Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Sep 29, 2025 | CVE-2025-10035 Ransomware | Fortra · GoAnywhere MFT | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | Critical 10.0 | 99.8% | Oct 20, 2025 |
| Sep 29, 2025 | CVE-2021-21311 | Adminer · Adminer | Adminer Server-Side Request Forgery Vulnerability | High 7.2 | 98.5% | Oct 20, 2025 |
| Sep 25, 2025 | CVE-2025-20362 | Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability | Medium 6.5 | 86.7% | Sep 26, 2025 |
| Sep 25, 2025 | CVE-2025-20333 | Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability | Critical 9.9 | 72.0% | Sep 26, 2025 |
| Sep 23, 2025 | CVE-2025-10585 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 9.0% | Oct 14, 2025 |
| Sep 11, 2025 | CVE-2025-5086 | Dassault Systèmes · DELMIA Apriso | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability | Critical 9.0 | 97.1% | Oct 2, 2025 |
| Sep 4, 2025 | CVE-2025-53690 | Sitecore · Multiple Products | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | Critical 9.0 | 60.7% | Sep 25, 2025 |
| Sep 4, 2025 | CVE-2025-48543 | Android · Runtime | Android Runtime Use-After-Free Vulnerability | High 8.8 | 0.7% | Sep 25, 2025 |
| Sep 4, 2025 | CVE-2025-38352 | Linux · Kernel | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability | High 7.8 | 1.4% | Sep 25, 2025 |
| Sep 3, 2025 | CVE-2025-9377 | TP-Link · Multiple Routers | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability | High 8.6 | 41.3% | Sep 24, 2025 |
| Sep 3, 2025 | CVE-2023-50224 | TP-Link · TL-WR841N | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability | Medium 6.5 | 20.0% | Sep 24, 2025 |
| Sep 2, 2025 | CVE-2025-55177 | Meta Platforms · WhatsApp | Meta Platforms WhatsApp Incorrect Authorization Vulnerability | Medium 5.4 | 13.5% | Sep 23, 2025 |
| Sep 2, 2025 | CVE-2020-24363 | TP-Link · TL-WA855RE | TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability | High 8.8 | 22.2% | Sep 23, 2025 |
| Aug 29, 2025 | CVE-2025-57819 | Sangoma · FreePBX | Sangoma FreePBX Authentication Bypass Vulnerability | Critical 10.0 | 95.2% | Sep 19, 2025 |
| Aug 26, 2025 | CVE-2025-7775 | Citrix · NetScaler | Citrix NetScaler Memory Overflow Vulnerability | Critical 9.2 | 20.7% | Aug 28, 2025 |
| Aug 25, 2025 | CVE-2025-48384 | Git · Git | Git Link Following Vulnerability | High 8.1 | 4.4% | Sep 15, 2025 |
| Aug 25, 2025 | CVE-2024-8069 | Citrix · Session Recording | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | Medium 5.1 | 18.2% | Sep 15, 2025 |
| Aug 25, 2025 | CVE-2024-8068 | Citrix · Session Recording | Citrix Session Recording Improper Privilege Management Vulnerability | Medium 5.1 | 3.5% | Sep 15, 2025 |
| Aug 21, 2025 | CVE-2025-43300 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Critical 10.0 | 65.2% | Sep 11, 2025 |
| Aug 18, 2025 | CVE-2025-54948 | Trend Micro · Apex One | Trend Micro Apex One OS Command Injection Vulnerability | Critical 9.4 | 32.9% | Sep 8, 2025 |
| Aug 13, 2025 | CVE-2025-8876 | N-able · N-Central | N-able N-Central Command Injection Vulnerability | Critical 9.4 | 4.1% | Aug 20, 2025 |
| Aug 13, 2025 | CVE-2025-8875 | N-able · N-Central | N-able N-Central Insecure Deserialization Vulnerability | Critical 9.4 | 2.3% | Aug 20, 2025 |
| Aug 12, 2025 | CVE-2025-8088 Ransomware | RARLAB · WinRAR | RARLAB WinRAR Path Traversal Vulnerability | High 8.4 | 94.0% | Sep 2, 2025 |
| Aug 12, 2025 | CVE-2013-3893 | Microsoft · Internet Explorer | Microsoft Internet Explorer Resource Management Errors Vulnerability | High 8.8 | 87.6% | Sep 2, 2025 |
| Aug 12, 2025 | CVE-2007-0671 | Microsoft · Office | Microsoft Office Excel Remote Code Execution Vulnerability | High 8.8 | 44.1% | Sep 2, 2025 |
