Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jun 25, 2025 | CVE-2024-0769 | D-Link · DIR-859 Router | D-Link DIR-859 Router Path Traversal Vulnerability | Medium 5.3 | 82.7% | Jul 16, 2025 |
| Jun 25, 2025 | CVE-2019-6693 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | Medium 6.5 | 6.6% | Jul 16, 2025 |
| Jun 17, 2025 | CVE-2023-0386 | Linux · Kernel | Linux Kernel Improper Ownership Management Vulnerability | High 7.8 | 7.9% | Jul 8, 2025 |
| Jun 16, 2025 | CVE-2025-43200 | Apple · Multiple Products | Apple Multiple Products Unspecified Vulnerability | Medium 4.2 | 1.2% | Jul 7, 2025 |
| Jun 16, 2025 | CVE-2023-33538 | TP-Link · Multiple Routers | TP-Link Multiple Routers Command Injection Vulnerability | High 8.8 | 41.6% | Jul 7, 2025 |
| Jun 10, 2025 | CVE-2025-33053 | Microsoft · Windows | Microsoft Windows External Control of File Name or Path Vulnerability | High 8.8 | 87.1% | Jul 1, 2025 |
| Jun 10, 2025 | CVE-2025-24016 | Wazuh · Wazuh Server | Wazuh Server Deserialization of Untrusted Data Vulnerability | Critical 9.9 | 93.8% | Jul 1, 2025 |
| Jun 9, 2025 | CVE-2025-32433 | Erlang · Erlang/OTP | Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability | Critical 10.0 | 98.9% | Jun 30, 2025 |
| Jun 9, 2025 | CVE-2024-42009 | Roundcube · Webmail | RoundCube Webmail Cross-Site Scripting Vulnerability | Critical 9.3 | 82.9% | Jun 30, 2025 |
| Jun 5, 2025 | CVE-2025-5419 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | High 8.8 | 7.5% | Jun 26, 2025 |
| Jun 3, 2025 | CVE-2025-27038 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | High 7.5 | 1.0% | Jun 24, 2025 |
| Jun 3, 2025 | CVE-2025-21480 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | High 8.6 | 0.4% | Jun 24, 2025 |
| Jun 3, 2025 | CVE-2025-21479 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | High 8.6 | 0.8% | Jun 24, 2025 |
| Jun 2, 2025 | CVE-2025-3935 | ConnectWise · ScreenConnect | ConnectWise ScreenConnect Improper Authentication Vulnerability | High 8.1 | 3.6% | Jun 23, 2025 |
| Jun 2, 2025 | CVE-2025-35939 | Craft CMS · Craft CMS | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | Medium 5.3 | 1.4% | Jun 23, 2025 |
| Jun 2, 2025 | CVE-2024-56145 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | Critical 9.3 | 97.5% | Jun 23, 2025 |
| Jun 2, 2025 | CVE-2023-39780 | ASUS · RT-AX55 Routers | ASUS RT-AX55 Routers OS Command Injection Vulnerability | High 8.8 | 39.5% | Jun 23, 2025 |
| Jun 2, 2025 | CVE-2021-32030 | ASUS · Routers | ASUS Routers Improper Authentication Vulnerability | Critical 9.8 | 99.4% | Jun 23, 2025 |
| May 22, 2025 | CVE-2025-4632 | Samsung · MagicINFO 9 Server | Samsung MagicINFO 9 Server Path Traversal Vulnerability | Critical 9.8 | 24.1% | Jun 12, 2025 |
| May 19, 2025 | CVE-2025-4428 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | High 7.2 | 88.0% | Jun 9, 2025 |
| May 19, 2025 | CVE-2025-4427 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | Medium 5.3 | 99.9% | Jun 9, 2025 |
| May 19, 2025 | CVE-2025-27920 | Srimax · Output Messenger | Srimax Output Messenger Directory Traversal Vulnerability | High 7.2 | 1.9% | Jun 9, 2025 |
| May 19, 2025 | CVE-2024-27443 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 24.6% | Jun 9, 2025 |
| May 19, 2025 | CVE-2024-11182 | MDaemon · Email Server | MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability | Medium 5.3 | 33.3% | Jun 9, 2025 |
| May 19, 2025 | CVE-2023-38950 | ZKTeco · BioTime | ZKTeco BioTime Path Traversal Vulnerability | High 7.5 | 92.5% | Jun 9, 2025 |
