Known exploited
CVEs affecting tracked vendors that appear in the CISA KEV catalog. This is the strongest available signal: confirmed exploitation in the wild, rather than a severity score that predicts it. 51 tracked, 8 with known ransomware campaign use.
| CVE | Published | Severity | Vendor | Products | EPSS |
|---|---|---|---|---|---|
| CVE-2026-20316 KEV | Jul 29, 2026 | Medium 5.3 | cisco | cisco-secure-firewall | 0.008 |
| CVE-2025-68686 KEV | Feb 10, 2026 | Medium 5.3 | fortinet | fortinet-fortios | 0.013 |
| CVE-2026-39808 KEV | Apr 14, 2026 | Critical 9.1 | fortinet | fortinet-fortisandbox | 0.897 |
| CVE-2026-25089 KEV | Jun 9, 2026 | Critical 9.1 | fortinet | fortinet-fortisandbox | 0.698 |
| CVE-2026-20230 KEV | Jun 3, 2026 | High 8.6 | cisco | cisco-ucm | 0.832 |
| CVE-2026-20253 KEV | Jun 10, 2026 | Critical 9.8 | 0.962 | ||
| CVE-2026-20262 KEV | Jun 15, 2026 | Medium 6.5 | cisco | cisco-sd-wan-manager | 0.282 |
| CVE-2026-20245 KEV | Jun 4, 2026 | High 7.8 | cisco | cisco-sd-wan-manager | 0.253 |
| CVE-2026-0257 KEV | May 13, 2026 | High 7.8 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os, palo-alto-prisma-access | 0.939 |
| CVE-2026-20182 KEV | May 14, 2026 | Critical 10 | cisco | cisco-sd-wan-manager | 0.903 |
| CVE-2026-0300 KEV | May 6, 2026 | Critical 9.3 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os, palo-alto-prisma-access | 0.321 |
| CVE-2026-20133 KEV | Feb 25, 2026 | Medium 6.5 | cisco | cisco-sd-wan-manager | 0.314 |
| CVE-2026-20128 KEV | Feb 25, 2026 | High 7.5 | cisco | cisco-sd-wan-manager | 0.069 |
| CVE-2026-20122 KEV | Feb 25, 2026 | Medium 5.4 | cisco | cisco-sd-wan-manager | 0.246 |
| CVE-2026-21643 KEV | Feb 6, 2026 | Critical 9.1 | fortinet | fortinet-forticlient | 0.941 |
| CVE-2026-35616 KEV | Apr 4, 2026 | Critical 9.1 | fortinet | fortinet-forticlient | 0.889 |
| CVE-2026-20131 KEV | Mar 4, 2026 | Critical 10 | cisco | cisco-secure-firewall | 0.282 |
| CVE-2026-20127 KEV | Feb 25, 2026 | Critical 10 | cisco | cisco-sd-wan-manager | 0.882 |
| CVE-2026-24858 KEV | Jan 27, 2026 | Critical 9.4 | fortinet | fortinet-fortianalyzer, fortinet-fortimanager, fortinet-fortinac +3 | 0.858 |
| CVE-2026-20045 KEV | Jan 21, 2026 | High 8.2 | cisco | cisco-ucm, cisco-unity-connection | 0.043 |
| CVE-2025-20393 KEV | Dec 17, 2025 | Critical 10 | cisco | cisco-secure-email | 0.295 |
| CVE-2025-59718 KEV | Dec 9, 2025 | Critical 9.1 | fortinet | fortinet-fortios, fortinet-fortiproxy, fortinet-fortiswitch | 0.630 |
| CVE-2025-58034 KEV | Nov 18, 2025 | Medium 6.7 | fortinet | fortinet-fortiweb | 0.556 |
| CVE-2025-64446 KEV | Nov 14, 2025 | Critical 9.4 | fortinet | fortinet-fortiweb | 0.918 |
| CVE-2025-20352 KEV | Sep 24, 2025 | High 7.7 | cisco | cisco-ios, cisco-ios-xe | 0.388 |
