---
title: "Known exploited vulnerabilities (page 2)"
url: https://erroneo.us/security/kev/2/
description: "All 748 vulnerabilities CISA added to its Known Exploited Vulnerabilities catalog since October 2023, newest first, with federal due dates. Page 2 of 8."
type: kev
section: "Security Digest"
date_modified: 2026-07-27
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Known exploited vulnerabilities (page 2)

- 2026-07-27 [CVE-2025-68686](https://erroneo.us/security/cve/CVE-2025-68686/index.md) Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (due 2026-08-10; ransomware: Unknown)
- 2026-07-22 [CVE-2026-50522](https://erroneo.us/security/cve/CVE-2026-50522/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability  (due 2026-07-25; ransomware: Unknown)
- 2026-07-22 [CVE-2026-16232](https://erroneo.us/security/cve/CVE-2026-16232/index.md) Check Point SmartConsole: Check Point SmartConsole Improper Authentication Vulnerability (due 2026-07-25; ransomware: Unknown)
- 2026-07-21 [CVE-2026-63030](https://erroneo.us/security/cve/CVE-2026-63030/index.md) WordPress Core: WordPress Core Interpretation Conflict Vulnerability (due 2026-07-24; ransomware: Unknown)
- 2026-07-21 [CVE-2026-60137](https://erroneo.us/security/cve/CVE-2026-60137/index.md) WordPress Core: WordPress Core SQL Injection Vulnerability (due 2026-08-04; ransomware: Unknown)
- 2026-07-21 [CVE-2026-0770](https://erroneo.us/security/cve/CVE-2026-0770/index.md) Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability (due 2026-07-24; ransomware: Unknown)
- 2026-07-21 [CVE-2021-27137](https://erroneo.us/security/cve/CVE-2021-27137/index.md) DD-WRT DD-WRT: DD-WRT Stack-Based Buffer Overflow Vulnerability (due 2026-07-24; ransomware: Unknown)
- 2026-07-16 [CVE-2026-58644](https://erroneo.us/security/cve/CVE-2026-58644/index.md) Microsoft SharePoint: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (due 2026-07-19; ransomware: Unknown)
- 2026-07-16 [CVE-2026-39808](https://erroneo.us/security/cve/CVE-2026-39808/index.md) Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability (due 2026-07-19; ransomware: Unknown)
- 2026-07-16 [CVE-2026-25089](https://erroneo.us/security/cve/CVE-2026-25089/index.md) Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability (due 2026-07-19; ransomware: Unknown)
- 2026-07-15 [CVE-2026-46817](https://erroneo.us/security/cve/CVE-2026-46817/index.md) Oracle E-Business Suite: Oracle E-Business Suite Improper Privilege Management Vulnerability (due 2026-07-18; ransomware: Unknown)
- 2026-07-15 [CVE-2023-4346](https://erroneo.us/security/cve/CVE-2023-4346/index.md) KNX Association KNX Protocol Connection Authorization Option 1: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability (due 2026-07-29; ransomware: Unknown)
- 2026-07-14 [CVE-2026-56164](https://erroneo.us/security/cve/CVE-2026-56164/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability (due 2026-07-17; ransomware: Unknown)
- 2026-07-14 [CVE-2026-56155](https://erroneo.us/security/cve/CVE-2026-56155/index.md) Microsoft Active Directory Federation Services: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability  (due 2026-07-28; ransomware: Unknown)
- 2026-07-14 [CVE-2026-15410](https://erroneo.us/security/cve/CVE-2026-15410/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Code Injection Vulnerability (due 2026-07-17; ransomware: Known)
- 2026-07-14 [CVE-2026-15409](https://erroneo.us/security/cve/CVE-2026-15409/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (due 2026-07-17; ransomware: Known)
- 2026-07-13 [CVE-2008-4128](https://erroneo.us/security/cve/CVE-2008-4128/index.md) Cisco IOS: Cisco IOS Cross-Site Request Forgery Vulnerability (due 2026-07-16; ransomware: Unknown)
- 2026-07-10 [CVE-2026-56291](https://erroneo.us/security/cve/CVE-2026-56291/index.md) Balbooa Forms: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability (due 2026-07-13; ransomware: Unknown)
- 2026-07-10 [CVE-2026-48939](https://erroneo.us/security/cve/CVE-2026-48939/index.md) iCagenda iCagenda: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability (due 2026-07-13; ransomware: Unknown)
