CISA Known Exploited Vulnerabilities
KEV additions — May 2026
15 CVEs entered the KEV catalog in May 2026.
Added May 27, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-45321 | TanStack Unspecified Vulnerability | 9.6 | 0.0 % | June 10, 2026 |
| CVE-2026-48027 | Nx Console Embedded Malicious Code Vulnerability | 9.8 | 26.8 % | June 10, 2026 |
| CVE-2026-8398 | Daemon Tools Lite Embedded Malicious Code Vulnerability | 9.8 | 0.0 % | May 30, 2026 |
Added May 26, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-48172 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | — | 0.0 % | May 29, 2026 |
Added May 22, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-9082 | Drupal Core SQL Injection Vulnerability | 6.5 | 0.0 % | May 27, 2026 |
Added May 21, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-34291 | Langflow Origin Validation Error Vulnerability | 8.8 | 14.0 % | June 4, 2026 |
| CVE-2026-34926 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 6.7 | 0.3 % | June 4, 2026 |
Added May 20, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-41091 | Microsoft Defender Link Following Vulnerability | 7.8 | 1.2 % | June 3, 2026 |
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability | 4 | 2.5 % | June 3, 2026 |
Added May 15, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-42897 | Microsoft Exchange Server Spoofing Vulnerability | 8.1 | 2.5 % | May 29, 2026 |
Added May 14, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 10 | 1.6 % | May 17, 2026 |
Added May 8, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-42208 | BerriAI LiteLLM SQL Injection Vulnerability | 9.8 | 0.1 % | May 11, 2026 |
Added May 7, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 7.2 | 5.0 % | May 10, 2026 |
Added May 6, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 9.8 | 4.7 % | May 9, 2026 |
Added May 1, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-31431 | crypto: algif_aead - Revert to operating out-of-place | 7.8 | 3.9 % | May 15, 2026 |