| CVE-2025-20362 KEV | Sep 25, 2025 | Medium 6.5 | cisco | cisco-asa, cisco-secure-firewall | 0.855 |
| CVE-2025-20333 KEV | Sep 25, 2025 | Critical 9.9 | cisco | cisco-asa, cisco-secure-firewall | 0.404 |
| CVE-2025-20337 KEV | Jul 16, 2025 | Critical 10 | cisco | cisco-ise, cisco-ise-pic | 0.663 |
| CVE-2025-20281 KEV | Jun 25, 2025 | Critical 10 | cisco | cisco-ise | 0.971 |
| CVE-2025-25257 KEV | Jul 17, 2025 | Critical 9.6 | fortinet | fortinet-fortiweb | 0.967 |
| CVE-2025-32433 KEV | Apr 16, 2025 | Critical 10 | 0.986 | ||
| CVE-2025-32756 KEV | May 13, 2025 | Critical 9.6 | fortinet | fortinet-forticamera, fortinet-fortimail, fortinet-fortindr +2 | 0.326 |
| CVE-2024-20439 KEV | Sep 4, 2024 | Critical 9.8 | 0.921 | ||
| CVE-2025-24472 KEV | Feb 11, 2025 | High 8.1 | fortinet | fortinet-fortios, fortinet-fortiproxy | 0.033 |
| CVE-2025-0111 KEV | Feb 12, 2025 | High 7.1 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os, palo-alto-prisma-access | 0.019 |
| CVE-2025-0108 KEV | Feb 12, 2025 | High 8.8 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os, palo-alto-prisma-access | 0.985 |
| CVE-2024-55591 KEV | Jan 14, 2025 | Critical 9.6 | fortinet | fortinet-fortios, fortinet-fortiproxy | 0.983 |
| CVE-2024-3393 KEV | Dec 27, 2024 | High 8.7 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os | 0.286 |
| CVE-2024-9474 KEV | Nov 18, 2024 | Medium 6.9 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os, palo-alto-prisma-access | 0.948 |
| CVE-2024-0012 KEV | Nov 18, 2024 | Critical 9.3 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os, palo-alto-prisma-access | 0.997 |
| CVE-2024-9465 KEV | Oct 9, 2024 | Critical 9.2 | palo-alto | palo-alto-expedition | 0.996 |
| CVE-2024-9463 KEV | Oct 9, 2024 | Critical 9.9 | palo-alto | palo-alto-expedition | 0.985 |
| CVE-2024-5910 KEV | Jul 10, 2024 | Critical 9.3 | palo-alto | palo-alto-expedition | 0.918 |
| CVE-2024-20481 KEV | Oct 23, 2024 | Medium 5.8 | cisco | cisco-asa, cisco-ftd | 0.159 |
| CVE-2024-47575 KEV | Oct 23, 2024 | Critical 9.8 | fortinet | fortinet-fortimanager | 0.950 |
| CVE-2024-23113 KEV | Feb 15, 2024 | Critical 9.8 | fortinet | fortinet-fortios, fortinet-fortipam, fortinet-fortiproxy +1 | 0.617 |
| CVE-2024-20399 KEV | Jul 1, 2024 | Medium 6 | cisco | cisco-nx-os | 0.043 |
| CVE-2024-20359 KEV | Apr 24, 2024 | Medium 6 | cisco | cisco-asa, cisco-ftd | 0.194 |
| CVE-2024-20353 KEV | Apr 24, 2024 | High 8.6 | cisco | cisco-asa, cisco-ftd | 0.707 |
| CVE-2024-3400 KEV | Apr 12, 2024 | Critical 10 | palo-alto | palo-alto-cloud-ngfw, palo-alto-pan-os, palo-alto-prisma-access | 1.000 |
| CVE-2024-21762 KEV | Feb 9, 2024 | Critical 9.6 | fortinet | fortinet-fortios, fortinet-fortiproxy | 0.843 |