netVigilance Vulnerability intelligence since 2004

Not every vulnerability. Only the ones already being used. Every record here comes from the CISA Known Exploited Vulnerabilities catalog — confirmed exploitation in the wild, with a federal remediation deadline attached.

1,703records tracked
+9added, last 7 days
77missed, last 90 days
14due in 14 days
358ransomware-linked
2026-09-09catalog synced 19:00 UTC

Remediation queue

Open deadlines and those missed in the last 90 days, soonest first

Full catalog →
Jump to Past due Open deadline Ransomware Added in 2026 Click a column to re-sort
Known exploited vulnerabilities, sorted by CISA remediation deadline
Vulnerability Status
overdue 88d2026-06-14 CVE-2026-10520 Ivanti / Sentry Ivanti Sentry OS Command Injection Vulnerability 2026-06-11 past due
overdue 87d2026-06-15 CVE-2026-35273 Oracle / PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability 2026-06-12 past dueransomware
overdue 84d2026-06-18 CVE-2026-54420 LiteSpeed / cPanel Plugin LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability 2026-06-15 past due
overdue 83d2026-06-19 CVE-2026-28318 SolarWinds / Serv-U SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability 2026-06-05 past due
overdue 83d2026-06-19 CVE-2026-48907 Widget Factory / Joomla Content Editor Widget Factory Joomla Content Editor Improper Access Control Vulnerability 2026-06-16 past due
overdue 81d2026-06-21 CVE-2026-20253 Splunk / Enterprise Splunk Enterprise Missing Authentication for Critical Function Vulnerability 2026-06-18 past due
overdue 80d2026-06-22 CVE-2026-42271 BerriAI / LiteLLM BerriAI LiteLLM Command Injection Vulnerability 2026-06-08 past due
overdue 79d2026-06-23 CVE-2026-11645 Google / Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability 2026-06-09 past due
overdue 79d2026-06-23 CVE-2026-20245 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability 2026-06-09 past due
overdue 79d2026-06-23 CVE-2026-7473 Arista / Extensible Operating System Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability 2026-06-09 past due
overdue 76d2026-06-26 CVE-2025-67038 Lantronix / EDS5000 Lantronix EDS5000 Code Injection Vulnerability 2026-06-23 past due
overdue 76d2026-06-26 CVE-2026-34908 Ubiquiti / UniFi OS Ubiquiti UniFi OS Improper Access Control Vulnerability 2026-06-23 past due
overdue 76d2026-06-26 CVE-2026-34909 Ubiquiti / UniFi OS Ubiquiti UniFi OS Path Traversal Vulnerability 2026-06-23 past due
overdue 76d2026-06-26 CVE-2026-34910 Ubiquiti / UniFi OS Ubiquiti UniFi OS Improper Input Validation Vulnerability 2026-06-23 past due
overdue 74d2026-06-28 CVE-2026-12569 PTC / Windchill and FlexPLM PTC Windchill and FlexPLM Improper Input Validation Vulnerability 2026-06-25 past dueransomware
15 of 91 in the queue · 1,703 records tracked Open full catalog →

Browse by vendor

Static per-vendor slices of the catalog

All vendors →
Microsoft 388 records · 4 past due Cisco 97 records · 1 past due Apple 94 records · 1 past due Adobe 81 records · 1 open Google 74 records · 2 open Oracle 46 records · 1 past due Apache 40 records · 0 open Ivanti 35 records · 0 open Fortinet 30 records · 1 open Linux 28 records · 2 past due D-Link 26 records · 0 open VMware 26 records · 0 open

From the archive

netVigilance advisories, 2004–2015, at their original addresses

Archive index →
Archived netVigilance advisories
Ref Published Title Status
advisory0070 2007-09-25 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities archived
advisory0069 2007-09-25 SimpNews version 2.41.03 File Content Disclosure Vulnerability archived
advisory0068 2007-09-25 SimpNews version 2.41.03 Multiple Path Disclosure Vulnerabilities archived