February 2026
Published in February 2026
- criticalexploited2026-002: Multiple Vulnerabilities in Cisco Productscert-eu
- known exploitedpublic exploitCVE-2008-0015
- criticalGitLab Patch Release: 18.9.1, 18.8.5, 18.7.5gitlab
- known exploitedCVE-2019-19006
- criticalGitLab Patch Release: 18.9.1, 18.8.5, 18.7.5gitlab
- known exploitedpublic exploitCVE-2020-7796
- criticalexploitedCVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-22175
- criticalexploitedCVE-2022-20775: Cisco SD-WAN Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-39935
- criticalexploitedCVE-2025-49113: RoundCube Webmail Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedCVE-2022-20775
- unknownJenkins Security Advisory 2026-02-18jenkins
- known exploitedpublic exploitCVE-2024-43468
- criticalexploitedCVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerabilitycisa-kev
- known exploitedCVE-2024-7694
- criticalexploitedCVE-2026-2441: Google Chromium CSS Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-11953
- criticalexploitedCVE-2008-0015: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-15556
- criticalexploitedCVE-2024-7694: TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerabilit…cisa-kev
- known exploitedpublic exploitCVE-2025-40536
- criticalexploitedCVE-2026-1731: BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnera…cisa-kev
- known exploitedpublic exploitCVE-2025-40551
- criticalexploitedCVE-2025-15556: Notepad++ Download of Code Without Integrity Check Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-49113
- criticalexploitedCVE-2024-43468: Microsoft Configuration Manager SQL Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-64328
- criticalexploitedCVE-2026-20700: Apple Multiple Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-68461
- unknownLDAP authentication bypass in Agentless VPN and FSSOfortinet
- known exploitedpublic exploitCVE-2026-1731
- criticalGitLab Patch Release: 18.8.4, 18.7.4, 18.6.6gitlab
- known exploitedpublic exploitCVE-2026-20127
- criticalGitLab Patch Release: 18.8.4, 18.7.4, 18.6.6gitlab
- known exploitedpublic exploitCVE-2026-20700
- criticalGitLab AI Gateway Critical Patch Release: 18.6.2, 18.7.1, and 18.8.1gitlab
- known exploitedCVE-2026-21510
- criticalGitLab AI Gateway Critical Patch Release: 18.6.2, 18.7.1, and 18.8.1gitlab
- known exploitedCVE-2026-21513
- criticalGitLab AI Gateway Critical Patch Release: 18.6.2, 18.7.1, and 18.8.1gitlab
- known exploitedCVE-2026-21514
- criticalexploitedCVE-2026-24423: SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerabilitycisa-kev
- known exploitedCVE-2026-21519
- criticalexploitedCVE-2025-11953: React Native Community CLI OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2026-21525
- unknownGitLab Patch Release: 18.8.3, 18.7.3, 18.6.5gitlab
- known exploitedCVE-2026-21533
- unknownGitLab Patch Release: 18.8.3, 18.7.3, 18.6.5gitlab
- known exploitedCVE-2026-22769
- criticalexploitedCVE-2025-40551: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2026-2441
- criticalexploitedCVE-2025-64328: Sangoma FreePBX OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2026-24423
- known exploitedCVE-2026-25108