CISA Known Exploited Vulnerabilities
KEV additions — May 2026
15 CVEs entered the KEV catalog in May 2026.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added May 27, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-45321 | TanStack Unspecified Vulnerability | 9.6 | 1.1 % | Jun 10, 2026 |
| CVE-2026-48027 | Nx Console Embedded Malicious Code Vulnerability | 9.8 | 1.3 % | Jun 10, 2026 |
| CVE-2026-8398 | Daemon Tools Lite Embedded Malicious Code Vulnerability | 9.8 | 1.0 % | May 30, 2026 |
Added May 26, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-48172 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | — | 1.0 % | May 29, 2026 |
Added May 22, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-9082 | Drupal Core SQL Injection Vulnerability | 6.5 | 15.7 % | May 27, 2026 |
Added May 21, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-34291 | Langflow Origin Validation Error Vulnerability | 8.8 | 92.8 % | Jun 4, 2026 |
| CVE-2026-34926 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 6.7 | 0.5 % | Jun 4, 2026 |
Added May 20, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-41091 | Microsoft Defender Link Following Vulnerability | 7.8 | 0.4 % | Jun 3, 2026 |
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability | 4 | 1.3 % | Jun 3, 2026 |
Added May 15, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-42897 | Microsoft Exchange Server Spoofing Vulnerability | 8.1 | 0.5 % | May 29, 2026 |
Added May 14, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 10 | 91.8 % | May 17, 2026 |
Added May 8, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-42208 | BerriAI LiteLLM SQL Injection Vulnerability | 9.8 | 5.8 % | May 11, 2026 |
Added May 7, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 7.2 | 2.5 % | May 10, 2026 |
Added May 6, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-0300 | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 9.8 | 31.7 % | May 9, 2026 |
Added May 1, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-31431 | crypto: algif_aead - Revert to operating out-of-place | 7.8 | 3.4 % | May 15, 2026 |