Zero-day report: February 2026
CISA added 28 exploited vulnerabilities to its catalog in February 2026, 11 more than January (17). 12 were zero-days, listed within a week of going public. 2 are known to be used by ransomware. The most-hit vendor was Microsoft, with 8.
By technology
Most-hit vendors
Every flaw added in February 2026
- Cisco · SD-WANCisco SD-WAN Path Traversal Vulnerability
- Cisco · Catalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
- Soliton Systems K.K · FileZenSoliton Systems K.K FileZen OS Command Injection Vulnerability
- Roundcube · WebmailRoundCube Webmail Deserialization of Untrusted Data Vulnerability
- Roundcube · WebmailRoundCube Webmail Cross-site Scripting Vulnerability
- GitLab · GitLabGitLab Server-Side Request Forgery (SSRF) Vulnerability
- Dell · RecoverPoint for Virtual Machines (RP4VMs)Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
- Microsoft · Windows Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
- Synacor · Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
- TeamT5 · ThreatSonar Anti-RansomwareTeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
- Google · ChromiumGoogle Chromium CSS Use-After-Free Vulnerability
- BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
- Microsoft · Configuration ManagerMicrosoft Configuration Manager SQL Injection Vulnerability
- Notepad++ · Notepad++Notepad++ Download of Code Without Integrity Check Vulnerability
- SolarWinds · Web Help DeskSolarWinds Web Help Desk Security Control Bypass Vulnerability
- Apple · Multiple ProductsApple Multiple Buffer Overflow Vulnerability
- Microsoft · WindowsMicrosoft Windows Shell Protection Mechanism Failure Vulnerability
- Microsoft · WindowsMicrosoft MSHTML Framework Protection Mechanism Failure Vulnerability
- Microsoft · OfficeMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
- Microsoft · WindowsMicrosoft Windows Type Confusion Vulnerability
- Microsoft · WindowsMicrosoft Windows NULL Pointer Dereference Vulnerability
- Microsoft · WindowsMicrosoft Windows Improper Privilege Management Vulnerability
- React Native Community · CLIReact Native Community CLI OS Command Injection Vulnerability
- SmarterTools · SmarterMailSmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
- Sangoma · FreePBX Sangoma FreePBX Improper Authentication Vulnerability
- GitLab · Community and Enterprise EditionsGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
- SolarWinds · Web Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- Sangoma · FreePBX Sangoma FreePBX OS Command Injection Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.