77 actively-exploited / critical CVEs correlated to FedRAMP-authorized products. Click a CVE for its detail and every affected product.
| Severity | CVE | Affected products | Src | Published |
|---|---|---|---|---|
| critical | CVE-2026-9074 | IBM | NVD | 2026-07-08 |
| critical | CVE-2026-40141 | BeyondTrust | NVD | 2026-07-06 |
| critical | CVE-2026-40139 | BeyondTrust | NVD | 2026-07-06 |
| critical | CVE-2026-41106 | Microsoft | NVD | 2026-07-02 |
| critical | CVE-2026-13775 | Google, Microsoft | NVD | 2026-06-30 |
| critical | CVE-2026-8655 | Citrix | NVD | 2026-06-30 |
| critical | CVE-2026-8452 | Citrix | NVD | 2026-06-30 |
| critical | CVE-2026-14120 | NVD | 2026-06-30 | |
| critical | CVE-2026-14109 | NVD | 2026-06-30 | |
| critical | CVE-2026-14106 | NVD | 2026-06-30 | |
| critical | CVE-2026-14104 | NVD | 2026-06-30 | |
| critical | CVE-2026-14101 | NVD | 2026-06-30 | |
| critical | CVE-2026-13785 | NVD | 2026-06-30 | |
| critical | CVE-2026-13782 | Google, Microsoft | NVD | 2026-06-30 |
| critical | CVE-2026-13781 | Google, Microsoft | NVD | 2026-06-30 |
| critical | CVE-2026-13780 | Google, Microsoft | NVD | 2026-06-30 |
| critical | CVE-2026-13776 | Google, Microsoft | NVD | 2026-06-30 |
| critical | CVE-2026-11720 | NVD | 2026-06-29 | |
| critical | CVE-2026-35273 | Oracle | KEV | 2026-06-12 |
| critical | CVE-2026-33825 | Microsoft | KEV | 2026-04-22 |
| critical | CVE-2023-21529 | Microsoft | KEV | 2026-04-13 |
| critical | CVE-2026-20131 | AppDynamics (a Cisco company), Cisco Systems Inc., Duo Security (A Cisco Company) | KEV | 2026-03-19 |
| critical | CVE-2017-17674 | BMC Software | NVD | 2021-05-19 |
| high | CVE-2008-4128 | Cisco Systems Inc., Duo Security (A Cisco Company) | KEV | 2026-07-13 |
| high | CVE-2026-3144 | IBM | NVD | 2026-07-08 |
| high | CVE-2026-13020 | ESRI, Microsoft | NVD | 2026-07-07 |
| high | CVE-2026-48282 | Adobe | KEV | 2026-07-07 |
| medium | CVE-2026-9182 | ESRI, Microsoft | NVD | 2026-07-06 |
| high | CVE-2026-57983 | Microsoft | NVD | 2026-07-03 |
| medium | CVE-2026-26145 | Microsoft | NVD | 2026-07-02 |
| high | CVE-2026-45659 | Microsoft | KEV | 2026-07-01 |
| high | CVE-2026-13772 | IBM | NVD | 2026-06-30 |
| high | CVE-2026-11541 | IBM | NVD | 2026-06-30 |
| high | CVE-2026-13449 | IBM | NVD | 2026-06-30 |
| medium | CVE-2026-13773 | IBM | NVD | 2026-06-30 |
| high | CVE-2026-11714 | IBM | NVD | 2026-06-30 |
| high | CVE-2026-11546 | IBM | NVD | 2026-06-30 |
| high | CVE-2026-12569 | PTC | KEV | 2026-06-25 |
| high | CVE-2026-20230 | AppDynamics (a Cisco company), Cisco Systems Inc., Duo Security (A Cisco Company) | KEV | 2026-06-25 |
| high | CVE-2026-9072 | IBM | NVD | 2026-06-22 |