JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2025-39682

    Linux Kernel

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling,...

    Read the full description

    Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

    Added
    2026-09-18
    Federal due date
    2026-09-21
    NVD entrykhoatran107 on GitHub

  2. CVE-2026-87886

    Acronis Backup

    Acronis Backup Incorrect Default Permissions Vulnerability

    Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

    Added
    2026-09-16
    Federal due date
    2026-09-19
    NVD entry

  3. CVE-2026-76460

    Cisco Identity Services Engine

    Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the...

    Read the full description

    Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

    Added
    2026-09-16
    Federal due date
    2026-09-19
    NVD entry

  4. CVE-2026-58704

    Google Pixel

    Google Pixel Improper Authorization Vulnerability

    Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.

    Added
    2026-09-16
    Federal due date
    2026-09-19
    NVD entry

  5. CVE-2026-76461

    Cisco Secure Email Gateway

    Cisco Secure Email Gateway SQL Injection Vulnerability

    Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

    Added
    2026-09-14
    Federal due date
    2026-09-17
    NVD entry

  6. CVE-2026-85706

    GitLab Community Edition and Enterprise Edition

    GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

    GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.

    Added
    2026-09-11
    Federal due date
    2026-09-14
    NVD entryguneykabel on GitHubEQSTLab on GitHub

  7. CVE-2026-84869

    ConnectWise ScreenConnect

    ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

    ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation.

    Added
    2026-09-11
    Federal due date
    2026-09-14
    NVD entry

  8. CVE-2026-42018

    JFrog Artifactory

    JFrog Artifactory Improper Authentication Vulnerability

    JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

    Added
    2026-09-11
    Federal due date
    2026-09-25
    NVD entry

  9. CVE-2026-42016

    JFrog Artifactory

    JFrog Artifactory Incorrect Authorization Vulnerability

    JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    Added
    2026-09-11
    Federal due date
    2026-09-25
    NVD entry

  10. CVE-2026-86060

    MikroTik RouterOS

    MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

    MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.

    Added
    2026-09-10
    Federal due date
    2026-09-13
    NVD entryExploit-DBdigiprosec on GitHub

  11. CVE-2026-67277

    MikroTik RouterOS

    MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

    MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.

    Added
    2026-09-10
    Federal due date
    2026-09-13
    NVD entry

  12. CVE-2026-87491

    Google Chromium V8

    Google Chromium V8 Out of Bounds Write Vulnerability

    Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize...

    Read the full description

    Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2026-09-09
    Federal due date
    2026-09-23
    NVD entrySneakyNachos on GitHub

  13. CVE-2026-20079

    Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote...

    Read the full description

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.

    Added
    2026-09-09
    Federal due date
    2026-09-12
    NVD entryCyberAuth on GitHub

  14. CVE-2026-19490

    Citrix NetScaler

    Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy,...

    Read the full description

    Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.

    Added
    2026-09-09
    Federal due date
    2026-09-12
    NVD entryTarPeg007 on GitHubBishopFox on GitHub

  15. CVE-2025-25249

    Fortinet Multiple Products

    Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

    Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.

    Added
    2026-09-09
    Federal due date
    2026-09-12
    NVD entry

  16. CVE-2026-86218

    N-able N-central

    N-able N-central Static Code Injection Vulnerability

    N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.

    Added
    2026-09-08
    Federal due date
    2026-09-11
    NVD entry

  17. CVE-2026-85880

    Microsoft Windows

    Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.

    Added
    2026-09-08
    Federal due date
    2026-09-22
    NVD entry

  18. CVE-2026-81963

    Microsoft Windows

    Microsoft Windows Link Following Vulnerability

    Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.

    Added
    2026-09-08
    Federal due date
    2026-09-22
    NVD entry

  19. CVE-2026-75650

    Adobe Commerce and Magento

    Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

    Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.

    Added
    2026-09-08
    Federal due date
    2026-09-11
    NVD entryfortbridge on GitHubdinosn on GitHub

  20. CVE-2026-85046

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability

    Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,...

    Read the full description

    Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2026-09-04
    Federal due date
    2026-09-18
    NVD entryatiilla on GitHubadriyansyah-mf on GitHub

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON