Tools / KEV calendar

When CISA says it has to be fixed.

Every entry in the Known Exploited Vulnerabilities catalogue comes with a date by which US federal agencies must have remediated it. That date is also the best public signal of how urgently CISA regards the exploitation, so here is the catalogue as a calendar: what is overdue, what is due this week, and what is coming, with the products each one affects.

48 overdue (last 30 days)1 due within 7 days1 due in the next 120 days0 used in ransomware

Subscribe as a calendar (.ics)Only for my products

Paste the .ics address into Outlook, Google Calendar or Apple Calendar as a subscribed calendar and the deadlines stay current.

Overdue

Past CISA's due date. For US federal agencies that is a missed mandate; for everyone else it is a vulnerability that has been exploited in the wild for weeks and is still unpatched.

9 September 2026

28 days ago · 4 CVEs

CVE-2015-3246
Red Hat Libuser Race Condition Vulnerability
redhat/enterprise linux · opensuse/opensuse · libuser project/libuser · added 26 August 2026
KEVEXPLOIT ×2 ✓HIGH 7.4EPSS 8.43%
CVE-2015-5287
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
redhat/automatic bug reporting tool · oracle/linux · redhat/enterprise linux · added 26 August 2026
KEVEXPLOIT ×3 ✓HIGH 7.8EPSS 4.96%
CVE-2021-23758
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
ajaxpro.2 project/ajaxpro.2 · michaelschwarz/ajax.net professional · added 26 August 2026
KEVCRITICAL 9.8EPSS 82.6%
CVE-2022-0995
Linux Kernel Out-of-Bounds Write Vulnerability
linux/linux kernel · fedoraproject/fedora · netapp/h300e firmware · added 26 August 2026
KEVHIGH 7.8EPSS 8.79%

10 September 2026

27 days ago · 1 CVE

CVE-2026-66384
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
jfrog/artifactory · added 27 August 2026
KEVMEDIUM 5.3EPSS 0.66%

11 September 2026

26 days ago · 2 CVEs

CVE-2026-75650
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
adobe/commerce · adobe/commerce b2b · adobe/magento · added 8 September 2026
KEVCRITICAL 10.0EPSS 3.95%
CVE-2026-86218
N-able N-central Static Code Injection Vulnerability
n-able/n-central · added 8 September 2026
KEVCRITICAL 10.0EPSS 12.9%

12 September 2026

25 days ago · 3 CVEs

CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
fortinet/fortios · fortinet/fortiswitchmanager · fortinet/fortisase · added 9 September 2026
KEVCRITICAL 9.8EPSS 3.86%
CVE-2026-19490
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
citrix/netscaler application delivery controller · citrix/netscaler gateway · added 9 September 2026
KEVCRITICAL 9.3EPSS 23.2%
CVE-2026-20079
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
cisco/secure firewall management center · added 9 September 2026
KEVCRITICAL 10.0EPSS 88.2%

13 September 2026

24 days ago · 2 CVEs

CVE-2026-67277
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
mikrotik/routeros · added 10 September 2026
KEVHIGH 8.8EPSS 1.56%
CVE-2026-86060
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
mikrotik/routeros · added 10 September 2026
KEVEXPLOITCRITICAL 9.2EPSS 6.39%

14 September 2026

23 days ago · 4 CVEs

CVE-2026-84869
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
connectwise/screenconnect · added 11 September 2026
KEVCRITICAL 9.9EPSS 0.92%
CVE-2026-85706
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
gitlab/gitlab · added 11 September 2026
KEVCRITICAL 10.0EPSS 93.0%
CVE-2026-81578
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
papercut/papercut mf · papercut/papercut ng · added 31 August 2026
KEVHIGH 8.8EPSS 84.6%
CVE-2026-82078
PaperCut NG/MF Unsafe Reflection Vulnerability
papercut/papercut mf · papercut/papercut ng · added 31 August 2026
KEVCRITICAL 9.4EPSS 61.4%

