netVigilance Vulnerability intelligence since 2004

Not every vulnerability. Only the ones already being used. Every record here comes from the CISA Known Exploited Vulnerabilities catalog — confirmed exploitation in the wild, with a federal remediation deadline attached.

1,769records tracked
+3added, last 7 days
103missed, last 90 days
6due in 14 days
361ransomware-linked
2026-11-06catalog synced 19:44 UTC

Remediation queue

Open deadlines and those missed in the last 90 days, soonest first

Full catalog →
Jump to Past due Open deadline Ransomware Added in 2026 Click a column to re-sort
Known exploited vulnerabilities, sorted by CISA remediation deadline
Vulnerability Status
overdue 89d2026-08-10 CVE-2025-68686 Fortinet / FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability 2026-07-27 past due
overdue 89d2026-08-10 CVE-2026-8037 Progress / LoadMaster Progress LoadMaster Command Injection Vulnerability 2026-08-07 past due
overdue 85d2026-08-14 CVE-2026-20349 Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability 2026-08-11 past due
overdue 85d2026-08-14 CVE-2026-72898 Metabase / Metabase Metabase SQL Injection Vulnerability 2026-08-11 past due
overdue 79d2026-08-20 CVE-2025-62593 Ray-Project / Ray Ray-Project Ray Code Injection Vulnerability 2026-08-17 past due
overdue 78d2026-08-21 CVE-2026-33824 Microsoft / Internet Key Exchange (IKE) Service Extensions Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability 2026-08-18 past due
overdue 78d2026-08-21 CVE-2026-55040 Microsoft / SharePoint Microsoft SharePoint Weak Authentication Vulnerability 2026-08-18 past due
overdue 78d2026-08-21 CVE-2026-59310 Broadcom / VMware vCenter Broadcom VMware vCenter Path Traversal Vulnerability 2026-08-18 past dueransomware
overdue 78d2026-08-21 CVE-2026-65400 Apple / macOS Apple macOS Improper Authentication Vulnerability 2026-08-18 past due
overdue 76d2026-08-23 CVE-2026-72529 TrueConf / Server TrueConf Server Missing Authentication for Critical Function Vulnerability 2026-08-20 past due
overdue 75d2026-08-24 CVE-2026-73570 Synacor / Zimbra Collaboration Suite (ZCS) Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability 2026-08-21 past due
overdue 74d2026-08-25 CVE-2026-68820 Microsoft / Windows Ancillary Function Driver for WinSock Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 2026-08-11 past due
overdue 72d2026-08-27 CVE-2026-21962 Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability 2026-08-24 past due
overdue 71d2026-08-28 CVE-2026-60004 Gitea / Gitea Gitea Code Injection Vulnerability 2026-08-25 past due
overdue 70d2026-08-29 CVE-2019-1068 Microsoft / SQL Server Microsoft SQL Server Remote Code Execution Vulnerability 2026-08-26 past due
15 of 109 in the queue · 1,769 records tracked Open full catalog →

Browse by vendor

Static per-vendor slices of the catalog

All vendors →
Microsoft 390 records · 1 past due Cisco 102 records · 2 past due Apple 96 records · 1 past due Adobe 83 records · 1 open Google 76 records · 1 open Oracle 46 records · 0 open Apache 41 records · 1 past due Ivanti 38 records · 2 past due Fortinet 32 records · 1 past due Linux 32 records · 1 past due Citrix 27 records · 0 open D-Link 26 records · 0 open

From the archive

netVigilance advisories, 2004–2015, at their original addresses

Archive index →
Archived netVigilance advisories
Ref Published Title Status
advisory0070 2007-09-25 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities archived
advisory0069 2007-09-25 SimpNews version 2.41.03 File Content Disclosure Vulnerability archived
advisory0068 2007-09-25 SimpNews version 2.41.03 Multiple Path Disclosure Vulnerabilities archived