DuyTa/cve-kgrag-db huggingface dataset:
Known Exploited Vulnerability: CVE-2025-24813
Vendor/Project: Apache
Product: Tomcat
Vulnerability Name: Apache Tomcat Path Equivalence Vulnerability
Date Added to KEV: 2025-04-01
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-04-22
Known Ransomware Campaign Use: Unknown
Notes: ['This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-24813']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-20700
Vendor/Project: Cisco
Product: Small Business RV160, RV260, RV340, and RV345 Series Routers
Vulnerability Name: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-20700']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-46805
Vendor/Project: Ivanti
Product: Connect Secure and Policy Secure
Vulnerability Name: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
Date Added to KEV: 2024-01-10
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-01-22
Known Ransomware Campaign Use: Known
Notes: ['Please apply mitigations per vendor instructions. For more information, please see: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-46805']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-26169
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Date Added to KEV: 2024-06-13
Required Action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Due Date: 2024-07-04
Known Ransomware Campaign Use: Known
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169', ' https://nvd.nist.gov/vuln/detail/CVE-2024-26169']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-38950
Vendor/Project: ZKTeco
Product: BioTime
Vulnerability Name: ZKTeco BioTime Path Traversal Vulnerability
Date Added to KEV: 2025-05-19
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-06-09
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.zkteco.com/en/Security_Bulletinsibs ', ' https://nvd.nist.gov/vuln/detail/CVE-2023-38950']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-11043
Vendor/Project: PHP
Product: FastCGI Process Manager (FPM)
Vulnerability Name: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-11043']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-23209
Vendor/Project: Craft CMS
Product: Craft CMS
Vulnerability Name: Craft CMS Code Injection Vulnerability
Date Added to KEV: 2025-02-20
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-03-13
Known Ransomware Campaign Use: Unknown
Notes: ['https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-23209']
Severity: Critical
Known Exploited Vulnerability: CVE-2026-20128
Vendor/Project: Cisco
Product: Catalyst SD-WAN Manager
Vulnerability Name: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Date Added to KEV: 2026-04-20
Required Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Due Date: 2026-04-23
Known Ransomware Campaign Use: Unknown
Notes: ['CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ', ' https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ', ' https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ', ' https://nvd.nist.gov/vuln/detail/CVE-2026-20128']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-33063
Vendor/Project: Qualcomm
Product: Multiple Chipsets
Vulnerability Name: Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Date Added to KEV: 2023-12-05
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Due Date: 2023-12-26
Known Ransomware Campaign Use: Unknown
Notes: ['This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a, https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110', '  https://nvd.nist.gov/vuln/detail/CVE-2023-33063']
Severity: Critical
Known Exploited Vulnerability: CVE-2015-1187
Vendor/Project: D-Link and TRENDnet
Product: Multiple Devices
Vulnerability Name: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
Date Added to KEV: 2022-03-25
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2015-1187']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-15556
Vendor/Project: Notepad++
Product: Notepad++
Vulnerability Name: Notepad++ Download of Code Without Integrity Check Vulnerability
Date Added to KEV: 2026-02-12
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-03-05
Known Ransomware Campaign Use: Unknown
Notes: ['https://notepad-plus-plus.org/news/clarification-security-incident/ ', ' https://community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-15556']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-14174
Vendor/Project: Google
Product: Chromium
Vulnerability Name: Google Chromium Out of Bounds Memory Access Vulnerability
Date Added to KEV: 2025-12-12
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-01-02
Known Ransomware Campaign Use: Unknown
Notes: ['https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html ', ' https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-14174']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-4063
Vendor/Project: Sierra Wireless
Product: AirLink ALEOS
Vulnerability Name: Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
Date Added to KEV: 2025-12-12
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-01-02
