Exploited: 177
LatestCVE-2026-63471 — fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator
VulnFeed.org
AREN

CISA KEV remediation deadlines

Upcoming and recently passed deadlines for vulnerabilities in the CISA Known Exploited Vulnerabilities catalog.

These deadlines bind US federal agencies. For everyone else they are a useful signal of priority, not a legal requirement.

Add to calendar

Upcoming

  1. CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element Vulnerability
  2. CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
  3. CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
  4. CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability
  5. CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
  6. CVE-2026-41709Broadcom VMWare ESX Insufficient Logging Vulnerability
  7. CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Passed in the last 30 days

  1. CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
  2. CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
  3. CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
  4. CVE-2026-46300Linux Kernel Missing Initialization of a Variable Vulnerability
  5. CVE-2026-109618PHP Memory Corruption Vulnerability
  6. CVE-2026-109619PHP Stale Internal Request-State Vulnerability
  7. CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
  8. CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection Vulnerability
  9. CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
  10. CVE-2026-96656Plex Media Server External Control of File Name or Path Vulnerability
  11. CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
  12. CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability
  13. CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
  14. CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
  15. CVE-2026-105133Ahsay AhsayCBS Improper Authentication Vulnerability
  16. CVE-2026-105134Ahsay AhsayCBS Command Injection Vulnerability
  17. CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal Vulnerability
  18. CVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability
  19. CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
  20. CVE-2026-96951Microsoft Windows Command Injection Vulnerability
  21. CVE-2026-86950Apple Multiple Products Out-of-Bounds Write Vulnerability
  22. CVE-2015-3306ProFTPD Improper Access Control Vulnerability
  23. CVE-2015-5477ISC BIND Data Processing Errors Vulnerability
  24. CVE-2016-3081Apache Struts Command Injection Vulnerability
  25. CVE-2021-3199ONLYOFFICE Docs Server Path Traversal Vulnerability
  26. CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability
  27. CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
  28. CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability
  29. CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management Vulnerability
  30. CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability
Esc