Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
4 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 23, 2026 | CVE-2026-114625 | Arista · VeloCloud Orchestrator | Arista VeloCloud Orchestrator SQL Injection Vulnerability | Critical 9.9 | 1.0% | Oct 26, 2026 |
| Sep 22, 2026 | CVE-2026-93952 | Arista · VeloCloud Orchestrator | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | Critical 10.0 | 1.4% | Sep 25, 2026 |
| Jul 27, 2026 | CVE-2026-16812 | Arista · VeloCloud Orchestrator | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | Critical 10.0 | 1.8% | Jul 30, 2026 |
| Jun 9, 2026 | CVE-2026-7473 | Arista · Extensible Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | Medium 5.8 | 1.1% | Jun 23, 2026 |