CISA's list that day

28 April 2026

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in ConnectWise ScreenConnect and Microsoft Windows. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2024-1708Path TraversalConnectWise ScreenConnectPatch nowRansomware use, listed within a year; Metasploit module0.95
CVE-2026-32202Protection Mechanism FailureMicrosoft WindowsPatch soon0.05