Changes

As of , since , our record of CISA's list holds 234 changes CISA's own file does not keep, 114 of them ransomware flags.

Latest changes

  1. CVE-2026-63077 JetBrains TeamCityRansomware use: Unknown to Known.
  2. CVE-2026-86060 MikroTik RouterOSEdited: description.
  3. CVE-2026-86060 MikroTik RouterOSEdited: notes.
  4. CVE-2026-84869 ConnectWise ScreenConnectEdited: description.
  5. CVE-2026-67277 MikroTik RouterOSEdited: description.
  6. CVE-2026-42016 JFrog ArtifactoryEdited: description.
  7. CVE-2026-59310 Broadcom VMware vCenterRansomware use: Unknown to Known.
  8. CVE-2026-20316 Cisco Secure Firewall Management Center (FMC)Ransomware use: Unknown to Known.
  9. CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS)Ransomware use: Unknown to Known.
  10. CVE-2019-0859 Microsoft Win32kRansomware use: Unknown to Known.
  11. CVE-2016-7255 Microsoft Win32kRansomware use: Unknown to Known.
  12. CVE-2025-14733 WatchGuard FireboxRansomware use: Unknown to Known.
  13. CVE-2022-37969 Microsoft WindowsRansomware use: Unknown to Known.
  14. CVE-2016-4117 Adobe Flash PlayerRansomware use: Unknown to Known.
  15. CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-inEdited: required action.
  16. CVE-2026-69836 Microsoft Entra IDRemoved from CISA's list.
  17. CVE-2021-43226 Microsoft WindowsRansomware use: Unknown to Known.
  18. CVE-2020-5135 SonicWall SonicOSRansomware use: Unknown to Known.
  19. CVE-2012-0158 Microsoft MSCOMCTL.OCXRansomware use: Unknown to Known.
  20. CVE-2025-62593 Ray-Project RayDeadline moved from 21 August 2026 to 20 August 2026. Listing date changed from 18 August 2026 to 17 August 2026.
  21. CVE-2025-60710 Microsoft WindowsRansomware use: Unknown to Known.
  22. CVE-2022-21882 Microsoft Win32kRansomware use: Unknown to Known.
  23. CVE-2021-4034 Red Hat PolkitRansomware use: Unknown to Known.
  24. CVE-2020-29574 Sophos CyberoamOSRansomware use: Unknown to Known.
  25. CVE-2020-0968 Microsoft Internet ExplorerRansomware use: Unknown to Known.
  26. CVE-2020-0618 Microsoft SQL ServerRansomware use: Unknown to Known.
  27. CVE-2019-5591 Fortinet FortiOSRansomware use: Unknown to Known.
  28. CVE-2019-0803 Microsoft Win32kRansomware use: Unknown to Known.
  29. CVE-2018-0802 Microsoft OfficeRansomware use: Unknown to Known.
  30. CVE-2016-0189 Microsoft Internet ExplorerRansomware use: Unknown to Known.
  31. CVE-2026-45659 Microsoft SharePoint ServerRansomware use: Unknown to Known.
  32. CVE-2026-34486 Apache TomcatEdited: description.
  33. CVE-2025-42999 SAP NetWeaverRansomware use: Unknown to Known.
  34. CVE-2025-24813 Apache TomcatEdited: description.
  35. CVE-2025-8088 RARLAB WinRARRansomware use: Unknown to Known.
  36. CVE-2024-23692 Rejetto HTTP File ServerRansomware use: Unknown to Known.
  37. CVE-2025-26399 SolarWinds Web Help DeskRansomware use: Unknown to Known.
  38. CVE-2026-15410 SonicWall SMA1000 AppliancesRansomware use: Unknown to Known.
  39. CVE-2026-15409 SonicWall SMA1000 AppliancesRansomware use: Unknown to Known.
  40. CVE-2026-12569 PTC Windchill and FlexPLMRansomware use: Unknown to Known.
  41. CVE-2021-40438 ApacheRansomware use: Unknown to Known.
  42. CVE-2026-0257 Palo Alto Networks PAN-OSRansomware use: Unknown to Known.
  43. CVE-2026-56155 Microsoft Active Directory Federation ServicesEdited: notes.
  44. CVE-2025-3248 LangflowRansomware use: Unknown to Known.
  45. CVE-2026-33825 Microsoft DefenderRansomware use: Unknown to Known.
  46. CVE-2026-10520 Ivanti SentryEdited: description.
  47. CVE-2026-50751 Check Point Security GatewayRansomware use: Unknown to Known.
  48. CVE-2026-48027 Nx ConsoleRansomware use: Unknown to Known.
  49. CVE-2026-45321 TanStackRansomware use: Unknown to Known.
