CISA: software flaws known to be exploited in real attacks.
Tuesday 26 May 2026
1 record- Vulnerability
cPanel Plugin Privilege Escalation Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48172
Friday 22 May 2026
1 record- Vulnerability
Core SQL Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-9082
Thursday 21 May 2026
2 records- Vulnerability
Apex One (On-Premise) Directory Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-34926
- Vulnerability
Origin Validation Error Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-34291
Wednesday 20 May 2026
7 records- Vulnerability
Defender Link Following Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-41091
- Vulnerability
Windows Buffer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2008-4250
- Vulnerability
Acrobat and Reader Heap-Based Buffer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2009-3459
- Vulnerability
Internet Explorer Use-After-Free Vulnerability added to the US list of exploited vulnerabilities
CVE-2010-0806
- Vulnerability
Defender Denial of Service Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-45498
- Vulnerability
DirectX NULL Byte Overwrite Vulnerability added to the US list of exploited vulnerabilities
CVE-2009-1537
- Vulnerability
Internet Explorer Use-After-Free Vulnerability added to the US list of exploited vulnerabilities
CVE-2010-0249
Friday 15 May 2026
1 record- Vulnerability
Exchange Server Cross-Site Scripting Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-42897
Thursday 14 May 2026
1 record- Vulnerability
Catalyst SD-WAN Controller Authentication Bypass Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-20182
Friday 8 May 2026
1 record- Vulnerability
LiteLLM SQL Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-42208