Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
41 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 8, 2026 | CVE-2016-3081 | Apache · Struts | Apache Struts Command Injection Vulnerability | High 8.1 | 96.5% | Oct 11, 2026 |
| Aug 4, 2026 | CVE-2026-34486 | Apache · Tomcat | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | High 7.5 | 98.5% | Aug 7, 2026 |
| Apr 16, 2026 | CVE-2026-34197 | Apache · ActiveMQ | Apache ActiveMQ Improper Input Validation Vulnerability | High 8.8 | 98.3% | Apr 30, 2026 |
| May 1, 2025 | CVE-2024-38475 | Apache · HTTP Server | Apache HTTP Server Improper Escaping of Output Vulnerability | Critical 9.1 | 100.0% | May 22, 2025 |
| Apr 1, 2025 | CVE-2025-24813 | Apache · Tomcat | Apache Tomcat Path Equivalence Vulnerability | Critical 10.0 | 99.9% | Apr 22, 2025 |
| Feb 4, 2025 | CVE-2024-45195 | Apache · OFBiz | Apache OFBiz Forced Browsing Vulnerability | Critical 9.8 | 100.0% | Feb 25, 2025 |
| Sep 18, 2024 | CVE-2024-27348 | Apache · HugeGraph-Server | Apache HugeGraph-Server Improper Access Control Vulnerability | Critical 9.8 | 99.2% | Oct 9, 2024 |
| Aug 27, 2024 | CVE-2024-38856 | Apache · OFBiz | Apache OFBiz Incorrect Authorization Vulnerability | High 8.1 | 99.4% | Sep 17, 2024 |
| Aug 7, 2024 | CVE-2024-32113 | Apache · OFBiz | Apache OFBiz Path Traversal Vulnerability | Critical 9.1 | 99.9% | Aug 28, 2024 |
| May 23, 2024 | CVE-2020-17519 | Apache · Flink | Apache Flink Improper Access Control Vulnerability | Critical 9.1 | 98.0% | Jun 13, 2024 |
| Jan 8, 2024 | CVE-2023-27524 | Apache · Superset | Apache Superset Insecure Default Initialization of Resource Vulnerability | High 8.9 | 98.1% | Jan 29, 2024 |
| Nov 2, 2023 | CVE-2023-46604 Ransomware | Apache · ActiveMQ | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | Critical 10.0 | 100.0% | Nov 23, 2023 |
| Sep 6, 2023 | CVE-2023-33246 | Apache · RocketMQ | Apache RocketMQ Command Execution Vulnerability | Critical 9.8 | 96.6% | Sep 27, 2023 |
| May 12, 2023 | CVE-2016-8735 | Apache · Tomcat | Apache Tomcat Remote Code Execution Vulnerability | Critical 9.8 | 90.3% | Jun 2, 2023 |
| May 1, 2023 | CVE-2021-45046 Ransomware | Apache · Log4j2 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | Critical 9.0 | 100.0% | May 22, 2023 |
| Mar 7, 2023 | CVE-2022-33891 | Apache · Spark | Apache Spark Command Injection Vulnerability | High 8.8 | 93.2% | Mar 28, 2023 |
| Aug 25, 2022 | CVE-2022-24706 | Apache · CouchDB | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | Critical 9.8 | 92.5% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2022-24112 | Apache · APISIX | Apache APISIX Authentication Bypass Vulnerability | Critical 9.8 | 96.1% | Sep 15, 2022 |
| Mar 25, 2022 | CVE-2020-1956 | Apache · Kylin | Apache Kylin OS Command Injection Vulnerability | High 8.8 | 97.4% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-12617 | Apache · Tomcat | Apache Tomcat Remote Code Execution Vulnerability | High 8.1 | 100.0% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2017-12615 Ransomware | Apache · Tomcat | Apache Tomcat on Windows Remote Code Execution Vulnerability | High 8.1 | 99.7% | Apr 15, 2022 |
| Mar 25, 2022 | CVE-2013-2251 | Apache · Struts | Apache Struts Improper Input Validation Vulnerability | Critical 9.8 | 100.0% | Apr 15, 2022 |
| Mar 3, 2022 | CVE-2020-1938 | Apache · Tomcat | Apache Tomcat Improper Privilege Management Vulnerability | Critical 9.8 | 99.3% | Mar 17, 2022 |
| Feb 10, 2022 | CVE-2017-9791 | Apache · Struts 1 | Apache Struts 1 Improper Input Validation Vulnerability | Critical 9.8 | 98.9% | Aug 10, 2022 |
| Feb 10, 2022 | CVE-2016-3088 | Apache · ActiveMQ | Apache ActiveMQ Improper Input Validation Vulnerability | Critical 9.8 | 98.4% | Aug 10, 2022 |
| Jan 21, 2022 | CVE-2012-0391 | Apache · Struts 2 | Apache Struts 2 Improper Input Validation Vulnerability | Critical 9.8 | 75.6% | Jul 21, 2022 |
| Jan 21, 2022 | CVE-2006-1547 | Apache · Struts 1 | Apache Struts 1 ActionForm Denial-of-Service Vulnerability | High 7.5 | 54.6% | Jul 21, 2022 |
| Jan 18, 2022 | CVE-2020-13927 | Apache · Airflow's Experimental API | Apache Airflow's Experimental API Authentication Bypass | Critical 9.8 | 99.8% | Jul 18, 2022 |
| Jan 18, 2022 | CVE-2020-11978 | Apache · Airflow | Apache Airflow Command Injection | High 8.8 | 99.2% | Jul 18, 2022 |
| Dec 10, 2021 | CVE-2021-44228 Ransomware | Apache · Log4j2 | Apache Log4j2 Remote Code Execution Vulnerability | Critical 10.0 | 100.0% | Dec 24, 2021 |
| Dec 10, 2021 | CVE-2019-0193 | Apache · Solr | Apache Solr DataImportHandler Code Injection Vulnerability | High 7.2 | 83.5% | Jun 10, 2022 |
| Dec 1, 2021 | CVE-2021-40438 Ransomware | Apache · Apache | Apache HTTP Server-Side Request Forgery (SSRF) | Critical 9.0 | 100.0% | Dec 15, 2021 |
| Nov 3, 2021 | CVE-2021-42013 Ransomware | Apache · HTTP Server | Apache HTTP Server Path Traversal Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-41773 Ransomware | Apache · HTTP Server | Apache HTTP Server Path Traversal Vulnerability | High 7.5 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2020-17530 | Apache · Struts | Apache Struts Remote Code Execution Vulnerability | Critical 9.8 | 96.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-17558 | Apache · Solr | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | High 7.5 | 98.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-0211 | Apache · HTTP Server | Apache HTTP Server Privilege Escalation Vulnerability | High 7.8 | 65.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-11776 | Apache · Struts | Apache Struts Remote Code Execution Vulnerability | High 8.1 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-9805 | Apache · Struts | Apache Struts Deserialization of Untrusted Data Vulnerability | High 8.1 | 99.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-5638 Ransomware | Apache · Struts | Apache Struts Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-4437 | Apache · Shiro | Apache Shiro Code Execution Vulnerability | Critical 9.8 | 93.0% | May 3, 2022 |