# cve.now: CISA Known Exploited Vulnerabilities

Entries listed in CISA KEV, newest first, 100 per page.

- [CVE-2026-76418](https://cve.now/CVE-2026-76418.md): Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of… (CVSS 8.6, KEV, Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…)
- [CVE-2026-114625](https://cve.now/CVE-2026-114625.md): Security Advisory 0199 (CVSS 9.9, KEV, Arista Networks VeloCloud Orchestrator)
- [CVE-2026-111497](https://cve.now/CVE-2026-111497.md): Out-of-Bounds Write in Google Brotli Decoder (CVSS 9.2, KEV, Google Brotli · node +6)
- [CVE-2026-109619](https://cve.now/CVE-2026-109619.md): RCE via stale global state (CVSS 9.2, KEV, PHP Group PHP)
- [CVE-2026-109618](https://cve.now/CVE-2026-109618.md): RCE via OOM corruption (CVSS 9.2, KEV, PHP Group PHP)

[Next page](https://cve.now/kev.md?cursor=WyIyMDI2LTEwLTE5VDA5OjIyOjAzLjg1NloiLCJDVkUtMjAyNi0xMDg4MzciXQ)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/vulnerabilities?filter=kev
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.