Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 72.55% cvelistv5 2026-01-26
cve-2025-53770 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 100.00% cvelistv5 2025-07-20
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.58% cvelistv5 2026-01-29
cve-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL 9.8 99.28% cvelistv5 2023-05-31