| May 15, 2025 | CVE-2025-42999 Ransomware | SAP · NetWeaver | SAP NetWeaver Deserialization Vulnerability | Critical 9.1 | 12.9% | Jun 5, 2025 |
| May 15, 2025 | CVE-2024-12987 | DrayTek · Vigor Routers | DrayTek Vigor Routers OS Command Injection Vulnerability | High 7.3 | 98.2% | Jun 5, 2025 |
| May 14, 2025 | CVE-2025-32756 | Fortinet · Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | Critical 9.6 | 30.9% | Jun 4, 2025 |
| May 13, 2025 | CVE-2025-32709 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | High 7.8 | 1.8% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-32706 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | High 7.8 | 2.3% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-32701 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | High 7.8 | 1.4% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-30400 | Microsoft · Windows | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | High 7.8 | 1.9% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-30397 | Microsoft · Windows | Microsoft Windows Scripting Engine Type Confusion Vulnerability | High 7.5 | 27.3% | Jun 3, 2025 |
| May 12, 2025 | CVE-2025-47729 | TeleMessage · TM SGNL | TeleMessage TM SGNL Hidden Functionality Vulnerability | Low 1.9 | 0.4% | Jun 2, 2025 |
| May 7, 2025 | CVE-2024-6047 | GeoVision · Multiple Devices | GeoVision Devices OS Command Injection Vulnerability | Critical 9.8 | 10.1% | May 28, 2025 |
| May 7, 2025 | CVE-2024-11120 | GeoVision · Multiple Devices | GeoVision Devices OS Command Injection Vulnerability | Critical 9.8 | 28.4% | May 28, 2025 |
| May 6, 2025 | CVE-2025-27363 | FreeType · FreeType | FreeType Out-of-Bounds Write Vulnerability | High 8.1 | 27.8% | May 27, 2025 |
| May 5, 2025 | CVE-2025-3248 Ransomware | Langflow · Langflow | Langflow Missing Authentication Vulnerability | Critical 9.8 | 100.0% | May 26, 2025 |
| May 2, 2025 | CVE-2025-34028 | Commvault · Command Center | Commvault Command Center Path Traversal Vulnerability | Critical 9.3 | 97.6% | May 23, 2025 |
| May 2, 2025 | CVE-2024-58136 | Yiiframework · Yii | Yiiframework Yii Improper Protection of Alternate Path Vulnerability | Critical 9.0 | 87.8% | May 23, 2025 |
| May 1, 2025 | CVE-2024-38475 | Apache · HTTP Server | Apache HTTP Server Improper Escaping of Output Vulnerability | Critical 9.1 | 100.0% | May 22, 2025 |
| May 1, 2025 | CVE-2023-44221 | SonicWall · SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | High 7.2 | 76.2% | May 22, 2025 |
| Apr 29, 2025 | CVE-2025-31324 Ransomware | SAP · NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | Critical 10.0 | 99.5% | May 20, 2025 |
| Apr 28, 2025 | CVE-2025-42599 | Qualitia · Active! Mail | Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability | Critical 9.8 | 3.4% | May 19, 2025 |
| Apr 28, 2025 | CVE-2025-3928 | Commvault · Web Server | Commvault Web Server Unspecified Vulnerability | High 8.8 | 2.5% | May 19, 2025 |
| Apr 28, 2025 | CVE-2025-1976 | Broadcom · Brocade Fabric OS | Broadcom Brocade Fabric OS Code Injection Vulnerability | High 8.6 | 0.7% | May 19, 2025 |
| Apr 17, 2025 | CVE-2025-31201 | Apple · Multiple Products | Apple Multiple Products Arbitrary Read and Write Vulnerability | Critical 9.8 | 14.0% | May 8, 2025 |
| Apr 17, 2025 | CVE-2025-31200 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | Critical 9.8 | 20.9% | May 8, 2025 |
| Apr 17, 2025 | CVE-2025-24054 | Microsoft · Windows | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | Medium 6.5 | 62.3% | May 8, 2025 |
| Apr 16, 2025 | CVE-2021-20035 | SonicWall · SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | Medium 6.5 | 4.4% | May 7, 2025 |