16 September 2026

21 days ago · 2 CVEs

CVE-2026-48710
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
encode/starlette · redhat/ai inference server · redhat/ansible automation platform · added 2 September 2026
KEVMEDIUM 6.5EPSS 7.06%
CVE-2026-59822
BerriAI LiteLLM Improper Authentication Vulnerability
litellm/litellm · added 2 September 2026
KEVHIGH 8.8EPSS 0.84%

17 September 2026

20 days ago · 1 CVE

CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
cisco/asyncos · added 14 September 2026
KEVCRITICAL 9.8EPSS 28.3%

18 September 2026

19 days ago · 1 CVE

CVE-2026-85046
Google Chromium V8 Type Confusion Vulnerability
google/chrome · google/v8 · added 4 September 2026
KEVHIGH 8.8EPSS 48.9%

19 September 2026

18 days ago · 3 CVEs

CVE-2026-58704
Google Pixel Improper Authorization Vulnerability
google/android · added 16 September 2026
KEVHIGH 8.8EPSS 0.59%
CVE-2026-76460
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
cisco/identity services engine · cisco/identity services engine passive identity connector · added 16 September 2026
KEVCRITICAL 10.0EPSS 14.0%
CVE-2026-87886
Acronis Backup Incorrect Default Permissions Vulnerability
acronis/acronis backup · added 16 September 2026
KEVHIGH 7.8EPSS 0.23%

21 September 2026

16 days ago · 3 CVEs

CVE-2025-39682
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
linux/linux kernel · debian/debian linux · siemens/simatic cn 4100 firmware · added 18 September 2026
KEVCRITICAL 9.8EPSS 2.88%
CVE-2025-39964
Linux Kernel Race Condition Vulnerability
linux/linux kernel · siemens/simatic s7-1500 cpu 1518-4 pn\/dp mfp firmware · siemens/simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware · added 18 September 2026
KEVMEDIUM 5.5EPSS 1.28%
CVE-2026-53266
Linux Kernel Out-of-Bounds Write Vulnerability
linux/linux kernel · added 18 September 2026
KEVHIGH 8.8EPSS 0.83%

22 September 2026

15 days ago · 2 CVEs

CVE-2026-81963
Microsoft Windows Link Following Vulnerability
microsoft/windows 11 23h2 · microsoft/windows 11 24h2 · microsoft/windows 11 25h2 · added 8 September 2026
KEVHIGH 7.8EPSS 0.39%
CVE-2026-85880
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
microsoft/windows 10 1607 · microsoft/windows 10 1809 · microsoft/windows 10 21h2 · added 8 September 2026
KEVHIGH 7.8EPSS 3.62%

23 September 2026

14 days ago · 1 CVE

CVE-2026-87491
Google Chromium V8 Out of Bounds Write Vulnerability
google/chrome · added 9 September 2026
KEVHIGH 8.8EPSS 3.14%

24 September 2026

13 days ago · 1 CVE

CVE-2026-7273
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
zyxel/gs1900-8 firmware · zyxel/gs1900-8hp firmware · zyxel/gs1900-10hp firmware · added 21 September 2026
KEVHIGH 8.8EPSS 2.50%

25 September 2026

12 days ago · 6 CVEs

CVE-2026-85102
Check Point Multiple Products Improper Certificate Validation Vulnerability
checkpoint/gaia embedded · checkpoint/gaia os · added 22 September 2026
KEVCRITICAL 9.8EPSS 7.55%
CVE-2026-93616
Check Point Multiple Products Path Traversal Vulnerability
checkpoint/multi-domain security management · checkpoint/quantum security management · added 22 September 2026
KEVCRITICAL 9.8EPSS 19.7%
CVE-2026-93952
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
arista/velocloud orchestrator · added 22 September 2026
KEVCRITICAL 9.5EPSS 1.06%
CVE-2026-94127
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
f5/big-ip access policy manager · added 22 September 2026
KEVCRITICAL 9.3EPSS 2.23%
CVE-2026-42016
JFrog Artifactory Incorrect Authorization Vulnerability
jfrog/artifactory · added 11 September 2026
KEVHIGH 8.8EPSS 8.64%
CVE-2026-42018
JFrog Artifactory Improper Authentication Vulnerability
jfrog/artifactory · added 11 September 2026
KEVHIGH 7.5EPSS 9.80%