- 2026-07-07 [CVE-2026-56290](https://erroneo.us/security/cve/CVE-2026-56290/index.md) Joomlack Page Builder: Joomlack Page Builder Improper Access Control Vulnerability (due 2026-07-10; ransomware: Unknown)
- 2026-07-07 [CVE-2026-55255](https://erroneo.us/security/cve/CVE-2026-55255/index.md) Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability (due 2026-07-10; ransomware: Unknown)
- 2026-07-07 [CVE-2026-48908](https://erroneo.us/security/cve/CVE-2026-48908/index.md) JoomShaper SP Page Builder: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability (due 2026-07-10; ransomware: Unknown)
- 2026-07-07 [CVE-2026-48282](https://erroneo.us/security/cve/CVE-2026-48282/index.md) Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability (due 2026-07-10; ransomware: Unknown)
- 2026-07-01 [CVE-2026-45659](https://erroneo.us/security/cve/CVE-2026-45659/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (due 2026-07-04; ransomware: Known)
- 2026-06-29 [CVE-2026-48558](https://erroneo.us/security/cve/CVE-2026-48558/index.md) SimpleHelp  SimpleHelp: SimpleHelp Authentication Bypass Vulnerability (due 2026-07-02; ransomware: Unknown)
- 2026-06-25 [CVE-2026-20230](https://erroneo.us/security/cve/CVE-2026-20230/index.md) Cisco Unified Communications Manager: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability (due 2026-06-28; ransomware: Unknown)
- 2026-06-25 [CVE-2026-12569](https://erroneo.us/security/cve/CVE-2026-12569/index.md) PTC Windchill and FlexPLM: PTC Windchill and FlexPLM Improper Input Validation Vulnerability (due 2026-06-28; ransomware: Known)
- 2026-06-23 [CVE-2026-34910](https://erroneo.us/security/cve/CVE-2026-34910/index.md) Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Input Validation Vulnerability (due 2026-06-26; ransomware: Unknown)
- 2026-06-23 [CVE-2026-34909](https://erroneo.us/security/cve/CVE-2026-34909/index.md) Ubiquiti UniFi OS: Ubiquiti UniFi OS Path Traversal Vulnerability (due 2026-06-26; ransomware: Unknown)
- 2026-06-23 [CVE-2026-34908](https://erroneo.us/security/cve/CVE-2026-34908/index.md) Ubiquiti UniFi OS: Ubiquiti UniFi OS Improper Access Control Vulnerability (due 2026-06-26; ransomware: Unknown)
- 2026-06-23 [CVE-2025-67038](https://erroneo.us/security/cve/CVE-2025-67038/index.md) Lantronix EDS5000: Lantronix EDS5000 Code Injection Vulnerability (due 2026-06-26; ransomware: Unknown)
- 2026-06-18 [CVE-2026-20253](https://erroneo.us/security/cve/CVE-2026-20253/index.md) Splunk Enterprise: Splunk Enterprise Missing Authentication for Critical Function Vulnerability (due 2026-06-21; ransomware: Unknown)
- 2026-06-16 [CVE-2026-48907](https://erroneo.us/security/cve/CVE-2026-48907/index.md) Widget Factory Joomla Content Editor : Widget Factory Joomla Content Editor Improper Access Control Vulnerability (due 2026-06-19; ransomware: Unknown)
- 2026-06-15 [CVE-2026-54420](https://erroneo.us/security/cve/CVE-2026-54420/index.md) LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability (due 2026-06-18; ransomware: Unknown)
- 2026-06-15 [CVE-2026-20262](https://erroneo.us/security/cve/CVE-2026-20262/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability (due 2026-06-29; ransomware: Unknown)
- 2026-06-12 [CVE-2026-35273](https://erroneo.us/security/cve/CVE-2026-35273/index.md) Oracle  PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability (due 2026-06-15; ransomware: Known)
- 2026-06-11 [CVE-2026-10520](https://erroneo.us/security/cve/CVE-2026-10520/index.md) Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability (due 2026-06-14; ransomware: Unknown)
- 2026-06-09 [CVE-2026-7473](https://erroneo.us/security/cve/CVE-2026-7473/index.md) Arista Extensible Operating System: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability (due 2026-06-23; ransomware: Unknown)
- 2026-06-09 [CVE-2026-20245](https://erroneo.us/security/cve/CVE-2026-20245/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability (due 2026-06-23; ransomware: Unknown)
