CISA: software flaws known to be exploited in real attacks.
Monday 8 June 2026
2 records- Vulnerability
Security Gateway Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-50751. Known to be used in ransomware campaigns.
- Vulnerability
LiteLLM Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-42271
Friday 5 June 2026
1 record- Vulnerability
Serv-U Uncontrolled Resource Consumption Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-28318
Wednesday 3 June 2026
1 record- Vulnerability
Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-45247
Tuesday 2 June 2026
2 records- Vulnerability
Kernel Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2022-0492
- Vulnerability
Framework Integer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-48595
Monday 1 June 2026
1 record- Vulnerability
WebLogic Server Unspecified Vulnerability added to the US list of exploited vulnerabilities
CVE-2024-21182
Friday 29 May 2026
1 record- Vulnerability
PAN-OS Authentication Bypass Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-0257. Known to be used in ransomware campaigns.
Wednesday 27 May 2026
3 records- Vulnerability
Unspecified Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-45321. Known to be used in ransomware campaigns.
- Vulnerability
Console Embedded Malicious Code Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48027. Known to be used in ransomware campaigns.
- Vulnerability
Tools Lite Embedded Malicious Code Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-8398