netVigilance Vulnerability intelligence since 2004

Not every vulnerability. Only the ones already being used. Every record here comes from the CISA Known Exploited Vulnerabilities catalog — confirmed exploitation in the wild, with a federal remediation deadline attached.

1,710records tracked
+11added, last 7 days
87missed, last 90 days
9due in 14 days
360ransomware-linked
2026-09-14catalog synced 19:00 UTC

Remediation queue

Open deadlines and those missed in the last 90 days, soonest first

Full catalog →
Jump to Past due Open deadline Ransomware Added in 2026 Click a column to re-sort
Known exploited vulnerabilities, sorted by CISA remediation deadline
Vulnerability Status
overdue 90d2026-06-18 CVE-2026-54420 LiteSpeed / cPanel Plugin LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability 2026-06-15 past due
overdue 89d2026-06-19 CVE-2026-28318 SolarWinds / Serv-U SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability 2026-06-05 past due
overdue 89d2026-06-19 CVE-2026-48907 Widget Factory / Joomla Content Editor Widget Factory Joomla Content Editor Improper Access Control Vulnerability 2026-06-16 past due
overdue 87d2026-06-21 CVE-2026-20253 Splunk / Enterprise Splunk Enterprise Missing Authentication for Critical Function Vulnerability 2026-06-18 past due
overdue 86d2026-06-22 CVE-2026-42271 BerriAI / LiteLLM BerriAI LiteLLM Command Injection Vulnerability 2026-06-08 past due
overdue 85d2026-06-23 CVE-2026-11645 Google / Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability 2026-06-09 past due
overdue 85d2026-06-23 CVE-2026-20245 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability 2026-06-09 past due
overdue 85d2026-06-23 CVE-2026-7473 Arista / Extensible Operating System Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability 2026-06-09 past due
overdue 82d2026-06-26 CVE-2025-67038 Lantronix / EDS5000 Lantronix EDS5000 Code Injection Vulnerability 2026-06-23 past due
overdue 82d2026-06-26 CVE-2026-34908 Ubiquiti / UniFi OS Ubiquiti UniFi OS Improper Access Control Vulnerability 2026-06-23 past due
overdue 82d2026-06-26 CVE-2026-34909 Ubiquiti / UniFi OS Ubiquiti UniFi OS Path Traversal Vulnerability 2026-06-23 past due
overdue 82d2026-06-26 CVE-2026-34910 Ubiquiti / UniFi OS Ubiquiti UniFi OS Improper Input Validation Vulnerability 2026-06-23 past due
overdue 80d2026-06-28 CVE-2026-12569 PTC / Windchill and FlexPLM PTC Windchill and FlexPLM Improper Input Validation Vulnerability 2026-06-25 past dueransomware
overdue 80d2026-06-28 CVE-2026-20230 Cisco / Unified Communications Manager Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability 2026-06-25 past due
overdue 79d2026-06-29 CVE-2026-20262 Cisco / Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability 2026-06-15 past due
15 of 96 in the queue · 1,710 records tracked Open full catalog →

Browse by vendor

Static per-vendor slices of the catalog

All vendors →
Microsoft 388 records · 4 past due Cisco 98 records · 1 past due Apple 94 records · 1 past due Adobe 81 records · 1 past due Google 74 records · 2 open Oracle 46 records · 1 past due Apache 40 records · 0 open Ivanti 35 records · 0 open Fortinet 30 records · 1 past due Linux 28 records · 2 past due D-Link 26 records · 0 open VMware 26 records · 0 open

From the archive

netVigilance advisories, 2004–2015, at their original addresses

Archive index →
Archived netVigilance advisories
Ref Published Title Status
advisory0070 2007-09-25 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities archived
advisory0069 2007-09-25 SimpNews version 2.41.03 File Content Disclosure Vulnerability archived
advisory0068 2007-09-25 SimpNews version 2.41.03 Multiple Path Disclosure Vulnerabilities archived