CISA Known Exploited Vulnerabilities

• CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
  Added: June 11, 2026
  Vendor: Oracle | Product: PeopleSoft Enterprise PeopleTools
• CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability
  Added: June 10, 2026
  Vendor: Ivanti | Product: Sentry
• CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
  Added: June 8, 2026
  Vendor: Google | Product: Chromium V8
• CVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
  Added: June 8, 2026
  Vendor: Arista | Product: Extensible Operating System
• CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
  Added: June 8, 2026
  Vendor: Cisco | Product: Catalyst SD-WAN Manager
• CVE-2026-42271 BerriAI LiteLLM Command Injection Vulnerability
  Added: June 7, 2026
  Vendor: BerriAI | Product: LiteLLM
• CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability
  Added: June 7, 2026
  Vendor: Check Point | Product: Security Gateway
• CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
  Added: June 4, 2026
  Vendor: SolarWinds | Product: Serv-U
• CVE-2026-45247 Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
  Added: June 2, 2026
  Vendor: Mirasvit | Product: Mirasvit Full Page Cache Warmer
• CVE-2022-0492 Linux Kernel Improper Authentication Vulnerability
  Added: June 1, 2026
  Vendor: Linux | Product: Kernel