  50. CVE-2019-15107 WebminRansomware use: Unknown to Known.
  51. CVE-2013-0422 Oracle Java Runtime Environment (JRE)Ransomware use: Unknown to Known.
  52. CVE-2024-57728 SimpleHelpRansomware use: Unknown to Known.
  53. CVE-2024-57726 SimpleHelpRansomware use: Unknown to Known.
  54. CVE-2024-1708 ConnectWise ScreenConnectRansomware use: Unknown to Known.
  55. CVE-2026-42208 BerriAI LiteLLMEdited: description.
  56. CVE-2026-0300 Palo Alto Networks PAN-OSEdited: required action.
  57. CVE-2026-31431 Linux KernelEdited: weakness list.
  58. CVE-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared)Ransomware use: Unknown to Known.
  59. CVE-2026-20122 Cisco Catalyst SD-WAN MangerEdited: notes.
  60. CVE-2025-52691 SmarterTools SmarterMailRansomware use: Unknown to Known.
  61. CVE-2024-27199 JetBrains TeamCityEdited: notes.
  62. CVE-2024-27199 JetBrains TeamCityRansomware use: Unknown to Known.
  63. CVE-2024-27198 JetBrains TeamCityEdited: notes.
  64. CVE-2023-27351 PaperCut NG/MFRansomware use: Unknown to Known.
  65. CVE-2023-21529 Microsoft Exchange ServerRansomware use: Unknown to Known.
  66. CVE-2026-21643 Fortinet FortiClient EMSEdited: name.
  67. CVE-2025-53521 F5 BIG-IPEdited: weakness list, description and name.
  68. CVE-2025-53521 F5 BIG-IPEdited: description.
  69. CVE-2025-43520 Apple Multiple ProductsEdited: description.
  70. CVE-2026-3909 Google SkiaEdited: notes.
  71. CVE-2018-14634 Linux KernelRenamed from Kernal to Kernel.
  72. CVE-2026-21385 Qualcomm Multiple ChipsetsEdited: notes.
  73. CVE-2026-23760 SmarterTools SmarterMailRansomware use: Unknown to Known.
  74. CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)Ransomware use: Unknown to Known.
  75. CVE-2026-21513 Microsoft WindowsEdited: notes.
  76. CVE-2026-21513 Microsoft WindowsEdited: description and name.
  77. CVE-2025-11953 React Native Community CLIEdited: notes.
  78. CVE-2018-14634 Linux KernelEdited: notes.
  79. CVE-2026-24423 SmarterTools SmarterMailRansomware use: Unknown to Known.
  80. CVE-2025-22225 VMware ESXiRansomware use: Unknown to Known.
  81. CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM)Removed from CISA's list.
  82. CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM)Restored to CISA's list.
  83. CVE-2024-51567 CyberPersons CyberPanelRansomware use: Unknown to Known.
  84. CVE-2024-49039 Microsoft WindowsRansomware use: Unknown to Known.
  85. CVE-2024-30088 Microsoft WindowsRansomware use: Unknown to Known.
  86. CVE-2024-9680 Mozilla FirefoxRansomware use: Unknown to Known.
  87. CVE-2026-21509 Microsoft OfficeEdited: description.
  88. CVE-2026-20805 Microsoft WindowsEdited: description.
  89. CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneViewRenamed from Hewlett Packard (HP) to Hewlett Packard Enterprise (HPE). Edited: description and name.
  90. CVE-2024-53704 SonicWall SonicOSRansomware use: Unknown to Known.
  91. CVE-2025-20393 Cisco Multiple ProductsEdited: notes.
  92. CVE-2021-34527 Microsoft WindowsDeadline moved from 20 July 2021 to 3 May 2022.
  93. CVE-2021-27065 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  94. CVE-2021-26858 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  95. CVE-2021-26857 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  96. CVE-2021-26855 Microsoft Exchange ServerDeadline moved from 16 April 2021 to 3 May 2022.
  97. CVE-2021-22900 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  98. CVE-2021-22899 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  99. CVE-2021-22894 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.
  100. CVE-2021-22893 Ivanti Pulse Connect SecureDeadline moved from 23 April 2021 to 3 May 2022.

By month