netVigilance Vulnerability intelligence since 2004

Not every vulnerability. Only the ones already being used. Every record here comes from the CISA Known Exploited Vulnerabilities catalog — confirmed exploitation in the wild, with a federal remediation deadline attached.

1,746records tracked
+7added, last 7 days
98missed, last 90 days
7due in 14 days
361ransomware-linked
2026-10-15catalog synced 17:00 UTC

Remediation queue

Open deadlines and those missed in the last 90 days, soonest first

Full catalog →
Jump to Past due Open deadline Ransomware Added in 2026 Click a column to re-sort
Known exploited vulnerabilities, sorted by CISA remediation deadline
Vulnerability Status
overdue 90d2026-07-18 CVE-2026-46817 Oracle / E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability 2026-07-15 past due
overdue 89d2026-07-19 CVE-2026-25089 Fortinet / FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16 past due
overdue 89d2026-07-19 CVE-2026-39808 Fortinet / FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability 2026-07-16 past due
overdue 89d2026-07-19 CVE-2026-58644 Microsoft / SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-16 past due
overdue 84d2026-07-24 CVE-2021-27137 DD-WRT / DD-WRT DD-WRT Stack-Based Buffer Overflow Vulnerability 2026-07-21 past due
overdue 84d2026-07-24 CVE-2026-0770 Langflow / Langflow Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability 2026-07-21 past due
overdue 84d2026-07-24 CVE-2026-63030 WordPress / Core WordPress Core Interpretation Conflict Vulnerability 2026-07-21 past due
overdue 83d2026-07-25 CVE-2026-16232 Check Point / SmartConsole Check Point SmartConsole Improper Authentication Vulnerability 2026-07-22 past due
overdue 83d2026-07-25 CVE-2026-50522 Microsoft / SharePoint Microsoft SharePoint Deserialization of Untrusted Data Vulnerability 2026-07-22 past due
overdue 80d2026-07-28 CVE-2026-56155 Microsoft / Active Directory Federation Services Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability 2026-07-14 past due
overdue 79d2026-07-29 CVE-2023-4346 KNX Association / KNX Protocol Connection Authorization Option 1 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability 2026-07-15 past due
overdue 78d2026-07-30 CVE-2026-16812 Arista / VeloCloud Orchestrator Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability 2026-07-27 past due
overdue 76d2026-08-01 CVE-2026-20316 Cisco / Secure Firewall Management Center (FMC) Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability 2026-07-29 past dueransomware
overdue 73d2026-08-04 CVE-2026-60137 WordPress / Core WordPress Core SQL Injection Vulnerability 2026-07-21 past due
overdue 71d2026-08-06 CVE-2026-18577 N-able / N-central N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability 2026-08-03 past due
15 of 105 in the queue · 1,746 records tracked Open full catalog →

Browse by vendor

Static per-vendor slices of the catalog

All vendors →
Microsoft 390 records · 3 past due Cisco 101 records · 3 past due Apple 95 records · 1 past due Adobe 82 records · 1 past due Google 75 records · 3 past due Oracle 46 records · 0 open Apache 41 records · 1 past due Ivanti 36 records · 1 open Fortinet 31 records · 1 past due Linux 31 records · 3 past due Citrix 27 records · 3 past due D-Link 26 records · 0 open

From the archive

netVigilance advisories, 2004–2015, at their original addresses

Archive index →
Archived netVigilance advisories
Ref Published Title Status
advisory0070 2007-09-25 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities archived
advisory0069 2007-09-25 SimpNews version 2.41.03 File Content Disclosure Vulnerability archived
advisory0068 2007-09-25 SimpNews version 2.41.03 Multiple Path Disclosure Vulnerabilities archived