- 2026-06-09 [CVE-2026-11645](https://erroneo.us/security/cve/CVE-2026-11645/index.md) Google Chromium V8: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability (due 2026-06-23; ransomware: Unknown)
- 2026-06-08 [CVE-2026-50751](https://erroneo.us/security/cve/CVE-2026-50751/index.md) Check Point Security Gateway: Check Point Security Gateway Improper Authentication Vulnerability (due 2026-06-11; ransomware: Known)
- 2026-06-08 [CVE-2026-42271](https://erroneo.us/security/cve/CVE-2026-42271/index.md) BerriAI LiteLLM: BerriAI LiteLLM Command Injection Vulnerability (due 2026-06-22; ransomware: Unknown)
- 2026-06-05 [CVE-2026-28318](https://erroneo.us/security/cve/CVE-2026-28318/index.md) SolarWinds Serv-U: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability (due 2026-06-19; ransomware: Unknown)
- 2026-06-03 [CVE-2026-45247](https://erroneo.us/security/cve/CVE-2026-45247/index.md) Mirasvit Mirasvit Full Page Cache Warmer: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability (due 2026-06-06; ransomware: Unknown)
- 2026-06-02 [CVE-2025-48595](https://erroneo.us/security/cve/CVE-2025-48595/index.md) Android Framework: Android Framework Integer Overflow Vulnerability (due 2026-06-05; ransomware: Unknown)
- 2026-06-02 [CVE-2022-0492](https://erroneo.us/security/cve/CVE-2022-0492/index.md) Linux Kernel: Linux Kernel Improper Authentication Vulnerability (due 2026-06-05; ransomware: Unknown)
- 2026-06-01 [CVE-2024-21182](https://erroneo.us/security/cve/CVE-2024-21182/index.md) Oracle WebLogic Server: Oracle WebLogic Server Unspecified Vulnerability (due 2026-06-04; ransomware: Unknown)
- 2026-05-29 [CVE-2026-0257](https://erroneo.us/security/cve/CVE-2026-0257/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (due 2026-06-01; ransomware: Known)
- 2026-05-27 [CVE-2026-8398](https://erroneo.us/security/cve/CVE-2026-8398/index.md) Daemon Daemon Tools Lite: Daemon Tools Lite Embedded Malicious Code Vulnerability (due 2026-05-30; ransomware: Unknown)
- 2026-05-27 [CVE-2026-48027](https://erroneo.us/security/cve/CVE-2026-48027/index.md) Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability (due 2026-06-10; ransomware: Known)
- 2026-05-27 [CVE-2026-45321](https://erroneo.us/security/cve/CVE-2026-45321/index.md) TanStack TanStack: TanStack Unspecified Vulnerability (due 2026-06-10; ransomware: Known)
- 2026-05-26 [CVE-2026-48172](https://erroneo.us/security/cve/CVE-2026-48172/index.md) LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability (due 2026-05-29; ransomware: Unknown)
- 2026-05-22 [CVE-2026-9082](https://erroneo.us/security/cve/CVE-2026-9082/index.md) Drupal Core: Drupal Core SQL Injection Vulnerability (due 2026-05-27; ransomware: Unknown)
- 2026-05-21 [CVE-2026-34926](https://erroneo.us/security/cve/CVE-2026-34926/index.md) Trend Micro Apex One: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (due 2026-06-04; ransomware: Unknown)
- 2026-05-21 [CVE-2025-34291](https://erroneo.us/security/cve/CVE-2025-34291/index.md) Langflow Langflow: Langflow Origin Validation Error Vulnerability (due 2026-06-04; ransomware: Unknown)
- 2026-05-20 [CVE-2026-45498](https://erroneo.us/security/cve/CVE-2026-45498/index.md) Microsoft Defender: Microsoft Defender Denial of Service Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-05-20 [CVE-2026-41091](https://erroneo.us/security/cve/CVE-2026-41091/index.md) Microsoft Defender: Microsoft Defender Link Following Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-05-20 [CVE-2010-0806](https://erroneo.us/security/cve/CVE-2010-0806/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-05-20 [CVE-2010-0249](https://erroneo.us/security/cve/CVE-2010-0249/index.md) Microsoft Internet Explorer: Microsoft Internet Explorer Use-After-Free Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-05-20 [CVE-2009-3459](https://erroneo.us/security/cve/CVE-2009-3459/index.md) Adobe Acrobat and Reader: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-05-20 [CVE-2009-1537](https://erroneo.us/security/cve/CVE-2009-1537/index.md) Microsoft DirectX: Microsoft DirectX NULL Byte Overwrite Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-05-20 [CVE-2008-4250](https://erroneo.us/security/cve/CVE-2008-4250/index.md) Microsoft Windows: Microsoft Windows Buffer Overflow Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-05-15 [CVE-2026-42897](https://erroneo.us/security/cve/CVE-2026-42897/index.md) Microsoft Microsoft: Microsoft Exchange Server Cross-Site Scripting Vulnerability (due 2026-05-29; ransomware: Unknown)
