Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Dec 8, 2025 | CVE-2022-37055 | D-Link · Routers | D-Link Routers Buffer Overflow Vulnerability | Critical 9.8 | 55.5% | Dec 29, 2025 |
| Dec 5, 2025 | CVE-2025-55182 Ransomware | Meta · React Server Components | Meta React Server Components Remote Code Execution Vulnerability | Critical 10.0 | 99.7% | Dec 12, 2025 |
| Dec 3, 2025 | CVE-2021-26828 | OpenPLC · ScadaBR | OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability | High 8.8 | 39.1% | Dec 24, 2025 |
| Dec 2, 2025 | CVE-2025-48633 | Android · Framework | Android Framework Information Disclosure Vulnerability | Medium 5.5 | 0.3% | Dec 23, 2025 |
| Dec 2, 2025 | CVE-2025-48572 | Android · Framework | Android Framework Privilege Escalation Vulnerability | High 7.8 | 0.3% | Dec 23, 2025 |
| Nov 28, 2025 | CVE-2021-26829 | OpenPLC · ScadaBR | OpenPLC ScadaBR Cross-site Scripting Vulnerability | Medium 5.4 | 48.0% | Dec 19, 2025 |
| Nov 21, 2025 | CVE-2025-61757 | Oracle · Fusion Middleware | Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability | Critical 9.8 | 88.6% | Dec 12, 2025 |
| Nov 19, 2025 | CVE-2025-13223 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 4.9% | Dec 10, 2025 |
| Nov 18, 2025 | CVE-2025-58034 | Fortinet · FortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | Medium 6.7 | 54.7% | Nov 25, 2025 |
| Nov 14, 2025 | CVE-2025-64446 | Fortinet · FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | Critical 9.4 | 91.1% | Nov 21, 2025 |
| Nov 12, 2025 | CVE-2025-9242 | WatchGuard · Firebox | WatchGuard Firebox Out-of-Bounds Write Vulnerability | Critical 9.3 | 92.2% | Dec 3, 2025 |
| Nov 12, 2025 | CVE-2025-62215 | Microsoft · Windows | Microsoft Windows Race Condition Vulnerability | High 7.0 | 4.5% | Dec 3, 2025 |
| Nov 12, 2025 | CVE-2025-12480 | Gladinet · Triofox | Gladinet Triofox Improper Access Control Vulnerability | Critical 9.1 | 95.7% | Dec 3, 2025 |
| Nov 10, 2025 | CVE-2025-21042 | Samsung · Mobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | High 8.8 | 35.6% | Dec 1, 2025 |
| Nov 4, 2025 | CVE-2025-48703 | CWP · Control Web Panel | CWP Control Web Panel OS Command Injection Vulnerability | Critical 9.0 | 99.7% | Nov 25, 2025 |
| Nov 4, 2025 | CVE-2025-11371 | Gladinet · CentreStack and Triofox | Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability | High 7.5 | 92.1% | Nov 25, 2025 |
| Oct 30, 2025 | CVE-2025-41244 | Broadcom · VMware Aria Operations and VMware Tools | Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability | High 7.8 | 15.8% | Nov 20, 2025 |
| Oct 30, 2025 | CVE-2025-24893 | XWiki · Platform | XWiki Platform Eval Injection Vulnerability | Critical 9.8 | 100.0% | Nov 20, 2025 |
| Oct 28, 2025 | CVE-2025-6205 | Dassault Systèmes · DELMIA Apriso | Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability | Critical 9.1 | 67.2% | Nov 18, 2025 |
| Oct 28, 2025 | CVE-2025-6204 | Dassault Systèmes · DELMIA Apriso | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability | High 8.0 | 76.6% | Nov 18, 2025 |
| Oct 24, 2025 | CVE-2025-59287 | Microsoft · Windows | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 100.0% | Nov 14, 2025 |
| Oct 24, 2025 | CVE-2025-54236 | Adobe · Commerce and Magento | Adobe Commerce and Magento Improper Input Validation Vulnerability | Critical 9.1 | 95.4% | Nov 14, 2025 |
| Oct 22, 2025 | CVE-2025-61932 | Motex · LANSCOPE Endpoint Manager | Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability | Critical 9.8 | 2.8% | Nov 12, 2025 |
| Oct 20, 2025 | CVE-2025-61884 Ransomware | Oracle · E-Business Suite | Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability | High 7.5 | 95.9% | Nov 10, 2025 |
