Threat Intelligence

Vulnerability Advisories

9 Realms tracks the CISA Known Exploited Vulnerabilities catalog and surfaces the threats most relevant to your environment. Click any entry for our full advisory.

Internet Threat Level: Normal· SANS Internet Storm Center

Ransomware-associated only

1,592 entries in CISA KEV

CVE-2026-42897

+3d

Microsoft · Microsoft

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Added May 15, 2026View Advisory →

CVE-2026-20182

+4d

Cisco · Catalyst SD-WAN

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Added May 14, 2026View Advisory →

CVE-2026-42208

+10d

BerriAI · LiteLLM

BerriAI LiteLLM SQL Injection Vulnerability

Added May 8, 2026View Advisory →

CVE-2026-6973

+11d

Ivanti · Endpoint Manager Mobile (EPMM)

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

Added May 7, 2026View Advisory →

CVE-2026-0300

+12d

Palo Alto Networks · PAN-OS

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

Added May 6, 2026View Advisory →

CVE-2026-31431

+17d

Linux · Kernel

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Added May 1, 2026View Advisory →

CVE-2026-41940

+18dRansomware

WebPros · cPanel & WHM and WP2 (WordPress Squared)

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

Added Apr 30, 2026View Advisory →

CVE-2024-1708

+20dRansomware

ConnectWise · ScreenConnect

ConnectWise ScreenConnect Path Traversal Vulnerability

Added Apr 28, 2026View Advisory →

CVE-2026-32202

+20d

Microsoft · Windows

Microsoft Windows Protection Mechanism Failure Vulnerability

Added Apr 28, 2026View Advisory →

CVE-2025-29635

+24d

D-Link · DIR-823X

D-Link DIR-823X Command Injection Vulnerability

Added Apr 24, 2026View Advisory →

CVE-2024-7399

+24d

Samsung · MagicINFO 9 Server

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Added Apr 24, 2026View Advisory →

CVE-2024-57728

+24dRansomware

SimpleHelp · SimpleHelp

SimpleHelp Path Traversal Vulnerability

Added Apr 24, 2026View Advisory →

CVE-2024-57726

+24dRansomware

SimpleHelp · SimpleHelp

SimpleHelp Missing Authorization Vulnerability

Added Apr 24, 2026View Advisory →

CVE-2026-39987

+25d

Marimo · Marimo

Marimo Remote Code Execution Vulnerability

Added Apr 23, 2026View Advisory →

CVE-2026-33825

+26d

Microsoft · Defender

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Added Apr 22, 2026View Advisory →

CVE-2026-20122

+28d

Cisco · Catalyst SD-WAN Manger

Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2026-20133

+28d

Cisco · Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2025-2749

+28d

Kentico · Kentico Xperience

Kentico Xperience Path Traversal Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2023-27351

+28dRansomware

PaperCut · NG/MF

PaperCut NG/MF Improper Authentication Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2025-48700

+28d

Synacor · Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2026-20128

+28d

Cisco · Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2025-32975

+28d

Quest · KACE Systems Management Appliance (SMA)

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2024-27199

+28dRansomware

JetBrains · TeamCity

JetBrains TeamCity Relative Path Traversal Vulnerability

Added Apr 20, 2026View Advisory →

CVE-2026-34197

+32d

Apache · ActiveMQ

Apache ActiveMQ Improper Input Validation Vulnerability

Added Apr 16, 2026View Advisory →

Page 1 of 67

Vulnerability data sourced from the CISA Known Exploited Vulnerabilities catalog. Threat level data from the SANS Internet Storm Center. Catalog contains 1,592 entries (version 2026.05.15).