- 2026-05-14 [CVE-2026-20182](https://erroneo.us/security/cve/CVE-2026-20182/index.md) Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (due 2026-05-17; ransomware: Unknown)
- 2026-05-08 [CVE-2026-42208](https://erroneo.us/security/cve/CVE-2026-42208/index.md) BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability (due 2026-05-11; ransomware: Unknown)
- 2026-05-07 [CVE-2026-6973](https://erroneo.us/security/cve/CVE-2026-6973/index.md) Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability (due 2026-05-10; ransomware: Unknown)
- 2026-05-06 [CVE-2026-0300](https://erroneo.us/security/cve/CVE-2026-0300/index.md) Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability (due 2026-05-09; ransomware: Unknown)
- 2026-05-01 [CVE-2026-31431](https://erroneo.us/security/cve/CVE-2026-31431/index.md) Linux Kernel: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability (due 2026-05-15; ransomware: Unknown)
- 2026-04-30 [CVE-2026-41940](https://erroneo.us/security/cve/CVE-2026-41940/index.md) WebPros cPanel & WHM and WP2 (WordPress Squared): WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability (due 2026-05-03; ransomware: Known)
- 2026-04-28 [CVE-2026-32202](https://erroneo.us/security/cve/CVE-2026-32202/index.md) Microsoft Windows: Microsoft Windows Protection Mechanism Failure Vulnerability (due 2026-05-12; ransomware: Unknown)
- 2026-04-28 [CVE-2024-1708](https://erroneo.us/security/cve/CVE-2024-1708/index.md) ConnectWise ScreenConnect: ConnectWise ScreenConnect Path Traversal Vulnerability (due 2026-05-12; ransomware: Known)
- 2026-04-24 [CVE-2025-29635](https://erroneo.us/security/cve/CVE-2025-29635/index.md) D-Link DIR-823X: D-Link DIR-823X Command Injection Vulnerability (due 2026-05-08; ransomware: Unknown)
- 2026-04-24 [CVE-2024-7399](https://erroneo.us/security/cve/CVE-2024-7399/index.md) Samsung MagicINFO 9 Server: Samsung MagicINFO 9 Server Path Traversal Vulnerability (due 2026-05-08; ransomware: Unknown)
- 2026-04-24 [CVE-2024-57728](https://erroneo.us/security/cve/CVE-2024-57728/index.md) SimpleHelp  SimpleHelp: SimpleHelp Path Traversal Vulnerability (due 2026-05-08; ransomware: Known)
- 2026-04-24 [CVE-2024-57726](https://erroneo.us/security/cve/CVE-2024-57726/index.md) SimpleHelp  SimpleHelp: SimpleHelp Missing Authorization Vulnerability (due 2026-05-08; ransomware: Known)
- 2026-04-23 [CVE-2026-39987](https://erroneo.us/security/cve/CVE-2026-39987/index.md) Marimo Marimo: Marimo Remote Code Execution Vulnerability (due 2026-05-07; ransomware: Unknown)
- 2026-04-22 [CVE-2026-33825](https://erroneo.us/security/cve/CVE-2026-33825/index.md) Microsoft Defender: Microsoft Defender Insufficient Granularity of Access Control Vulnerability (due 2026-05-06; ransomware: Known)
- 2026-04-20 [CVE-2026-20133](https://erroneo.us/security/cve/CVE-2026-20133/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (due 2026-04-23; ransomware: Unknown)
- 2026-04-20 [CVE-2026-20128](https://erroneo.us/security/cve/CVE-2026-20128/index.md) Cisco Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability (due 2026-04-23; ransomware: Unknown)
- 2026-04-20 [CVE-2026-20122](https://erroneo.us/security/cve/CVE-2026-20122/index.md) Cisco Catalyst SD-WAN Manger: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability (due 2026-04-23; ransomware: Unknown)
- 2026-04-20 [CVE-2025-48700](https://erroneo.us/security/cve/CVE-2025-48700/index.md) Synacor Zimbra Collaboration Suite (ZCS): Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability (due 2026-04-23; ransomware: Unknown)
- 2026-04-20 [CVE-2025-32975](https://erroneo.us/security/cve/CVE-2025-32975/index.md) Quest KACE Systems Management Appliance (SMA): Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability (due 2026-05-04; ransomware: Unknown)
