netVigilance Vulnerability intelligence since 2004

Not every vulnerability. Only the ones already being used. Every record here comes from the CISA Known Exploited Vulnerabilities catalog — confirmed exploitation in the wild, with a federal remediation deadline attached.

1,721records tracked
+11added, last 7 days
89missed, last 90 days
10due in 14 days
360ransomware-linked
2026-09-22catalog synced 19:02 UTC

Remediation queue

Open deadlines and those missed in the last 90 days, soonest first

Full catalog →
Jump to Past due Open deadline Ransomware Added in 2026 Click a column to re-sort
Known exploited vulnerabilities, sorted by CISA remediation deadline
Vulnerability Status
overdue 88d2026-06-26 CVE-2025-67038 Lantronix / EDS5000 Lantronix EDS5000 Code Injection Vulnerability 2026-06-23 past due
overdue 88d2026-06-26 CVE-2026-34908 Ubiquiti / UniFi OS Ubiquiti UniFi OS Improper Access Control Vulnerability 2026-06-23 past due
overdue 88d2026-06-26 CVE-2026-34909 Ubiquiti / UniFi OS Ubiquiti UniFi OS Path Traversal Vulnerability 2026-06-23 past due
overdue 88d2026-06-26 CVE-2026-34910 Ubiquiti / UniFi OS Ubiquiti UniFi OS Improper Input Validation Vulnerability 2026-06-23 past due
overdue 86d2026-06-28 CVE-2026-12569 PTC / Windchill and FlexPLM PTC Windchill and FlexPLM Improper Input Validation Vulnerability 2026-06-25 past dueransomware
overdue 86d2026-06-28 CVE-2026-20230 Cisco / Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability 2026-06-25 past due
overdue 85d2026-06-29 CVE-2026-20262 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability 2026-06-15 past due
overdue 82d2026-07-02 CVE-2026-48558 SimpleHelp / SimpleHelp SimpleHelp Authentication Bypass Vulnerability 2026-06-29 past due
overdue 80d2026-07-04 CVE-2026-45659 Microsoft / SharePoint Server Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability 2026-07-01 past dueransomware
overdue 74d2026-07-10 CVE-2026-48282 Adobe / ColdFusion Adobe ColdFusion Path Traversal Vulnerability 2026-07-07 past due
overdue 74d2026-07-10 CVE-2026-48908 JoomShaper / SP Page Builder JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-07 past due
overdue 74d2026-07-10 CVE-2026-55255 Langflow / Langflow Langflow Authorization Bypass Through User-Controlled Key Vulnerability 2026-07-07 past due
overdue 74d2026-07-10 CVE-2026-56290 Joomlack / Page Builder Joomlack Page Builder Improper Access Control Vulnerability 2026-07-07 past due
overdue 71d2026-07-13 CVE-2026-48939 iCagenda / iCagenda iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 past due
overdue 71d2026-07-13 CVE-2026-56291 Balbooa / Forms Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability 2026-07-10 past due
15 of 99 in the queue · 1,721 records tracked Open full catalog →

Browse by vendor

Static per-vendor slices of the catalog

All vendors →
Microsoft 388 records · 2 past due Cisco 99 records · 3 past due Apple 94 records · 0 open Adobe 81 records · 1 past due Google 75 records · 2 past due Oracle 46 records · 1 past due Apache 40 records · 0 open Ivanti 35 records · 0 open Linux 31 records · 5 past due Fortinet 30 records · 1 past due D-Link 26 records · 0 open VMware 26 records · 0 open

From the archive

netVigilance advisories, 2004–2015, at their original addresses

Archive index →
Archived netVigilance advisories
Ref Published Title Status
advisory0070 2007-09-25 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities archived
advisory0069 2007-09-25 SimpNews version 2.41.03 File Content Disclosure Vulnerability archived
advisory0068 2007-09-25 SimpNews version 2.41.03 Multiple Path Disclosure Vulnerabilities archived