| Aug 5, 2025 | CVE-2022-40799 | D-Link · DNR-322L | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability | High 8.8 | 33.7% | Aug 26, 2025 |
| Aug 5, 2025 | CVE-2020-25079 | D-Link · DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability | High 8.8 | 54.0% | Aug 26, 2025 |
| Aug 5, 2025 | CVE-2020-25078 | D-Link · DCS-2530L and DCS-2670L Devices | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability | High 7.5 | 97.5% | Aug 26, 2025 |
| Jul 28, 2025 | CVE-2025-20337 | Cisco · Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | Critical 10.0 | 74.5% | Aug 18, 2025 |
| Jul 28, 2025 | CVE-2025-20281 | Cisco · Identity Services Engine | Cisco Identity Services Engine Injection Vulnerability | Critical 10.0 | 97.6% | Aug 18, 2025 |
| Jul 28, 2025 | CVE-2023-2533 | PaperCut · NG/MF | PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability | High 8.4 | 28.8% | Aug 18, 2025 |
| Jul 22, 2025 | CVE-2025-6558 | Google · Chromium | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | High 8.8 | 10.9% | Aug 12, 2025 |
| Jul 22, 2025 | CVE-2025-54309 | CrushFTP · CrushFTP | CrushFTP Unprotected Alternate Channel Vulnerability | Critical 9.0 | 93.5% | Aug 12, 2025 |
| Jul 22, 2025 | CVE-2025-49706 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Improper Authentication Vulnerability | Medium 6.5 | 99.1% | Jul 23, 2025 |
| Jul 22, 2025 | CVE-2025-49704 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Code Injection Vulnerability | High 8.8 | 100.0% | Jul 23, 2025 |
| Jul 22, 2025 | CVE-2025-2776 | SysAid · SysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | Critical 9.3 | 65.2% | Aug 12, 2025 |
| Jul 22, 2025 | CVE-2025-2775 | SysAid · SysAid On-Prem | SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability | Critical 9.3 | 43.2% | Aug 12, 2025 |
| Jul 20, 2025 | CVE-2025-53770 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 100.0% | Jul 21, 2025 |
| Jul 18, 2025 | CVE-2025-25257 | Fortinet · FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | Critical 9.6 | 99.9% | Aug 8, 2025 |
| Jul 14, 2025 | CVE-2025-47812 | Wing FTP Server · Wing FTP Server | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability | Critical 10.0 | 93.9% | Aug 4, 2025 |
| Jul 10, 2025 | CVE-2025-5777 Ransomware | Citrix · NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | Critical 9.3 | 100.0% | Jul 11, 2025 |
| Jul 7, 2025 | CVE-2019-9621 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability | High 7.5 | 81.0% | Jul 28, 2025 |
| Jul 7, 2025 | CVE-2019-5418 | Rails · Ruby on Rails | Rails Ruby on Rails Path Traversal Vulnerability | High 7.5 | 98.5% | Jul 28, 2025 |
| Jul 7, 2025 | CVE-2016-10033 | PHP · PHPMailer | PHPMailer Command Injection Vulnerability | Critical 9.8 | 99.7% | Jul 28, 2025 |
| Jul 7, 2025 | CVE-2014-3931 | Looking Glass · Multi-Router Looking Glass (MRLG) | Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability | Critical 9.8 | 29.0% | Jul 28, 2025 |
| Jul 2, 2025 | CVE-2025-6554 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.1 | 14.1% | Jul 23, 2025 |
| Jul 1, 2025 | CVE-2025-48928 | TeleMessage · TM SGNL | TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability | Medium 4.0 | 0.6% | Jul 22, 2025 |
| Jul 1, 2025 | CVE-2025-48927 | TeleMessage · TM SGNL | TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability | Medium 5.3 | 12.2% | Jul 22, 2025 |
| Jun 30, 2025 | CVE-2025-6543 | Citrix · NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | Critical 9.2 | 10.4% | Jul 21, 2025 |
| Jun 25, 2025 | CVE-2024-54085 | AMI · MegaRAC SPx | AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability | Critical 10.0 | 60.7% | Jul 16, 2025 |