- 2026-04-20 [CVE-2025-2749](https://erroneo.us/security/cve/CVE-2025-2749/index.md) Kentico Kentico Xperience: Kentico Xperience Path Traversal Vulnerability (due 2026-05-04; ransomware: Unknown)
- 2026-04-20 [CVE-2024-27199](https://erroneo.us/security/cve/CVE-2024-27199/index.md) JetBrains TeamCity: JetBrains TeamCity Relative Path Traversal Vulnerability (due 2026-05-04; ransomware: Known)
- 2026-04-20 [CVE-2023-27351](https://erroneo.us/security/cve/CVE-2023-27351/index.md) PaperCut NG/MF: PaperCut NG/MF Improper Authentication Vulnerability (due 2026-05-04; ransomware: Known)
- 2026-04-16 [CVE-2026-34197](https://erroneo.us/security/cve/CVE-2026-34197/index.md) Apache ActiveMQ: Apache ActiveMQ Improper Input Validation Vulnerability (due 2026-04-30; ransomware: Unknown)
- 2026-04-14 [CVE-2026-32201](https://erroneo.us/security/cve/CVE-2026-32201/index.md) Microsoft SharePoint Server: Microsoft SharePoint Server Improper Input Validation Vulnerability (due 2026-04-28; ransomware: Unknown)
- 2026-04-14 [CVE-2009-0238](https://erroneo.us/security/cve/CVE-2009-0238/index.md) Microsoft Office: Microsoft Office Remote Code Execution (due 2026-04-28; ransomware: Unknown)
- 2026-04-13 [CVE-2026-34621](https://erroneo.us/security/cve/CVE-2026-34621/index.md) Adobe Acrobat and Reader: Adobe Acrobat and Reader Prototype Pollution Vulnerability (due 2026-04-27; ransomware: Unknown)
- 2026-04-13 [CVE-2026-21643](https://erroneo.us/security/cve/CVE-2026-21643/index.md) Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability (due 2026-04-16; ransomware: Unknown)
- 2026-04-13 [CVE-2025-60710](https://erroneo.us/security/cve/CVE-2025-60710/index.md) Microsoft Windows: Microsoft Windows Link Following Vulnerability (due 2026-04-27; ransomware: Known)
- 2026-04-13 [CVE-2023-36424](https://erroneo.us/security/cve/CVE-2023-36424/index.md) Microsoft Windows: Microsoft Windows Out-of-Bounds Read Vulnerability (due 2026-04-27; ransomware: Unknown)
- 2026-04-13 [CVE-2023-21529](https://erroneo.us/security/cve/CVE-2023-21529/index.md) Microsoft Exchange Server: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability (due 2026-04-27; ransomware: Known)
- 2026-04-13 [CVE-2020-9715](https://erroneo.us/security/cve/CVE-2020-9715/index.md) Adobe Acrobat: Adobe Acrobat Use-After-Free Vulnerability (due 2026-04-27; ransomware: Unknown)
- 2026-04-13 [CVE-2012-1854](https://erroneo.us/security/cve/CVE-2012-1854/index.md) Microsoft Visual Basic for Applications (VBA): Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability (due 2026-04-27; ransomware: Unknown)
- 2026-04-08 [CVE-2026-1340](https://erroneo.us/security/cve/CVE-2026-1340/index.md) Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (due 2026-04-11; ransomware: Unknown)
- 2026-04-06 [CVE-2026-35616](https://erroneo.us/security/cve/CVE-2026-35616/index.md) Fortinet FortiClient EMS: Fortinet FortiClient EMS Improper Access Control Vulnerability (due 2026-04-09; ransomware: Unknown)
- 2026-04-02 [CVE-2026-3502](https://erroneo.us/security/cve/CVE-2026-3502/index.md) TrueConf Client: TrueConf Client Download of Code Without Integrity Check Vulnerability (due 2026-04-16; ransomware: Unknown)
- 2026-04-01 [CVE-2026-5281](https://erroneo.us/security/cve/CVE-2026-5281/index.md) Google Dawn: Google Dawn Use-After-Free Vulnerability (due 2026-04-15; ransomware: Unknown)
- 2026-03-30 [CVE-2026-3055](https://erroneo.us/security/cve/CVE-2026-3055/index.md) Citrix NetScaler: Citrix NetScaler Out-of-Bounds Read Vulnerability (due 2026-04-02; ransomware: Unknown)

Pages: https://erroneo.us/security/kev/index.md · https://erroneo.us/security/kev/2/index.md · https://erroneo.us/security/kev/3/index.md · https://erroneo.us/security/kev/4/index.md · https://erroneo.us/security/kev/5/index.md · https://erroneo.us/security/kev/6/index.md · https://erroneo.us/security/kev/7/index.md · https://erroneo.us/security/kev/8/index.md

---
Source page: https://erroneo.us/security/kev/2/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt