CVERadar

Featured Business Applications

The software most small and mid-sized businesses rely on, with the actively exploited vulnerabilities that affect it, what that means for your business, and exactly what to ask your IT provider or MSP. CVEs flagged KEV are confirmed exploited by CISA.

Microsoft 365, Exchange & SharePoint

What it is: Email, documents, file sharing and collaboration. On-premises Exchange and SharePoint servers are frequent targets.

Business risk: A breach can expose every mailbox and shared file, enable invoice fraud from your real email address, and give attackers a foothold for ransomware.

Notable CVEs on the radar

  • CVE-2025-53770: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-34473: Microsoft Exchange Server Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-26855: Microsoft Exchange Server Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2025-49704: Microsoft SharePoint Code Injection Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-34523: Microsoft Exchange Server Privilege Escalation Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2023-29357: Microsoft SharePoint Server Privilege Escalation Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2022-41082: Microsoft Exchange Server Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2020-0688: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2022-41040: Microsoft Exchange Server Server-Side Request Forgery Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2017-11882: Microsoft Office Memory Corruption Vulnerability (KEV, ransomware, EPSS 99.9%)
  • CVE-2025-49706: Microsoft SharePoint Improper Authentication Vulnerability (KEV, ransomware, EPSS 99.1%)
  • CVE-2024-21413: Microsoft Outlook Improper Input Validation Vulnerability (KEV, EPSS 94.7%)

Ask your IT provider

  • Are we on Exchange Online, or do we still run an on-premises Exchange/SharePoint server? If on-prem, is it fully patched this month?
  • Is MFA enforced for every user, including admins and shared mailboxes?
  • Are Office macros from the internet blocked, and is Defender for Office 365 (or equivalent) on?

Microsoft Windows & Windows Server

What it is: The operating system on most business PCs and servers.

Business risk: Windows flaws let attackers who get one click move to full control of a PC or the whole domain, the usual path to ransomware.

Notable CVEs on the radar

  • CVE-2019-0708: Microsoft Remote Desktop Services Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-34473: Microsoft Exchange Server Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-26855: Microsoft Exchange Server Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-34523: Microsoft Exchange Server Privilege Escalation Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2023-29357: Microsoft SharePoint Server Privilege Escalation Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2025-59287: Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability (KEV, EPSS 100.0%)
  • CVE-2022-41082: Microsoft Exchange Server Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2020-0688: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2022-41040: Microsoft Exchange Server Server-Side Request Forgery Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability (KEV, EPSS 98.8%)
  • CVE-2025-33053: Microsoft Windows External Control of File Name or Path Vulnerability (KEV, EPSS 87.0%)
  • CVE-2024-43451: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability (KEV, EPSS 84.3%)

Ask your IT provider

  • Are Windows updates applied within 14 days (critical within 72 hours) and how do you report compliance?
  • Is Remote Desktop closed to the internet?
  • Do we have EDR on every endpoint and server, monitored 24/7?

Google Chrome & Microsoft Edge

What it is: The web browsers your staff use all day.

Business risk: Browser zero-days are exploited by just visiting a bad or compromised website.

Notable CVEs on the radar

  • CVE-2023-4863: Google Chromium WebP Heap-Based Buffer Overflow Vulnerability (KEV, EPSS 100.0%)
  • CVE-2026-2441: Google Chromium CSS Use-After-Free Vulnerability (KEV, EPSS 55.0%)
  • CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability (KEV, EPSS 48.9%)
  • CVE-2025-14174: Google Chromium Out of Bounds Memory Access Vulnerability (KEV, EPSS 22.3%)
  • CVE-2024-7971: Google Chromium V8 Type Confusion Vulnerability (KEV, EPSS 21.1%)
  • CVE-2024-4947: Google Chromium V8 Type Confusion Vulnerability (KEV, EPSS 15.2%)
  • CVE-2025-6554: Google Chromium V8 Type Confusion Vulnerability (KEV, EPSS 14.1%)
  • CVE-2025-6558: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability (KEV, EPSS 10.9%)
  • CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability (KEV, EPSS 9.2%)
  • CVE-2025-5419: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability (KEV, EPSS 7.8%)
  • CVE-2025-10585: Google Chromium V8 Type Confusion Vulnerability (KEV, EPSS 6.1%)
  • CVE-2025-13223: Google Chromium V8 Type Confusion Vulnerability (KEV, EPSS 4.9%)

Ask your IT provider

  • Are browsers set to auto-update and relaunch within a day?
  • Can you show the version spread across our devices?
  • Are risky extensions blocked by policy?

Fortinet, SonicWall, Palo Alto & VPNs

What it is: Firewalls and remote-access VPNs that guard your network edge.

Business risk: Edge devices sit on the internet; one unpatched flaw can give attackers direct entry to the office network, often before anyone notices.

Notable CVEs on the radar

  • CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2019-11510: Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2023-35078: Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2018-13379: Fortinet FortiOS SSL VPN Path Traversal Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability (KEV, EPSS 100.0%)
  • CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2024-13159: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (KEV, EPSS 100.0%)
  • CVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2022-40684: Fortinet Multiple Products Authentication Bypass Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2025-22457: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (KEV, ransomware, EPSS 100.0%)

Ask your IT provider

  • What firmware are our firewall and VPN on, and when was it last updated?
  • Is the management interface reachable from the internet? It should not be.
  • Is VPN login protected by MFA, and are logs reviewed?

Cisco networking

What it is: Routers, switches, firewalls (ASA/FTD) and phone systems.

Business risk: Compromised network gear lets attackers watch or redirect traffic and survive reboots.

Notable CVEs on the radar

  • CVE-2021-1498: Cisco HyperFlex HX Data Platform Command Injection Vulnerability (KEV, EPSS 100.0%)
  • CVE-2020-3452: Cisco ASA and FTD Read-Only Path Traversal Vulnerability (KEV, EPSS 100.0%)
  • CVE-2025-20281: Cisco Identity Services Engine Injection Vulnerability (KEV, EPSS 97.6%)
  • CVE-2024-20439: Cisco Smart Licensing Utility Static Credential Vulnerability (KEV, EPSS 97.1%)
  • CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (KEV, EPSS 91.8%)
  • CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability (KEV, EPSS 89.3%)
  • CVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (KEV, EPSS 88.5%)
  • CVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability (KEV, EPSS 88.2%)
  • CVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability (KEV, EPSS 87.1%)
  • CVE-2025-20337: Cisco Identity Services Engine Injection Vulnerability (KEV, EPSS 74.5%)
  • CVE-2025-20333: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability (KEV, EPSS 71.2%)
  • CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (KEV, EPSS 66.6%)

Ask your IT provider

  • Which Cisco devices do we own and are they still supported?
  • Are IOS/ASA/FTD versions current?
  • Is web/admin management restricted to an internal network?

VMware vSphere, ESXi & Workstation

What it is: Virtualization that runs your servers.

Business risk: Ransomware gangs target ESXi to encrypt every server at once.

Notable CVEs on the radar

  • CVE-2021-21985: VMware vCenter Server Improper Input Validation Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-22005: VMware vCenter Server File Upload Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2024-38812: VMware vCenter Server Heap-Based Buffer Overflow Vulnerability (KEV, EPSS 54.6%)
  • CVE-2024-37079: Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability (KEV, EPSS 22.4%)
  • CVE-2026-22719: Broadcom VMware Aria Operations Command Injection Vulnerability (KEV, EPSS 18.3%)
  • CVE-2024-38813: VMware vCenter Server Privilege Escalation Vulnerability (KEV, EPSS 17.4%)
  • CVE-2025-41244: Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability (KEV, EPSS 8.6%)
  • CVE-2026-59310: Broadcom VMware vCenter Path Traversal Vulnerability (KEV, ransomware, EPSS 2.6%)
  • CVE-2025-22226: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability (KEV, EPSS 1.8%)
  • CVE-2025-22224: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability (KEV, EPSS 1.6%)
  • CVE-2025-22225: VMware ESXi Arbitrary Write Vulnerability (KEV, ransomware, EPSS 1.0%)

Ask your IT provider

  • Are ESXi and vCenter on supported, patched builds?
  • Is vCenter isolated from the general network?
  • Are backups immutable and stored off the virtualization platform?

Citrix NetScaler & Workspace

What it is: Remote access gateways and virtual desktops.

Business risk: Gateway flaws (like "Citrix Bleed") have let attackers hijack sessions and bypass MFA.

Notable CVEs on the radar

  • CVE-2019-19781: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2025-5777: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (KEV, EPSS 23.2%)
  • CVE-2025-7775: Citrix NetScaler Memory Overflow Vulnerability (KEV, EPSS 20.3%)
  • CVE-2024-8069: Citrix Session Recording Deserialization of Untrusted Data Vulnerability (KEV, EPSS 14.6%)
  • CVE-2025-6543: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (KEV, EPSS 10.6%)
  • CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (KEV, EPSS 5.3%)
  • CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability (KEV, EPSS 5.1%)
  • CVE-2026-3055: Citrix NetScaler Out-of-Bounds Read Vulnerability (KEV, EPSS 4.0%)
  • CVE-2024-8068: Citrix Session Recording Improper Privilege Management Vulnerability (KEV, EPSS 3.5%)
  • CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (KEV, EPSS 1.0%)

Ask your IT provider

  • Are NetScaler ADC/Gateway appliances on fixed builds?
  • After patching, were active sessions killed?
  • Is there logging to spot session hijacking?

QuickBooks, Sage & accounting tools

What it is: Accounting, payroll and the remote-management (RMM) tools providers use to manage them.

Business risk: Attackers want payment data and use compromised RMM/remote-support tools to reach many businesses at once.

Notable CVEs on the radar

  • CVE-2024-1709: ConnectWise ScreenConnect Authentication Bypass Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2024-57727: SimpleHelp Path Traversal Vulnerability (KEV, ransomware, EPSS 96.8%)
  • CVE-2024-1708: ConnectWise ScreenConnect Path Traversal Vulnerability (KEV, ransomware, EPSS 95.4%)
  • CVE-2024-57726: SimpleHelp Missing Authorization Vulnerability (KEV, ransomware, EPSS 66.4%)
  • CVE-2024-57728: SimpleHelp Path Traversal Vulnerability (KEV, ransomware, EPSS 64.5%)
  • CVE-2025-48927: TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability (KEV, EPSS 11.6%)
  • CVE-2026-48558: SimpleHelp Authentication Bypass Vulnerability (KEV, EPSS 5.7%)
  • CVE-2025-3935: ConnectWise ScreenConnect Improper Authentication Vulnerability (KEV, EPSS 3.5%)
  • CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability (KEV, EPSS 0.9%)
  • CVE-2025-48928: TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability (KEV, EPSS 0.6%)
  • CVE-2025-47729: TeleMessage TM SGNL Hidden Functionality Vulnerability (KEV, EPSS 0.4%)
  • CVE-2025-15467: CVE-2025-15467: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously cra… (not in KEV, EPSS 55.9%)

Ask your IT provider

  • Which remote-support/RMM tools can access our systems, and are they patched and MFA-protected?
  • Is accounting data backed up and access limited?
  • Do payment changes require call-back verification?

Adobe Acrobat, Reader & ColdFusion

What it is: PDF tools on every desktop, and ColdFusion web servers.

Business risk: Malicious PDFs remain a common way in; ColdFusion flaws expose web servers.

Notable CVEs on the radar

  • CVE-2024-34102: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability (KEV, EPSS 100.0%)
  • CVE-2023-29300: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2018-15961: Adobe ColdFusion Unrestricted File Upload Vulnerability (KEV, EPSS 100.0%)
  • CVE-2024-20767: Adobe ColdFusion Improper Access Control Vulnerability (KEV, EPSS 98.5%)
  • CVE-2025-54236: Adobe Commerce and Magento Improper Input Validation Vulnerability (KEV, EPSS 94.7%)
  • CVE-2017-3066: Adobe ColdFusion Deserialization Vulnerability (KEV, EPSS 90.6%)
  • CVE-2025-54253: Adobe Experience Manager Forms Code Execution Vulnerability (KEV, EPSS 88.3%)
  • CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability (KEV, EPSS 87.5%)
  • CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (KEV, EPSS 86.6%)
  • CVE-2026-48282: Adobe ColdFusion Path Traversal Vulnerability (KEV, EPSS 42.4%)
  • CVE-2020-9715: Adobe Acrobat Use-After-Free Vulnerability (KEV, EPSS 33.5%)
  • CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (KEV, EPSS 3.9%)

Ask your IT provider

  • Is Acrobat/Reader set to auto-update?
  • Do we run any ColdFusion servers?
  • Are PDFs from email scanned or opened in protected mode?

Zoom & collaboration apps

What it is: Video meetings and business phone systems.

Business risk: Flaws can expose calls, enable toll fraud, or install malware via trojanized updates.

Notable CVEs on the radar

  • CVE-2024-41713: Mitel MiCollab Path Traversal Vulnerability (KEV, ransomware, EPSS 97.2%)
  • CVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerability (KEV, EPSS 41.6%)
  • CVE-2024-55550: Mitel MiCollab Path Traversal Vulnerability (KEV, ransomware, EPSS 38.2%)

Ask your IT provider

  • Are meeting and phone apps auto-updated from official sources?
  • Is our phone system (3CX, Mitel, etc.) patched and not exposed to the internet?

WordPress & websites

What it is: Your public website, CMS and web server software.

Business risk: Hacked websites spread malware to customers, leak form data and hurt search rankings.

Notable CVEs on the radar

  • CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2017-5638: Apache Struts Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF) (KEV, ransomware, EPSS 100.0%)
  • CVE-2017-9841: PHPUnit Command Injection Vulnerability (KEV, EPSS 100.0%)
  • CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability (KEV, EPSS 100.0%)
  • CVE-2013-2251: Apache Struts Improper Input Validation Vulnerability (KEV, EPSS 100.0%)
  • CVE-2024-34102: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability (KEV, EPSS 100.0%)
  • CVE-2018-11776: Apache Struts Remote Code Execution Vulnerability (KEV, EPSS 100.0%)
  • CVE-2021-41773: Apache HTTP Server Path Traversal Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2018-7600: Drupal Core Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2024-4577: PHP-CGI OS Command Injection Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2024-45195: Apache OFBiz Forced Browsing Vulnerability (KEV, EPSS 100.0%)

Ask your IT provider

  • Who updates our CMS, plugins and themes, and how often?
  • Is there a web application firewall (e.g. Cloudflare)?
  • Are admin logins protected with MFA and backups tested?

File transfer & backup tools

What it is: Managed file transfer and backup software.

Business risk: Mass-exploitation of file-transfer tools has led to data theft from thousands of companies; backup flaws can disable recovery.

Notable CVEs on the radar

  • CVE-2023-0669: Fortra GoAnywhere MFT Remote Code Execution Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2025-31161: CrushFTP Authentication Bypass Vulnerability (KEV, ransomware, EPSS 100.0%)
  • CVE-2025-10035: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability (KEV, ransomware, EPSS 99.8%)
  • CVE-2024-4885: Progress WhatsUp Gold Path Traversal Vulnerability (KEV, EPSS 99.3%)
  • CVE-2024-50623: Cleo Multiple Products Unrestricted File Upload Vulnerability (KEV, ransomware, EPSS 98.6%)
  • CVE-2024-4358: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability (KEV, EPSS 97.5%)
  • CVE-2024-1212: Progress Kemp LoadMaster OS Command Injection Vulnerability (KEV, EPSS 95.4%)
  • CVE-2024-55956: Cleo Multiple Products Unauthenticated File Upload Vulnerability (KEV, ransomware, EPSS 94.0%)
  • CVE-2025-47812: Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability (KEV, EPSS 93.9%)
  • CVE-2025-54309: CrushFTP Unprotected Alternate Channel Vulnerability (KEV, EPSS 93.5%)
  • CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability (KEV, EPSS 77.4%)
  • CVE-2025-47813: Wing FTP Server Information Disclosure Vulnerability (KEV, EPSS 62.5%)

Ask your IT provider

  • Do we or our vendors use MOVEit, GoAnywhere, Cleo or CrushFTP?
  • Is Veeam (or our backup tool) patched and isolated?
  • Are backups tested and immutable?