netVigilance Vulnerability intelligence since 2004

Not every vulnerability. Only the ones already being used. Every record here comes from the CISA Known Exploited Vulnerabilities catalog — confirmed exploitation in the wild, with a federal remediation deadline attached.

1,723records tracked
+10added, last 7 days
89missed, last 90 days
8due in 14 days
361ransomware-linked
2026-09-24catalog synced 19:00 UTC

Remediation queue

Open deadlines and those missed in the last 90 days, soonest first

Full catalog →
Jump to Past due Open deadline Ransomware Added in 2026 Click a column to re-sort
Known exploited vulnerabilities, sorted by CISA remediation deadline
Vulnerability Status
overdue 89d2026-06-28 CVE-2026-12569 PTC / Windchill and FlexPLM PTC Windchill and FlexPLM Improper Input Validation Vulnerability 2026-06-25 past dueransomware
overdue 89d2026-06-28 CVE-2026-20230 Cisco / Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability 2026-06-25 past due
overdue 88d2026-06-29 CVE-2026-20262 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability 2026-06-15 past due
overdue 85d2026-07-02 CVE-2026-48558 SimpleHelp / SimpleHelp SimpleHelp Authentication Bypass Vulnerability 2026-06-29 past due
overdue 83d2026-07-04 CVE-2026-45659 Microsoft / SharePoint Server Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability 2026-07-01 past dueransomware
overdue 77d2026-07-10 CVE-2026-48282 Adobe / ColdFusion Adobe ColdFusion Path Traversal Vulnerability 2026-07-07 past due
overdue 77d2026-07-10 CVE-2026-48908 JoomShaper / SP Page Builder JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-07 past due
overdue 77d2026-07-10 CVE-2026-55255 Langflow / Langflow Langflow Authorization Bypass Through User-Controlled Key Vulnerability 2026-07-07 past due
overdue 77d2026-07-10 CVE-2026-56290 Joomlack / Page Builder Joomlack Page Builder Improper Access Control Vulnerability 2026-07-07 past due
overdue 74d2026-07-13 CVE-2026-48939 iCagenda / iCagenda iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 past due
overdue 74d2026-07-13 CVE-2026-56291 Balbooa / Forms Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 past due
overdue 71d2026-07-16 CVE-2008-4128 Cisco / IOS Cisco IOS Cross-Site Request Forgery Vulnerability 2026-07-13 past due
overdue 70d2026-07-17 CVE-2026-15409 SonicWall / SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability 2026-07-14 past dueransomware
overdue 70d2026-07-17 CVE-2026-15410 SonicWall / SMA1000 Appliances SonicWall SMA1000 Appliances Code Injection Vulnerability 2026-07-14 past dueransomware
overdue 70d2026-07-17 CVE-2026-56164 Microsoft / SharePoint Server Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability 2026-07-14 past due
15 of 97 in the queue · 1,723 records tracked Open full catalog →

Browse by vendor

Static per-vendor slices of the catalog

All vendors →
Microsoft 388 records · 3 past due Cisco 99 records · 3 past due Apple 94 records · 0 open Adobe 82 records · 1 past due Google 75 records · 3 past due Oracle 46 records · 1 past due Apache 40 records · 0 open Ivanti 35 records · 0 open Linux 31 records · 5 past due Fortinet 30 records · 1 past due D-Link 26 records · 0 open VMware 26 records · 0 open

From the archive

netVigilance advisories, 2004–2015, at their original addresses

Archive index →
Archived netVigilance advisories
Ref Published Title Status
advisory0070 2007-09-25 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities archived
advisory0069 2007-09-25 SimpNews version 2.41.03 File Content Disclosure Vulnerability archived
advisory0068 2007-09-25 SimpNews version 2.41.03 Multiple Path Disclosure Vulnerabilities archived