Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Mar 25, 2022 | CVE-2022-26143 | Mitel · MiCollab, MiVoice Business Express | MiCollab, MiVoice Business Express Access Control Vulnerability | Critical 9.8 | 87.3% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2022-21999 Ransomware | Microsoft · Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | High 7.8 | 41.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2021-42237 Ransomware | Sitecore · XP | Sitecore XP Remote Command Execution Vulnerability | Critical 9.8 | 97.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2021-22941 Ransomware | Citrix · ShareFile | Citrix ShareFile Improper Access Control Vulnerability | Critical 9.8 | 53.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-9377 | D-Link · DIR-610 Devices | D-Link DIR-610 Devices Remote Command Execution | High 8.8 | 21.9% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-9054 | Zyxel · Multiple Network-Attached Storage (NAS) Devices | Zyxel Multiple NAS Devices OS Command Injection Vulnerability | Critical 9.8 | 100.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-7247 | OpenBSD · OpenSMTPD | OpenSMTPD Remote Code Execution Vulnerability | Critical 9.8 | 99.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-5410 | VMware Tanzu · Spring Cloud Configuration (Config) Server | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | High 7.5 | 95.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-25223 | Sophos · SG UTM | Sophos SG UTM Remote Code Execution Vulnerability | Critical 9.8 | 96.8% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-2506 | QNAP Systems · Helpdesk | QNAP Helpdesk Improper Access Control Vulnerability | High 7.3 | 2.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-2021 Ransomware | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | Critical 10.0 | 4.4% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-1956 | Apache · Kylin | Apache Kylin OS Command Injection Vulnerability | High 8.8 | 97.4% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2020-1631 | Juniper · Junos OS | Juniper Junos OS Path Traversal Vulnerability | High 8.8 | 4.9% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-6340 | Drupal · Core | Drupal Core Remote Code Execution Vulnerability | High 8.1 | 92.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-2616 | Oracle · BI Publisher (Formerly XML Publisher) | Oracle BI Publisher Unauthorized Access Vulnerability | High 7.2 | 92.2% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-16920 | D-Link · Multiple Routers | D-Link Multiple Routers Command Injection Vulnerability | Critical 9.8 | 100.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-15107 Ransomware | Webmin · Webmin | Webmin Command Injection Vulnerability | Critical 9.8 | 99.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-12991 | Citrix · SD-WAN and NetScaler | Citrix SD-WAN and NetScaler Command Injection Vulnerability | High 8.8 | 74.1% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-12989 | Citrix · SD-WAN and NetScaler | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | Critical 9.8 | 95.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-11043 Ransomware | PHP · FastCGI Process Manager (FPM) | PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | High 8.7 | 99.8% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-10068 | Kentico · Xperience | Kentico Xperience Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 95.1% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-1003030 | Jenkins · Matrix Project Plugin | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | Critical 9.9 | 97.1% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2019-0903 | Microsoft · Graphics Device Interface (GDI) | Microsoft GDI Remote Code Execution Vulnerability | High 8.8 | 21.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-8414 | Microsoft · Windows | Microsoft Windows Shell Remote Code Execution Vulnerability | High 8.8 | 72.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-8373 | Microsoft · Internet Explorer Scripting Engine | Microsoft Scripting Engine Memory Corruption Vulnerability | High 7.5 | 61.8% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-6961 | VMware · SD-WAN Edge | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | High 8.1 | 85.3% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-14839 | LG · N1A1 NAS | LG N1A1 NAS Remote Command Execution Vulnerability | Critical 9.8 | 89.2% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-1273 Ransomware | VMware Tanzu · Spring Data Commons | VMware Tanzu Spring Data Commons Property Binder Vulnerability | Critical 9.8 | 97.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-11138 Ransomware | Quest · KACE System Management Appliance | Quest KACE System Management Appliance Remote Command Execution Vulnerability | Critical 9.8 | 91.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-0147 | Cisco · Secure Access Control System (ACS) | Cisco Secure Access Control System Java Deserialization Vulnerability | Critical 9.8 | 18.2% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2018-0125 | Cisco · VPN Routers | Cisco VPN Routers Remote Code Execution Vulnerability | Critical 9.8 | 55.2% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-6334 | NETGEAR · DGN2200 Devices | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | High 8.8 | 72.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-6316 | Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | Citrix Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 73.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-3881 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Remote Code Execution Vulnerability | Critical 9.8 | 99.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-12617 | Apache · Tomcat | Apache Tomcat Remote Code Execution Vulnerability | High 8.1 | 100.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-12615 Ransomware | Apache · Tomcat | Apache Tomcat on Windows Remote Code Execution Vulnerability | High 8.1 | 99.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-0146 Ransomware | Microsoft · Windows | Microsoft Windows SMB Remote Code Execution Vulnerability | High 8.8 | 89.9% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2016-7892 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 8.8 | 19.1% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2016-4171 | Adobe · Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | High 7.8 | 20.1% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2016-1555 | NETGEAR · Wireless Access Point (WAP) Devices | NETGEAR Multiple WAP Devices Command Injection Vulnerability | Critical 9.8 | 98.3% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2016-11021 | D-Link · DCS-930L Devices | D-Link DCS-930L Devices OS Command Injection Vulnerability | High 7.2 | 69.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2016-10174 | NETGEAR · WNR2000v5 Router | NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | Critical 9.8 | 83.3% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2016-0752 | Rails · Ruby on Rails | Ruby on Rails Directory Traversal Vulnerability | High 7.5 | 95.5% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2015-4068 | Arcserve · Unified Data Protection (UDP) | Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | Critical 9.1 | 63.6% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2015-3035 | TP-Link · Multiple Archer Devices | TP-Link Multiple Archer Devices Directory Traversal Vulnerability | High 7.5 | 83.9% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2015-1427 | Elastic · Elasticsearch | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2015-1187 | D-Link and TRENDnet · Multiple Devices | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | Critical 9.8 | 82.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2015-0666 | Cisco · Prime Data Center Network Manager (DCNM) | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | High 7.5 | 40.4% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2014-6332 | Microsoft · Windows | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | High 8.8 | 94.9% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2014-6324 | Microsoft · Kerberos Key Distribution Center (KDC) | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | High 8.8 | 87.3% | Apr 15, 2022 |