-20)
CVE-2026-20128 – Cisco Catalyst SD-WAN Manager (added 2026-04-20)
CVE-2026-20122 – Cisco Catalyst SD-WAN Manger (added 2026-04-20)
CVE-2025-48700 – Synacor Zimbra Collaboration Suite (ZCS) (added 2026-04-20)
CVE-2025-32975 – Quest KACE Systems Management Appliance (SMA) (added 2026-04-20)
CVE-2025-2749 – Kentico Kentico Xperience (added 2026-04-20)
CVE-2024-27199 – JetBrains TeamCity (added 2026-04-20)
CVE-2023-27351 – PaperCut NG/MF (added 2026-04-20)
CVE-2026-34197 – Apache ActiveMQ (added 2026-04-16)
CVE-2026-32201 – Microsoft SharePoint Server (added 2026-04-14)
CVE-2009-0238 – Microsoft Office (added 2026-04-14)
CVE-2026-34621 – Adobe Acrobat and Reader (added 2026-04-13)
CVE-2026-21643 – Fortinet FortiClient EMS (added 2026-04-13)
CVE-2025-60710 – Microsoft Windows (added 2026-04-13)
CVE-2023-36424 – Microsoft Windows (added 2026-04-13)
CVE-2023-21529 – Microsoft Exchange Server (added 2026-04-13)
CVE-2020-9715 – Adobe Acrobat (added 2026-04-13)
CVE-2012-1854 – Microsoft Visual Basic for Applications (VBA) (added 2026-04-13)
CVE-2026-1340 – Ivanti Endpoint Manager Mobile (EPMM) (added 2026-04-08)
CVE-2026-35616 – Fortinet FortiClient EMS (added 2026-04-06)
CVE-2026-3502 – TrueConf Client (added 2026-04-02)
CVE-2026-5281 – Google Dawn (added 2026-04-01)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).