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.cisa.gov/news-events/ics-advisories/icsa-19-122-03 ', ' https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-003 ', ' https://source.sierrawireless.com/resources/airlink/hardware_reference_docs/airlink_es450_eol ', ' https://nvd.nist.gov/vuln/detail/CVE-2018-4063']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-1273
Vendor/Project: VMware Tanzu
Product: Spring Data Commons
Vulnerability Name: VMware Tanzu Spring Data Commons Property Binder Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-1273']
Severity: Critical
Known Exploited Vulnerability: CVE-2013-1690
Vendor/Project: Mozilla
Product: Firefox and Thunderbird
Vulnerability Name: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Date Added to KEV: 2022-03-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-18
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2013-1690']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-27065
Vendor/Project: Microsoft
Product: Exchange Server
Vulnerability Name: Microsoft Exchange Server Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ["Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-27065"]
Severity: Critical
Known Exploited Vulnerability: CVE-2024-7593
Vendor/Project: Ivanti
Product: Virtual Traffic Manager
Vulnerability Name: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
Date Added to KEV: 2024-09-24
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-10-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-7593']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-35587
Vendor/Project: Oracle
Product: Fusion Middleware
Vulnerability Name: Oracle Fusion Middleware Unspecified Vulnerability
Date Added to KEV: 2022-11-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-12-19
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.oracle.com/security-alerts/cpujan2022.html', ' https://nvd.nist.gov/vuln/detail/CVE-2021-35587']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-21338
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
Date Added to KEV: 2024-03-04
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-03-25
Known Ransomware Campaign Use: Known
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338', ' https://nvd.nist.gov/vuln/detail/CVE-2024-21338']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-49039
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Date Added to KEV: 2024-11-12
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-12-03
Known Ransomware Campaign Use: Known
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-49039']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-8394
Vendor/Project: Zoho
Product: ManageEngine
Vulnerability Name: Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-8394']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-37055
Vendor/Project: D-Link
Product: Routers
Vulnerability Name: D-Link Routers Buffer Overflow Vulnerability
Date Added to KEV: 2025-12-08
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-12-29
Known Ransomware Campaign Use: Unknown
Notes: ['https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308 ', ' https://nvd.nist.gov/vuln/detail/CVE-2022-37055']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-15107
Vendor/Project: Webmin
Product: Webmin
Vulnerability Name: Webmin Command Injection Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-15107']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-27915
Vendor/Project: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Vulnerability Name: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Date Added to KEV: 2025-10-07
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-10-28
Known Ransomware Campaign Use: Unknown
Notes: ['https://wiki.zimbra.com/wiki/Security_Center ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-27915']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-1054
Vendor/Project: Microsoft
Product: Win32k
Vulnerability Name: Microsoft Win32k Privilege Escalation Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-1054']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-23397
Vendor/Project: Microsoft
Product: Office
Vulnerability Name: Microsoft Office Outlook Privilege Escalation Vulnerability
Date Added to KEV: 2023-03-14
Required Action: Apply updates per vendor instructions.
Due Date: 2023-04-04
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-23397, https://msrc.microsoft.com/blog/2023/03/microsoft-mitigates-outlook-elevation-of-privilege-vulnerability/, ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-23397']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-16009
Vendor/Project: Google
Product: Chromium V8
Vulnerability Name: Google Chromium V8 Type Confusion Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-16009']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-3493
Vendor/Project: Linux
Product: Kernel
Vulnerability Name: Linux Kernel Privilege Escalation Vulnerability
Date Added to KEV: 2022-10-20
Required Action: Apply updates per vendor instructions.
