Research · Sector

Exploited Vulnerabilities in Finance

29 confirmed exploited · 6 ransomware-linked · as of 2026-10-01

29 vulnerabilities we’ve flagged as relevant to Finance are confirmed exploited in the wild (CISA KEV), and 6 (21%) are tied to ransomware.

Ransomware in Finance, exploitation trends, and the full list — below.

Exploited Finance-relevant vulnerabilities

CVEProductKEV added
CVE-2026-88771Citrix NetScaler2026-09-27
CVE-2026-71362Adobe Commerce And Magento2026-09-24
CVE-2026-85102Check Point Multiple Products2026-09-22
CVE-2026-19490Citrix NetScaler2026-09-09
CVE-2025-25249Fortinet Multiple Products2026-09-09
CVE-2026-87491Google Chromium V82026-09-09
CVE-2026-49869Kestra OSS2026-09-02
CVE-2026-82329JFrog Artifactory2026-09-02
CVE-2026-53362Linux Kernel2026-08-27
CVE-2026-66384JFrog Artifactory2026-08-27
CVE-2026-21962Oracle HTTP Server And Oracle Weblogic Server Proxy Plug-In2026-08-24
CVE-2026-72530TrueConf Server2026-08-20
CVE-2026-50522Microsoft SharePoint2026-07-22
CVE-2026-16232Check Point SmartConsole2026-07-22
CVE-2026-15409SonicWall SMA1000 Appliances2026-07-14ransomware
CVE-2026-15410SonicWall SMA1000 Appliances2026-07-14ransomware
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools2026-06-12ransomware
CVE-2026-50751Check Point Security Gateway2026-06-08ransomware
CVE-2026-42897Microsoft Exchange Server2026-05-15
CVE-2026-42208BerriAI LiteLLM2026-05-08
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM)2026-05-07
CVE-2026-0300Palo Alto Networks PAN-OS2026-05-06
CVE-2026-31431Linux Kernel2026-05-01
CVE-2026-41940WebPros CPanel & WHM And WP2 (WordPress Squared)2026-04-30ransomware
CVE-2026-34621Adobe Acrobat And Reader2026-04-13
CVE-2026-35616Fortinet FortiClient EMS2026-04-06
CVE-2026-3055Citrix NetScaler2026-03-30
CVE-2025-53521F5 BIG-IP2026-03-27
CVE-2025-55182Meta React Server Components2025-12-05ransomware

How we count

This counts vulnerabilities that (a) defend.network has editorially tagged as relevant to the Finance sector in our vulnerability reports, and (b) CISA has confirmed exploited in the wild (in the KEV catalog). The sector tag reflects our editorial judgment about relevance, not a claim of exclusive impact — most vulnerabilities affect multiple sectors. Product names come from NVD/CISA (authoritative). Rows our reconciliation gate flags as mis-attributed are excluded. “Ransomware” uses CISA’s knownRansomwareUse flag. As of 2026-10-01.

Other sectors: Government · Healthcare · Technology  ·  State of Exploited Vulnerabilities

🤖 Generated deterministically from our editorial sector tags reconciled against the CISA KEV catalog. Free to cite with attribution to defend.network.