CISA Known Exploited Vulnerabilities
KEV additions — June 2026
12 CVEs entered the KEV catalog in June 2026.
Added June 25, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 8.6 | 0.0 % | June 28, 2026 |
Added June 15, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 6.5 | 1.7 % | June 29, 2026 |
Added June 12, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-35273ransomware | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 9.8 | 0.0 % | June 15, 2026 |
Added June 11, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-10520 | Ivanti Sentry OS Command Injection Vulnerability | 10 | 0.2 % | June 14, 2026 |
Added June 9, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-11645 | chromium-browser: Out of bounds memory access in V8 | — | 1.7 % | June 23, 2026 |
| CVE-2026-20245 | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 7.8 | 0.1 % | June 23, 2026 |
| CVE-2026-7473 | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 5.8 | 0.8 % | June 23, 2026 |
Added June 8, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-50751 | Check Point Security Gateway Improper Authentication Vulnerability | 9.3 | 17.7 % | June 11, 2026 |
Added June 5, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-28318 | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 7.5 | 0.1 % | June 19, 2026 |
Added June 3, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-45247 | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 9.8 | 27.5 % | June 6, 2026 |
Added June 2, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability | 7.8 | 6.1 % | June 5, 2026 |
| CVE-2025-48595 | Android Framework Integer Overflow Vulnerability | 8.4 | 0.0 % | June 5, 2026 |