As of 2026-10-12: the newest addition to the CISA Known Exploited Vulnerabilities catalog is CVE-2023-22894 (Strapi Strapi: Strapi Cleartext Storage of Sensitive Information Vulnerability), added 2026-10-08, remediation due 2026-10-11. The catalog lists 1739 CVEs (catalog version 2026.10.08).
The same rows as the free /v1/kev/preview, newest first.
| CVE | Vendor | Product | Name | Added | Due | Known ransomware |
|---|---|---|---|---|---|---|
| CVE-2023-22894 | Strapi | Strapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2021-3199 | ONLYOFFICE | Docs | ONLYOFFICE Docs Server Path Traversal Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2016-3081 | Apache | Struts | Apache Struts Command Injection Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2015-5477 | ISC | BIND | ISC BIND Data Processing Errors Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2015-3306 | ProFTPD | ProFTPD | ProFTPD Improper Access Control Vulnerability | 2026-10-08 | 2026-10-11 | Unknown |
| CVE-2026-88779 | Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-10-04 | 2026-10-07 | Unknown |
| CVE-2026-102490 | Zammad GmbH | Zammad | Zammad GmbH Zammad Improper Privilege Management Vulnerability | 2026-10-02 | 2026-10-05 | Unknown |
| CVE-2026-102489 | Zammad GmbH | Zammad | Zammad GmbH Zammad Session Fixation Vulnerability | 2026-10-02 | 2026-10-05 | Unknown |
| CVE-2026-104286 | Fortinet | FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 2026-10-01 | 2026-10-04 | Unknown |
| CVE-2026-76504 | Cisco | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 2026-09-30 | 2026-10-03 | Unknown |
| CVE-2026-86950 | Apple | Multiple Products | Apple Multiple Products Out-of-Bounds Write Vulnerability | 2026-09-29 | 2026-10-13 | Unknown |
| CVE-2026-88772 | Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-09-27 | 2026-09-30 | Unknown |
| CVE-2026-88771 | Citrix | NetScaler | Citrix NetScaler Improper Input Validation Vulnerability | 2026-09-27 | 2026-09-30 | Unknown |
| CVE-2026-87902 | WordPress | Core | WordPress Core Remote File Inclusion Vulnerability | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-67279 | MikroTik | RouterOS | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-65660 | Microsoft | SharePoint | Microsoft SharePoint Code Injection Vulnerability | 2026-09-25 | 2026-09-28 | Unknown |
| CVE-2026-71362 | Adobe | Commerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | 2026-09-24 | 2026-09-27 | Unknown |
| CVE-2026-5430 | WSO2 | Multiple Products | WSO2 Multiple Products Path Traversal Vulnerability | 2026-09-24 | 2026-09-27 | Unknown |
| CVE-2026-94127 | F5 | BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 2026-09-22 | 2026-09-25 | Unknown |
| CVE-2026-93952 | Arista | VeloCloud Orchestrator | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 2026-09-22 | 2026-09-25 | Unknown |
POST /v1/kev/check: up to 100 CVEs in one call, $0.005.POST /v1/stack/check: up to 100 CVEs plus the end-of-life status of up to 50 product versions and the advisories for up to 50 packages in one call, $0.012.POST /v1/stack/watch: watch those CVEs, versions and packages; each re-check with the signed token lists only what changed, such as a CVE newly in KEV, $0.012.POST /v1/osv/check: up to 50 open-source packages (purls) checked against OSV.dev advisories, with a KEV flag on each, $0.005.GET /v1/kev/changes?since=<snapshot_id>: what was added, removed or changed since a snapshot, $0.01.Source: CISA Known Exploited Vulnerabilities Catalog (CC0 1.0). Not endorsed by CISA or DHS.
Snapshot kev-20261009T183031Z-bc476d6c, data as of 2026-10-09T18:30:31Z, source last checked 2026-10-12T03:48:45.000Z.
Licences and attribution: /licences. How snapshots are made and verified: /provenance.
Data is provided as is, without warranty of any kind. Payments are final. Every dataset is normalised (modified) from the sources named here, and no source endorses this service.