Due Date: 2022-11-10
Known Ransomware Campaign Use: Unknown
Notes: ['https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52', ' https://nvd.nist.gov/vuln/detail/CVE-2021-3493']
Severity: Critical
Known Exploited Vulnerability: CVE-2013-1347
Vendor/Project: Microsoft
Product: Internet Explorer
Vulnerability Name: Microsoft Internet Explorer Remote Code Execution Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2013-1347']
Severity: Critical
Known Exploited Vulnerability: CVE-2008-2992
Vendor/Project: Adobe
Product: Acrobat and Reader
Vulnerability Name: Adobe Reader and Acrobat Input Validation Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2008-2992']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-0111
Vendor/Project: Palo Alto Networks
Product: PAN-OS
Vulnerability Name: Palo Alto Networks PAN-OS File Read Vulnerability
Date Added to KEV: 2025-02-20
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-03-13
Known Ransomware Campaign Use: Unknown
Notes: ['https://security.paloaltonetworks.com/CVE-2025-0111 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-0111']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-13161
Vendor/Project: Ivanti
Product: Endpoint Manager (EPM)
Vulnerability Name: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Date Added to KEV: 2025-03-10
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-03-31
Known Ransomware Campaign Use: Unknown
Notes: ['https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-13161']
Severity: Critical
Known Exploited Vulnerability: CVE-2015-1701
Vendor/Project: Microsoft
Product: Win32k
Vulnerability Name: Microsoft Win32k Privilege Escalation Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2015-1701']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-0808
Vendor/Project: Microsoft
Product: Win32k
Vulnerability Name: Microsoft Win32k Privilege Escalation Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-0808']
Severity: Critical
Known Exploited Vulnerability: CVE-2011-0609
Vendor/Project: Adobe
Product: Flash Player
Vulnerability Name: Adobe Flash Player Unspecified Vulnerability
Date Added to KEV: 2022-06-08
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Due Date: 2022-06-22
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2011-0609']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-23113
Vendor/Project: Fortinet
Product: Multiple Products
Vulnerability Name: Fortinet Multiple Products Format String Vulnerability
Date Added to KEV: 2024-10-09
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-10-30
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.fortiguard.com/psirt/FG-IR-24-029 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-23113']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-2294
Vendor/Project: WebRTC
Product: WebRTC
Vulnerability Name: WebRTC Heap Buffer Overflow Vulnerability
Date Added to KEV: 2022-08-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-09-15
Known Ransomware Campaign Use: Known
Notes: ['https://groups.google.com/g/discuss-webrtc/c/5KBtZx2gvcQ', '  https://nvd.nist.gov/vuln/detail/CVE-2022-2294']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-66644
Vendor/Project: Array Networks 
Product: ArrayOS AG
Vulnerability Name: Array Networks ArrayOS AG OS Command Injection Vulnerability
Date Added to KEV: 2025-12-08
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-12-29
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/ag.html ', ' https://www.jpcert.or.jp/at/2025/at250024.html ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-66644']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-1782
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products Race Condition Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-1782']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-41993
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products WebKit Code Execution Vulnerability
Date Added to KEV: 2023-09-25
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-10-16
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.apple.com/en-us/HT213926, https://support.apple.com/en-us/HT213927, https://support.apple.com/en-us/HT213930', '  https://nvd.nist.gov/vuln/detail/CVE-2023-41993']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-46747
Vendor/Project: F5
Product: BIG-IP Configuration Utility
Vulnerability Name: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
Date Added to KEV: 2023-10-31
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-11-21
Known Ransomware Campaign Use: Known
Notes: ['https://my.f5.com/manage/s/article/K000137353', '   https://nvd.nist.gov/vuln/detail/CVE-2023-46747']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-8515
Vendor/Project: DrayTek
Product: Multiple Vigor Routers
Vulnerability Name: Multiple DrayTek Vigor Routers Web Management Page Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-8515']
Severity: Critical
Known Exploited Vulnerability: CVE-2014-8361
Vendor/Project: Realtek
Product: SDK
Vulnerability Name: Realtek SDK Improper Input Validation Vulnerability
Date Added to KEV: 2023-09-18
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-10-09
Known Ransomware Campaign Use: Unknown
Notes: ['https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055', ' https://nvd.nist.gov/vuln/detail/CVE-2014-8361']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-30633
Vendor/Project: Google
Product: Chromium Indexed DB API
Vulnerability Name: Google Chromium Indexed DB API Use-After-Free Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-30633']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-5135
Vendor/Project: SonicWall
Product: SonicOS
Vulnerability Name: SonicWall SonicOS Buffer Overflow Vulnerability
Date Added to KEV: 2022-03-15
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-05
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-5135']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-25181
Vendor/Project: Advantive
Product: VeraCore
Vulnerability Name:  Advantive VeraCore SQL Injection Vulnerability
Date Added to KEV: 2025-03-10
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-03-31
Known Ransomware Campaign Use: Unknown
Notes: ['https://advantive.my.site.com/support/s/article/Veracore-Release-Notes-2025-1-1-3 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-25181']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-4990
Vendor/Project: Adobe
Product: Acrobat and Reader
Vulnerability Name: Adobe Acrobat and Reader Double Free Vulnerability
Date Added to KEV: 2022-06-08
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-22
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-4990']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-24363
Vendor/Project: TP-Link
Product: TL-WA855RE
Vulnerability Name: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
Date Added to KEV: 2025-09-02
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-09-23
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.tp-link.com/us/home-networking/range-extender/tl-wa855re/#overview ', ' https://www.tp-link.com/us/support/download/tl-wa855re/#FAQs ', ' https://nvd.nist.gov/vuln/detail/CVE-2020-24363']
Severity: Critical
Known Exploited Vulnerability: CVE-2026-20127
Vendor/Project: Cisco
Product: Catalyst SD-WAN Controller and Manager
Vulnerability Name: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
Date Added to KEV: 2026-02-25
Required Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Due Date: 2026-02-27
Known Ransomware Campaign Use: Unknown
Notes: ['CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ', ' https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ', ' https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk ', ' https://nvd.nist.gov/vuln/detail/CVE-2026-20127']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-33739
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-33739']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-49706
Vendor/Project: Microsoft
Product: SharePoint
Vulnerability Name: Microsoft SharePoint Improper Authentication Vulnerability
Date Added to KEV: 2025-07-22
Required Action: Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Due Date: 2025-07-23
Known Ransomware Campaign Use: Known
Notes: ['CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770 ', ' https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ', ' https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49706 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-49706']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-0151
Vendor/Project: Cisco
Product: IOS and IOS XE Software
Vulnerability Name: Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-0151']
Severity: Critical
Known Exploited Vulnerability: CVE-2010-1297
Vendor/Project: Adobe
Product: Flash Player
Vulnerability Name: Adobe Flash Player Memory Corruption Vulnerability
Date Added to KEV: 2022-06-08
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Due Date: 2022-06-22
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2010-1297']
Severity: Critical
Known Exploited Vulnerability: CVE-2014-0130
Vendor/Project: Rails
Product: Ruby on Rails
Vulnerability Name: Ruby on Rails Directory Traversal Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2014-0130']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-33009
Vendor/Project: Zyxel
Product: Multiple Firewalls
Vulnerability Name: Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Date Added to KEV: 2023-06-05
Required Action: Apply updates per vendor instructions.
Due Date: 2023-06-26
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls', '  https://nvd.nist.gov/vuln/detail/CVE-2023-33009']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-35211
Vendor/Project: SolarWinds
Product: Serv-U
Vulnerability Name: SolarWinds Serv-U Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-35211']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-0802
Vendor/Project: Microsoft
Product: Office
Vulnerability Name: Microsoft Office Memory Corruption Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-0802']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-20500
Vendor/Project: D-Link
Product: DWL-2600AP Access Point
Vulnerability Name: D-Link DWL-2600AP Access Point Command Injection Vulnerability
Date Added to KEV: 2023-06-29
Required Action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Due Date: 2023-07-20
Known Ransomware Campaign Use: Unknown
Notes: ['https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10113', ' https://nvd.nist.gov/vuln/detail/CVE-2019-20500']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-1870
Vendor/Project: Apple
Product: iOS, iPadOS, and macOS
Vulnerability Name: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-1870']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-9805
Vendor/Project: Apache
Product: Struts
Vulnerability Name: Apache Struts Deserialization of Untrusted Data Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-9805']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-9680
Vendor/Project: Mozilla
Product: Firefox
Vulnerability Name: Mozilla Firefox Use-After-Free Vulnerability
Date Added to KEV: 2024-10-15
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-11-05
Known Ransomware Campaign Use: Known
Notes: ['https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-9680']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-38163
Vendor/Project: SAP
Product: NetWeaver
Vulnerability Name: SAP NetWeaver Unrestricted File Upload Vulnerability
Date Added to KEV: 2022-06-09
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-30
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-38163']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-7483
Vendor/Project: SonicWall
Product: SMA100
Vulnerability Name: SonicWall SMA100 Directory Traversal Vulnerability
Date Added to KEV: 2022-03-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-18
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-7483']
Severity: Critical
Known Exploited Vulnerability: CVE-2026-21525
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows NULL Pointer Dereference Vulnerability
Date Added to KEV: 2026-02-10
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-03-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21525 ', ' https://nvd.nist.gov/vuln/detail/CVE-2026-21525']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-22991
Vendor/Project: F5
Product: BIG-IP Traffic Management Microkernel
Vulnerability Name: F5 BIG-IP Traffic Management Microkernel Buffer Overflow
Date Added to KEV: 2022-01-18
Required Action: Apply updates per vendor instructions.
Due Date: 2022-02-01
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-22991']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-1472
Vendor/Project: Microsoft
Product: Netlogon
Vulnerability Name: Microsoft Netlogon Privilege Escalation Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ["Reference CISA's ED 20-04 (https://www.cisa.gov/news-events/directives/ed-20-04-mitigate-netlogon-elevation-privilege-vulnerability-august-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-04. https://nvd.nist.gov/vuln/detail/CVE-2020-1472"]
Severity: Critical
Known Exploited Vulnerability: CVE-2018-0174
Vendor/Project: Cisco
Product: IOS XE Software
Vulnerability Name: Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-0174']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-27930
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products Memory Corruption Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-27930']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-8195
Vendor/Project: Citrix
Product: Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
Vulnerability Name: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-8195']
Severity: Critical
Known Exploited Vulnerability: CVE-2016-0984
Vendor/Project: Adobe
Product: Flash Player and AIR
Vulnerability Name: Adobe Flash Player and AIR Use-After-Free Vulnerability
Date Added to KEV: 2022-05-25
Required Action: The impacted products are end-of-life and should be disconnected if still in use.
Due Date: 2022-06-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2016-0984']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-0708
Vendor/Project: Microsoft
Product: Remote Desktop Services
Vulnerability Name: Microsoft Remote Desktop Services Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-0708']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-27924
Vendor/Project: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Vulnerability Name: Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Date Added to KEV: 2022-08-04
Required Action: Apply updates per vendor instructions.
Due Date: 2022-08-25
Known Ransomware Campaign Use: Known
Notes: ['https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24.1#Security_Fixes', '  https://nvd.nist.gov/vuln/detail/CVE-2022-27924']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-21971
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Runtime Remote Code Execution Vulnerability
Date Added to KEV: 2022-08-18
Required Action: Apply updates per vendor instructions.
Due Date: 2022-09-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21971', '  https://nvd.nist.gov/vuln/detail/CVE-2022-21971']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-4947
Vendor/Project: Google
Product: Chromium V8
Vulnerability Name: Google Chromium V8 Type Confusion Vulnerability
Date Added to KEV: 2024-05-20
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-06-10
Known Ransomware Campaign Use: Unknown
Notes: ['https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html', ' https://nvd.nist.gov/vuln/detail/CVE-2024-4947']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-25296
Vendor/Project: Nagios
Product: Nagios XI
Vulnerability Name: Nagios XI OS Command Injection
Date Added to KEV: 2022-01-18
Required Action: Apply updates per vendor instructions.
Due Date: 2022-02-01
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-25296']
Severity: Critical
Known Exploited Vulnerability: CVE-2026-1281
Vendor/Project: Ivanti
Product: Endpoint Manager Mobile (EPMM)
Vulnerability Name: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Date Added to KEV: 2026-01-29
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-02-01
Known Ransomware Campaign Use: Unknown
Notes: ["Please adhere to Ivanti's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Ivanti products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as possible. For more information please: see: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340 ", ' https://support.mobileiron.com/mi/vsp/AB1771634/ivanti-security-update-1761642-1.0.0S-5.noarch.rpm ', ' https://support.mobileiron.com/mi/vsp/AB1771634/ivanti-security-update-1761642-1.0.0L-5.noarch.rpm ', ' https://nvd.nist.gov/vuln/detail/CVE-2026-1281']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-8526
Vendor/Project: Apple
Product: macOS
Vulnerability Name: Apple macOS Use-After-Free Vulnerability
Date Added to KEV: 2023-04-17
Required Action: Apply updates per vendor instructions.
Due Date: 2023-05-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.apple.com/en-us/HT209600', ' https://nvd.nist.gov/vuln/detail/CVE-2019-8526']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-22457
Vendor/Project: Ivanti
Product: Connect Secure, Policy Secure, and ZTA Gateways
Vulnerability Name: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Date Added to KEV: 2025-04-04
Required Action: Apply mitigations as set forth in the CISA instructions linked below.
Due Date: 2025-04-11
Known Ransomware Campaign Use: Known
Notes: ['CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-22457 ', ' Additional References: https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-22457']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-26855
Vendor/Project: Microsoft
Product: Exchange Server
Vulnerability Name: Microsoft Exchange Server Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ["Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26855"]
Severity: Critical
Known Exploited Vulnerability: CVE-2012-1535
Vendor/Project: Adobe
Product: Flash Player
Vulnerability Name: Adobe Flash Player Arbitrary Code Execution Vulnerability
Date Added to KEV: 2022-03-03
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2012-1535']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-40536
Vendor/Project: SolarWinds
Product: Web Help Desk
Vulnerability Name: SolarWinds Web Help Desk Security Control Bypass Vulnerability
Date Added to KEV: 2026-02-12
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-02-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm ', ' https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40536 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-40536']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-5910
Vendor/Project: Palo Alto Networks
Product: Expedition
Vulnerability Name: Palo Alto Networks Expedition Missing Authentication Vulnerability
Date Added to KEV: 2024-11-07
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-11-28
Known Ransomware Campaign Use: Unknown
Notes: ['https://security.paloaltonetworks.com/CVE-2024-5910 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-5910']
Severity: Critical
Known Exploited Vulnerability: CVE-2016-3393
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
Date Added to KEV: 2022-05-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2016-3393']
Severity: Critical
Known Exploited Vulnerability: CVE-2009-1151
Vendor/Project: phpMyAdmin
Product: phpMyAdmin
Vulnerability Name: phpMyAdmin Remote Code Execution Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2009-1151']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-62221
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Use After Free Vulnerability
Date Added to KEV: 2025-12-09
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-12-30
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-62221 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-62221']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-51567
Vendor/Project: CyberPersons
Product: CyberPanel
Vulnerability Name: CyberPanel Incorrect Default Permissions Vulnerability
Date Added to KEV: 2024-11-07
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-11-28
Known Ransomware Campaign Use: Known
Notes: ['https://cyberpanel.net/blog/detials-and-fix-of-recent-security-issue-and-patch-of-cyberpanel ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-51567']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-8956
Vendor/Project: PTZOptics
Product: PT30X-SDI/NDI Cameras
Vulnerability Name: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
Date Added to KEV: 2024-11-04
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-11-25
Known Ransomware Campaign Use: Unknown
Notes: ['https://ptzoptics.com/firmware-changelog/ ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-8956']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-41244
Vendor/Project: Broadcom
Product: VMware Aria Operations and VMware Tools
Vulnerability Name: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
Date Added to KEV: 2025-10-30
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-11-20
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-41244']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-24521
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
Date Added to KEV: 2022-04-13
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-04
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-24521']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-9791
Vendor/Project: Apache
Product: Struts 1
Vulnerability Name: Apache Struts 1 Improper Input Validation Vulnerability
Date Added to KEV: 2022-02-10
Required Action: Apply updates per vendor instructions.
Due Date: 2022-08-10
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-9791']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-20123
Vendor/Project: DrayTek
Product: VigorConnect
Vulnerability Name: Draytek VigorConnect Path Traversal Vulnerability 
Date Added to KEV: 2024-09-03
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-09-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.draytek.com/about/security-advisory/vigorconnect-software-security-vulnerability-(cve-2021-20123-cve-2021-20129)', ' https://nvd.nist.gov/vuln/detail/CVE-2021-20123']
Severity: Critical