27 September 2026

10 days ago · 2 CVEs

CVE-2026-5430
WSO2 Multiple Products Path Traversal Vulnerability
wso2/api control plane · wso2/api manager · wso2/traffic manager · added 24 September 2026
KEVCRITICAL 10.0EPSS 0.59%
CVE-2026-71362
Adobe Commerce and Magento Incorrect Authorization Vulnerability
adobe/commerce · adobe/commerce b2b · adobe/magento · added 24 September 2026
KEVCRITICAL 9.1EPSS 87.5%

28 September 2026

9 days ago · 3 CVEs

CVE-2026-65660
Microsoft SharePoint Code Injection Vulnerability
microsoft/sharepoint server · added 25 September 2026
KEVHIGH 8.8EPSS 2.10%
CVE-2026-67279
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
mikrotik/routeros · added 25 September 2026
KEVMEDIUM 6.9EPSS 1.03%
CVE-2026-87902
WordPress Core Remote File Inclusion Vulnerability
wordpress/wordpress · added 25 September 2026
KEVEXPLOITHIGH 8.1EPSS 46.1%

30 September 2026

7 days ago · 2 CVEs

CVE-2026-88771
Citrix NetScaler Improper Input Validation Vulnerability
citrix/netscaler application delivery controller · citrix/netscaler gateway · added 27 September 2026
KEVCRITICAL 9.5EPSS 1.08%
CVE-2026-88772
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
citrix/netscaler application delivery controller · citrix/netscaler gateway · added 27 September 2026
KEVCRITICAL 9.5EPSS 1.30%

2 October 2026

5 days ago · 1 CVE

CVE-2026-86950
Apple Multiple Products Out-of-Bounds Write Vulnerability
apple/ipados · apple/iphone os · apple/macos · added 29 September 2026
KEVHIGH 8.8EPSS 1.24%

3 October 2026

4 days ago · 1 CVE

CVE-2026-76504
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
cisco/catalyst sd-wan manager · added 30 September 2026
KEVCRITICAL 9.8EPSS 1.82%

4 October 2026

3 days ago · 1 CVE

CVE-2026-104286
Fortinet FortiMail Path Traversal Vulnerability
fortinet/fortimail · added 1 October 2026
KEVCRITICAL 9.8EPSS 2.20%

5 October 2026

2 days ago · 2 CVEs

CVE-2026-102489
Zammad GmbH Zammad Session Fixation Vulnerability
zammad/zammad · added 2 October 2026
KEVCRITICAL 9.4EPSS 1.40%
CVE-2026-102490
Zammad GmbH Zammad Improper Privilege Management Vulnerability
zammad/zammad · added 2 October 2026
KEVCRITICAL 9.4EPSS 0.63%

Due today

7 October 2026

today · 1 CVE

CVE-2026-88779
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
citrix/netscaler application delivery controller · citrix/netscaler gateway · added 4 October 2026
KEVHIGH 8.7EPSS 0.59%

How to use the dates

Binding Operational Directive 22-01 obliges US federal civilian agencies to remediate each KEV entry by its due date. Nothing obliges a UK organisation, but the catalogue is the shortest list of vulnerabilities that are definitely being exploited, and the due dates are a ready-made prioritisation: CISA sets them shorter when the exploitation is broad or the impact severe. Treat an entry in your estate as an emergency change regardless of the date, and treat an overdue one as a reason to hunt for prior compromise as well as to patch.

The CVE watchlist narrows this to your own products and includes KEV additions in its feed and email; each CVE Explorer page shows the deadline alongside the CVSS and EPSS scores. Data from CISA, refreshed every four hours.