CISA Known Exploited Vulnerabilities
KEV additions — June 2026
12 CVEs entered the KEV catalog in June 2026.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added June 25, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 8.6 | 88.2 % | Jun 28, 2026 |
Added June 15, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 6.5 | 28.2 % | Jun 29, 2026 |
Added June 12, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-35273ransomware | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 9.8 | 96.7 % | Jun 15, 2026 |
Added June 11, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-10520 | Ivanti Sentry OS Command Injection Vulnerability | 10 | 99.9 % | Jun 14, 2026 |
Added June 9, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-11645 | chromium-browser: Out of bounds memory access in V8 | — | 2.4 % | Jun 23, 2026 |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 7.8 | 25.3 % | Jun 23, 2026 |
| CVE-2026-7473 | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 5.8 | 0.6 % | Jun 23, 2026 |
Added June 8, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-50751 | Check Point Security Gateway Improper Authentication Vulnerability | 9.3 | 85.3 % | Jun 11, 2026 |
Added June 5, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-28318 | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 7.5 | 1.9 % | Jun 19, 2026 |
Added June 3, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-45247 | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 9.8 | 2.1 % | Jun 6, 2026 |
Added June 2, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability | 7.8 | 5.5 % | Jun 5, 2026 |
| CVE-2025-48595 | Android Framework Integer Overflow Vulnerability | 8.4 | 1.7 % | Jun 5, 2026 |