Exploited / KEV

Known exploitation or KEV-listed

CISA KEV

Live sources

Cisco117 live · 30 seconds ago
Fortinet280 live · 1 minute ago
Juniper Networks52 live · 4 seconds ago
Palo Alto Networks59 live · 31 seconds ago
Veeam7 live · 11 seconds ago
VMware (Broadcom)source unavailable

Results

All Action required Exploited / KEV Recently updated No mitigation yet Watched

Cisco Fortinet Palo Alto Juniper Veeam VMwareToday This week This month

High7.8Fortinet Exploited CISA KEV Updated

Linux Kernel Vulnerability copy.fail - CVE-2026-31431

CVSSv3 Score: 7.8 CVE-2026-31431In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings.

CVE-2026-31431

Unclassified

May 13, 2026

Critical9.1Fortinet Exploited CISA KEV Updated

API authentication and authorization bypass

CVSSv3 Score: 9.1 An Improper Access Control vulnerability [CWE-284] in FortiClient EMS may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.Fortinet has observed this to be exploited in the wild and urges vulnerable customers to install the hotfix for FortiClient EMS 7.4.5 and 7.4.6, by following the instructio…

CVE-2026-35616

FortiClient

Apr 4, 2026

Critical9.8Fortinet Exploited CISA KEV

improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet For…

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

CVE-2026-21643

FortiClient

Feb 6, 2026

Critical9.8Fortinet Exploited CISA KEV

FortiOS: Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAn…

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.

CVE-2026-24858

FortiGateFirewallFortiOSFortiManager

Jan 27, 2026

Showing 4 of 4

Join the Discord Community

Discuss the latest advisories, swap patch-day notes with other infra teams, and get support — straight from the people who run VulniPulse.

Join the community

Help support VulniPulse

If you want to support server/domain costs, please donate below — much love ❤️

Donate