| Oct 20, 2025 | CVE-2025-33073 | Microsoft · Windows | Microsoft Windows SMB Client Improper Access Control Vulnerability | High 8.8 | 82.8% | Nov 10, 2025 |
| Oct 20, 2025 | CVE-2025-2747 | Kentico · Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 9.8 | 97.2% | Nov 10, 2025 |
| Oct 20, 2025 | CVE-2025-2746 | Kentico · Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 9.8 | 74.1% | Nov 10, 2025 |
| Oct 20, 2025 | CVE-2022-48503 | Apple · Multiple Products | Apple Multiple Products Unspecified Vulnerability | High 8.8 | 3.2% | Nov 10, 2025 |
| Oct 15, 2025 | CVE-2025-54253 | Adobe · Experience Manager (AEM) Forms | Adobe Experience Manager Forms Code Execution Vulnerability | Critical 10.0 | 80.8% | Nov 5, 2025 |
| Oct 14, 2025 | CVE-2025-59230 | Microsoft · Windows | Microsoft Windows Improper Access Control Vulnerability | High 7.8 | 2.7% | Nov 4, 2025 |
| Oct 14, 2025 | CVE-2025-47827 | IGEL · IGEL OS | IGEL OS Use of a Key Past its Expiration Date Vulnerability | Medium 4.6 | 5.2% | Nov 4, 2025 |
| Oct 14, 2025 | CVE-2025-24990 | Microsoft · Windows | Microsoft Windows Untrusted Pointer Dereference Vulnerability | High 7.8 | 6.5% | Nov 4, 2025 |
| Oct 14, 2025 | CVE-2016-7836 | SKYSEA · Client View | SKYSEA Client View Improper Authentication Vulnerability | Critical 9.8 | 19.2% | Nov 4, 2025 |
| Oct 9, 2025 | CVE-2021-43798 | Grafana Labs · Grafana | Grafana Path Traversal Vulnerability | High 7.5 | 88.5% | Oct 30, 2025 |
| Oct 7, 2025 | CVE-2025-27915 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability | Medium 5.4 | 4.1% | Oct 28, 2025 |
| Oct 6, 2025 | CVE-2025-61882 Ransomware | Oracle · E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | Critical 9.8 | 99.7% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2021-43226 Ransomware | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.8 | 3.3% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2021-22555 | Linux · Kernel | Linux Kernel Heap Out-of-Bounds Write Vulnerability | High 8.3 | 78.7% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2013-3918 | Microsoft · Windows | Microsoft Windows Out-of-Bounds Write Vulnerability | High 8.8 | 73.7% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2011-3402 | Microsoft · Windows | Microsoft Windows Remote Code Execution Vulnerability | High 8.8 | 78.1% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2010-3962 | Microsoft · Internet Explorer | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | High 8.1 | 96.8% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2010-3765 | Mozilla · Multiple Products | Mozilla Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 83.2% | Oct 27, 2025 |
| Oct 2, 2025 | CVE-2025-4008 | Smartbedded · Meteobridge | Smartbedded Meteobridge Command Injection Vulnerability | High 8.7 | 93.3% | Oct 23, 2025 |
| Oct 2, 2025 | CVE-2025-21043 | Samsung · Mobile Devices | Samsung Mobile Devices Out-of-Bounds Write Vulnerability | High 8.8 | 2.2% | Oct 23, 2025 |
| Oct 2, 2025 | CVE-2017-1000353 | Jenkins · Jenkins | Jenkins Remote Code Execution Vulnerability | Critical 9.8 | 99.7% | Oct 23, 2025 |
| Oct 2, 2025 | CVE-2015-7755 | Juniper · ScreenOS | Juniper ScreenOS Improper Authentication Vulnerability | Critical 9.8 | 61.1% | Oct 23, 2025 |
| Oct 2, 2025 | CVE-2014-6278 | GNU · GNU Bash | GNU Bash OS Command Injection Vulnerability | High 8.8 | 99.7% | Oct 23, 2025 |
| Sep 29, 2025 | CVE-2025-59689 | Libraesva · Email Security Gateway | Libraesva Email Security Gateway Command Injection Vulnerability | Medium 6.1 | 2.0% | Oct 20, 2025 |
| Sep 29, 2025 | CVE-2025-32463 | Sudo · Sudo | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability | Critical 9.3 | 56.3% | Oct 20, 2025 |
| Sep 29, 2025 | CVE-2025-20352 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability | High 7.7 | 40.6% | Oct 20, 2025 |